Privacy Policy
Last updated August 30, 2026
The short version: we collect what you type into the contact form and nothing else. We do not run advertising trackers, we do not sell or share your information, and the free assessment reads only public DNS records, never your systems.
What we collect
- What you send us. If you use the form, call, or email, we receive what you provide: your name, your firm's name, your domain, your email address and, if you give it, a phone number.
- Correspondence. Emails and messages you send us, kept so we can answer you and keep a record of the engagement.
- Assessment inputs. The domain name you give us, and the public DNS records published for it.
What the free assessment reads
The assessment queries your domain's public DNS records: the same records every mail server on the internet reads before accepting a message from you. It uses no credentials, accesses no systems, and installs nothing. We do not need, and do not ask for, access to your environment to produce it.
If you later engage us for a full Written Information Security Plan, any access to your Microsoft 365 environment is read-only, granted by you explicitly, revocable by you at any time, and described in writing before it is requested.
How we use it
To respond to you, to produce the assessment or documentation you asked for, and to keep our own business records. That is the whole list. We do not use your information to build advertising profiles, and we do not sell, rent or trade it.
Who else touches it
This is a small business running on ordinary tools, and honesty about them is part of the point of a privacy page:
- GitHub Pages hosts this site and, like any web host, records standard server request data.
- Google Fonts serves the typefaces on this page, which means your browser makes a request to Google when the page loads.
- Formspree delivers the contact form to our inbox, if you choose to use the form rather than email or phone.
- Microsoft 365 hosts our email.
We do not currently run web analytics. If that changes, this page changes with it.
Cookies
This site sets no cookies of its own and has no tracking pixels.
How long we keep it
Inquiries that do not become engagements are kept while they are still live and then discarded. Records for firms we work with are kept for the duration of the engagement and afterward for as long as our own professional and tax record-keeping obligations require.
Your choices
Write to conde@getuswisp.com to ask what we hold about you, to correct it, or to ask us to delete it. We will do so unless we are required to keep it. You can ask us to stop contacting you at any time and we will.
Confidentiality
Assessment findings about your firm belong to your firm. We do not publish them, do not name clients without written permission, and do not use one firm's findings as an example to another.
Children
This is a service sold to businesses. It is not directed to anyone under 18 and we do not knowingly collect information from minors.
Terms of Use
Last updated August 30, 2026
An assessment describes what we observed on the date we looked. It is not a certification, and nothing here is legal advice.
What this site is
Get US WISP is a service of Montecristi Group LLC. This site describes that service and provides general information about the FTC Safeguards Rule (16 CFR Part 314) and IRS Publication 4557.
Not legal, tax or accounting advice
Nothing on this site, in an assessment report, or in any document we produce constitutes legal, tax or accounting advice, and no attorney-client relationship is created by using this site or by engaging us. Regulations change and their application depends on your specific circumstances. Confirm current requirements with your own counsel.
Assessments are observations, not certifications
An assessment reports conditions observed on the date shown, using the sources described in the report. It is not an audit, not an attestation, and not a certification of compliance with any rule. No one, including us, can certify that your firm is compliant with the Safeguards Rule.
Your firm's responsibilities remain your firm's
Under 16 CFR 314.4, obligations such as designating a Qualified Individual, adopting the written plan and reporting to your firm's leadership belong to your firm. We can prepare documentation, assess your environment and advise, but we cannot assume those obligations, and engaging us does not transfer them.
Accuracy of what you tell us
A Written Information Security Plan reflects the environment and the answers your firm provides. If those are incomplete or inaccurate, so is the plan. We rely on what you tell us and do not independently verify the parts that cannot be verified technically.
Limitation of liability
To the fullest extent permitted by law, Montecristi Group LLC is not liable for indirect, incidental, special or consequential damages arising from this site or our services. Our total liability for any claim is limited to the amount you paid us for the service that gave rise to it. Nothing in these terms limits liability that cannot be limited by law.
Governing law
These terms are governed by the laws of the State of Florida, without regard to its conflict-of-law rules. Any dispute will be brought in the state or federal courts located in Miami-Dade County, Florida.
Changes
We may update these pages. The date at the top of each section shows when it last changed.
Contact
Montecristi Group LLC
conde@getuswisp.com
(305) 726-4103