1. Our Privacy Commitment
Forman Services LLC protects your privacy and handles your business data responsibly. This policy explains our data practices.
2. Information We Collect
Personal Data:
- Name, email, phone, company name
- Business details (EIN, DUNS, NAICS, revenue, employee count)
- Government ID numbers (CAGE Code, certification numbers)
- Payment information (processed securely via Stripe/PayPal)
Sensitive Data (for certifications):
- Demographic information (gender, ethnicity, veteran status)
- Financial records, tax returns
- Personal resumes and ownership documents
Technical Data:
- IP address, browser, device type
- Cookies, analytics (Google Analytics)
- Website interaction patterns
Third-Party Data:
- Public SAM.gov records
- State business entity databases
- Government certification registries
3. How We Use Your Information
Service Delivery:
- Complete SAM.gov registrations and certification applications
- Prepare proposals and contract documents
- Provide consulting and coaching services
Communication:
- Send service updates, application status
- Share relevant contract opportunities
- Marketing emails (with opt-in consent)
Compliance:
- Meet federal contractor record-keeping requirements (7-year retention)
- Respond to legal requests
Improvement:
- Analyze service effectiveness
- Enhance website user experience
4. Information Sharing Disclosure
We may share with:
- Government Agencies: Required for SAM.gov, certification applications, and proposal submissions (this data becomes public record under federal law)
- Service Providers: Payment processors, CRM (HubSpot), email platforms, cloud storage—all bound by strict confidentiality agreements
- Legal Authorities: Court orders, subpoenas, or to protect our legal rights
- Business Transfers: In case of merger or acquisition (you will be notified)
Important: We DO NOT share personal demographic data used for certifications except where required by government applications.
5. Data Retention
- Active Clients: Duration of service + 7 years (federal compliance requirement)
- Coaching Program: 3 years after completion
- Inactive Prospects: 12 months, then deleted unless you opt-in to marketing
- Backup Systems: May retain copies for up to 30 days after deletion
6. Your Privacy Rights
You may:
- Access: Request copy of all data we hold
- Correct: Update inaccurate business information
- Delete: Request deletion (subject to legal retention requirements)
- Opt-Out: Unsubscribe from marketing emails (link in every email)
- Portability: Receive data in machine-readable format
To exercise rights: Email privacy@formanservicesllc.com with "PRIVACY REQUEST" in subject line. We respond within 30 days.
7. Data Security Measures
We implement:
- SSL/TLS encryption for all data transmission
- Password protection and 2FA for all systems
- Role-based access (employees only see necessary data)
- Annual security audits and penetration testing
- Secure cloud storage with encryption at rest
Security Notice: No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Cookies & Tracking
- Essential Cookies: Required for website function (cannot be disabled)
- Analytics Cookies: Google Analytics for traffic analysis (you can opt-out via browser)
- Marketing Cookies: Used for ad retargeting (only with consent)
How to Manage: Adjust browser settings or use Cookie Preferences link in footer
9. Important Notice: Government Application Data
Critical: Information submitted to SAM.gov, certification bodies, and contract proposals becomes PUBLIC RECORD under federal law. This includes:
- Business name and address
- Ownership details
- Revenue and employee numbers
- Contract award information
We cannot control government agency privacy practices. Please do not submit sensitive personal information (SSNs, home addresses) unless specifically required.
10. Third-Party Links
Our website links to:
- SAM.gov
- Grants.gov
- SBA.gov
- Certification agency portals
We are not responsible for their privacy practices. Please review their policies independently.
11. International Users
We operate in the United States. By using our services, you consent to data transfer to and processing in the US.
We comply with US law but make no representation regarding:
- GDPR (EU)
- PIPEDA (Canada)
- Other international privacy regulations
12. Policy Updates
We may update this policy as laws or services change.
Material changes will be communicated via:
- Email to active clients
- Website banner notification
- Updated "Effective Date" at top
Check this page periodically for updates.