Cicrim — Legal & Privacy

Legal and privacy notices

Last updated: February 2026

This Legal & Privacy page explains how Cicrim Consulting (“Cicrim,” “we,” “us,” or “our”) handles information collected through our website and related interactions, including when you request information, register for events, subscribe to updates, or engage with our consulting and technology services (collectively, the “Services”).

Cicrim is a financial services and banking-focused consulting firm. Our work often involves regulator-aware digital transformation, AI implementation, risk management, and supporting technology enablement for community banks, regional banks, credit unions, and fintech partners. Because trust is core to our business, we apply security-first and privacy-by-design practices to how we collect, use, and protect information.

This notice describes (1) what information we collect, (2) how and why we use it, (3) when we share it, (4) the choices and rights you may have, and (5) how to contact us. If you are looking for terms governing your use of this site, please see the sections below and contact us for any questions.

If you are a client and we process information on your behalf under a professional services agreement, the applicable contract terms and client instructions will govern how data is handled for that engagement.

On this page

This Legal & Privacy notice includes the following sections:

Information we collect

Information you provide directly

You may choose to provide information when you contact us, request a consultation, download materials, register for an event, subscribe to updates, or complete forms on our website. Depending on the interaction, this may include your name, email address, phone number, organization, role/title, and any details you include in your message.

If you are a client or prospective client, you may also share information relevant to a project scope (for example: high-level program requirements, technical context, or operational constraints). We recommend you avoid submitting sensitive personal data through website forms unless requested through an appropriate secure channel.

Information collected automatically

When you access our website, we may automatically collect certain information about your device and browsing activity (“Usage Information”), such as IP address, device and browser type, operating system, pages viewed, time spent on pages, referral URLs, and similar diagnostic data.

The methods used to collect Usage Information may include:

Log information: Our servers may record diagnostic and security logs, such as IP address, browser type, timestamps, and pages requested.

Cookies and similar technologies: Cookies, pixels, tags, local storage, and similar tools (“Tracking Technologies”) may be used to support site functionality, understand performance, and improve user experience. Where required, we will provide choices through cookie controls.

Cookies

Cookies are small text files stored on your device. Some are set by us (“first-party cookies”) and some may be set by vendors that help us operate the site (“third-party cookies”). We may use:

  • Necessary cookies. Required for the website to function (e.g., page navigation, security protections, or form handling). Disabling these may impact core functionality.
  • Performance cookies. Help us understand traffic patterns and improve site performance (e.g., which pages are most visited and how users move through the site).
  • Preference cookies. Support optional features and user settings (e.g., remembering selections) to improve the experience.
  • Targeting cookies. Where used, support advertising measurement or audience building. If you disable these, you may still see contextual ads, but they may be less relevant.
Web beacons / pixels

These are small files or code snippets embedded on pages to understand page views and how users interact with content.

Embedded scripts

Scripts may be used to support site features, measure performance, detect fraud/abuse, or enable interactive components.

Information from third-party sources

We may receive information from third parties, such as event platforms, analytics providers, marketing partners, or referrals, in accordance with their policies and applicable law. We may also receive business contact details from professional networks or public sources for B2B outreach where permitted.

For client engagements, we may process information provided by clients or their authorized vendors under the applicable services agreement and instructions.

How we use information

We use information to operate our website, deliver requested materials, respond to inquiries, and support our consulting and technology services. Depending on context, purposes may include:

  • Responding to requests, inquiries, and support needs
  • Providing proposals, statements of work, or requested information about our services
  • Administering events, webinars, newsletters, and professional updates (with opt-out options)
  • Operating, maintaining, and improving the website and user experience
  • Conducting analytics, research, and internal reporting to improve offerings
  • Detecting, preventing, and responding to security incidents, fraud, or abuse
  • Complying with applicable legal, regulatory, and contractual requirements
  • Establishing, exercising, or defending legal rights and resolving disputes

Combined information. We may combine information collected through the website with information from other sources (such as event registrations or business communications) and use it consistent with this notice.

