This notice explains current collection and relevant earlier website processing for California residents.
Updated 9 November 2026 · Version 3.2
Scope and notice at collection
This notice supplements the Privacy Policy. It does not assert that For Safety Group Inc. meets every applicability threshold of the CCPA, as amended. Where that law applies, its duties and rights apply to the relevant practice. The form’s privacy link provides this information before you choose to submit.
Current categories, purposes and retention
Swipe or scroll the table to read every column.
| Category | Examples and purpose | Retention |
|---|---|---|
| Identifiers | Name, email, request IP and reservation/reference identifiers; for delivery, security, requested correspondence and release-interest administration. | Correspondence normally up to 24 months. Reservation records until withdrawal, program closure or a separate product relationship, with limited acknowledgement/claim records where necessary. Request/security logs under provider settings and operational necessity. |
| Customer-record, professional and release-interest information | Organization and professional context, including role, company size, deployment regions, initial users, sites, use case and project timing; country/region, product selections, selected finish, quantity, acknowledgements and terms version. Used to answer your inquiry or administer the reservation. | Same correspondence/reservation criteria above, depending on the record. |
| Commercial and transaction information | Founding Edition selections and personalisation, billing/delivery details, price, order/edition reference, terms acknowledgement, payment/tax/refund status, support and email-delivery records. Supplied by you and Stripe, and used for purchase processing, fulfilment, contractual benefits, service, fraud prevention and recordkeeping. | While necessary for fulfilment, ongoing contractual benefits, support, applicable accounting/tax/legal duties and claims. Uncompleted checkouts are limited to reconciliation, abuse prevention and related enquiries or disputes. |
| Newsletter consent and preferences | Optional opt-in, email confirmation, consent text/version and withdrawal events. Used for requested product news and to respect an opt-out. | While subscribed; after withdrawal, only necessary consent, withdrawal and suppression evidence. |
| Internet or network activity | Requested path, time, browser/device, referrer and security signals used by hosting to operate and protect the site. | Provider configuration and operational necessity; application rate-limit keys use up to 10-minute windows and expired stored keys are removed on later requests. |
| Local settings | Light/Dark/Automatic appearance and audience preference in local storage; product identifiers, finishes and quantities in session storage for Your bag or Your setup. | Preferences: until changed or cleared. Bag/setup: the tab session, unless restored by the browser; until removed or cleared. Selections included in an inquiry follow correspondence retention. |
| Publicly available research information | Necessary cited names, official roles, organizations, events and sources used for accountable research. Public information is not treated as unrestricted permission to use it. | While required for the sourced record, corrections and methodology, subject to review. |
General website forms do not require precise location, government identifiers, passwords, financial credentials, health data or biometric identifiers. Do not supply those in a message. A purchase requires payment details on Stripe’s hosted checkout; 4SI does not receive or store full card numbers or card security codes.
Relevant earlier processing
Earlier versions within the preceding 12 months described optional, consented analytics: request identifiers and a pseudonymous hash; page/interaction activity; approximate location; network and possible organization inferences. These were used for website measurement, not verified personal identity. The former notice specified 90-day normal retention for raw analytics. This version does not collect those optional events or enrich visitors with network/organization lookups.
The Daily Risk Briefing and automated research service closed in October 2026. Historical subscription, delivery/suppression and archived research records may remain only under the criteria in the Privacy Policy; no new subscription or scheduled collection is offered here.
Sources and recipients
Current sources are you, your browser and hosting infrastructure, Stripe checkout/payment records, email-delivery status, and cited public publications. Current provider disclosures are Vercel for technical requests, processing, cookieless web analytics and private reservation/order records; Stripe for hosted checkout, payments, taxes and fraud prevention; Resend for requested messages, order/service emails and newsletter confirmations; engaged fulfilment and delivery providers for necessary purchase details; and authorized 4SI personnel or advisers for necessary handling.
Historical analytics used Vercel and Neon, with network/context lookups via IPinfo Lite, RDAP operators, DNS resolvers and GLEIF. Earlier briefing delivery used Resend and archived research snapshots used private Vercel storage. These historical categories are retained for transparency; the former Signal Analytics service has not been reactivated. Current cookieless Vercel Web Analytics counts public page views and aggregate visitors. Its data categories, exclusions and browser opt-out controls are described in the Privacy Policy.
No sale, sharing or targeted advertising
4SI does not sell personal information from the public website, share it for cross-context behavioral advertising, use it for targeted advertising or use sensitive personal information to infer characteristics. This includes information about minors; the public website is not designed to collect their information. There is no covered sale or sharing to opt out of, so the website has no separate “Do Not Sell or Share” switch. Global Privacy Control is consistent with this treatment. Required controls must precede any future covered practice.
California rights
Depending on the law that applies, you may request access, correction, deletion, restriction, a portable copy or other information; object to processing; withdraw consent; appeal a denied request; and exercise applicable opt-out or limitation rights. 4SI does not discriminate against people for exercising an applicable privacy right.
Send a request to contact@by4si.com or the postal address above. Identify the service or record and your jurisdiction. We may request proportionate verification and, for an agent, evidence of authority. Do not send an identity document unless we explain why a particular verification step is necessary and provide an appropriate channel.
Where the CCPA applies, rights include knowledge/access, deletion, correction, a portable copy, opt-out of covered sale/sharing and limitation of covered sensitive-information use. Verification is proportionate to the request and risk; an authorized agent must provide appropriate authority. Requests may be submitted by email or postal mail. Statutory exceptions and deadlines apply.