Aggregated / de-identified information. We may aggregate or de-identify data so it can no longer reasonably identify an individual. We may use this data to improve services, understand trends, and for business analytics.

Analytics and advertising technologies

We may use analytics tools to understand how visitors use our website and to improve performance and content quality. These tools may rely on cookies or similar technologies to collect Usage Information.

We may also work with service providers to measure the effectiveness of our marketing and to present information about Cicrim on third-party services. If we use interest-based advertising, it may involve technologies that recognize your browser or device over time. Where required, you can manage choices through cookie controls and browser settings.

For more information about managing these choices, see the “Your rights and choices” section below.

How we share information

We may share information in the following circumstances:

  • Service providers. We may share information with vendors that help operate our website and business (e.g., hosting, analytics, communications, security monitoring, event platforms). They are permitted to use information only to provide services to us.
  • Professional advisors. We may share information with legal, accounting, or compliance advisors as needed for business operations and risk management.
  • Client-directed sharing. For consulting engagements, we may share information as authorized by the client and governed by the applicable agreement.
  • Protection of Cicrim and others. We may disclose information if we believe it is necessary to comply with law, respond to lawful requests, enforce agreements, investigate potential misuse, or protect rights, safety, and security.
  • Business transfers. If we engage in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to applicable legal requirements.
  • Consent. We may share information when you direct us to do so or provide consent.

Public disclosures. If you submit content to public areas of the website (if any), it may be visible to others. Please use caution when posting in public areas.

Links to third-party sites

Our website may link to third-party websites or services for convenience. We do not control those third parties and are not responsible for their privacy practices. We encourage you to review their privacy notices before providing information.

Social features

If our website includes social features (such as embedded posts, share buttons, or links to social networks), your interactions may be governed by the privacy policies of the relevant third parties. Those third parties may collect information about your activity consistent with their policies and your settings on those platforms.

Your rights and choices

Depending on where you live and applicable law, you may have rights regarding personal information, such as requesting access, correction, deletion, or information about our use and sharing practices. Certain laws also provide opt-out rights for targeted advertising and related disclosures.

Submitting requests

To submit a privacy request, contact us using the information in the “Contact” section below. For security, we may need to verify your identity and confirm your relationship with Cicrim. We will not discriminate against you for exercising applicable privacy rights.

Marketing preferences

You may opt out of marketing communications at any time by using the unsubscribe link in an email or by contacting us. Even if you opt out of marketing messages, we may still send operational or relationship communications where permitted by law (for example, responding to a request you made).

Cookie and tracking controls

You can manage cookies through browser settings and, where available, cookie controls on the website. Disabling certain cookies may impact site functionality.

Security and retention

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. No security program is perfect, and we cannot guarantee absolute security of information transmitted or stored electronically.

We retain information only as long as necessary for the purposes described in this notice, to meet legal and contractual requirements, and to support legitimate business needs (such as maintaining records for compliance and security).

Children’s privacy

Our website is intended for a general business audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps.

Notice for California residents

California residents may have additional rights under state privacy laws. You may request information about categories of personal information we collect, the purposes for collection, and disclosures to service providers, and you may request access, deletion, or correction where applicable.

To submit a request, use the contact information provided below.

International residents

If you visit our website from outside the United States, your information may be transferred to and processed in the United States and other locations where we or our service providers operate. Data protection laws may differ from those in your jurisdiction.

Updates to this notice

We may update this Legal & Privacy notice from time to time to reflect changes in law, technology, or our practices. The “Last updated” date at the top of the page indicates when this notice was most recently revised. Material updates will be communicated as required by applicable law.

Contact

If you have questions about this Legal & Privacy notice or want to submit a privacy request, contact us at Contact Cicrim.

You may also reach us by mail:
Cicrim Consulting
Attn: Privacy & Legal
Oxford, MS, United States