Free Consultation

Privacy Policy

Privacy Policy

Effective Date:
Last Updated: 4/30/2026

1. Introduction

CMHWorks, LLC (“CMHWorks,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://cmhworks.com and use our services.

This policy applies to:

  • Visitors to our website
  • Clients and prospective clients
  • Users of our services, including managed IT, hosting, development, security, and consulting

2. Information We Collect

2.1 Personal Information You Provide

We may collect:

  • Name, company name
  • Email address and phone number
  • Billing and payment information (if applicable)
  • Account login credentials
  • Information submitted via forms, consultations, or support requests

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited, time spent, referring URLs
  • Cookies and usage data

2.3 Information from Services

If you engage CMHWorks for services, we may process:

  • Business and operational data required to deliver services
  • System logs, security data, or analytics data
  • Data stored in hosting environments or applications we build/manage

3. How We Use Your Information

We use your information to:

  • Provide and manage our IT, development, hosting, and consulting services
  • Communicate with you (support, updates, proposals)
  • Improve website functionality and user experience
  • Monitor and secure our systems and your systems
  • Comply with legal and regulatory obligations
  • Prevent fraud, cyber threats, and abuse

4. Legal Basis for Processing (if applicable)

Depending on your jurisdiction, we process personal data based on:

  • Contractual necessity (to deliver services)
  • Legitimate business interests (security, improvement, communication)
  • Consent (marketing, cookies where required)
  • Legal obligations

5. Sharing and Disclosure of Information

We do not sell personal information. We may share data with:

5.1 Service Providers

  • Hosting and cloud providers
  • Payment processors
  • Security and analytics vendors

5.2 Business Operations

  • Contractors or subcontractors supporting service delivery
  • Legal, financial, or compliance advisors

5.3 Legal Requirements

We may disclose information if required by law, regulation, legal process, or government request.

5.4 Business Transfers

In case of merger, acquisition, or sale of assets.

6. Data Retention

We retain personal data only as long as necessary for:

  • Service delivery and business operations
  • Legal, contractual, and tax obligations
  • Security and audit requirements

7. Data Security

We implement appropriate administrative, technical, and physical safeguards, including:

  • Access controls and authentication
  • Encryption where appropriate
  • Network monitoring and threat detection
  • Regular backups and recovery procedures

However, no system is 100% secure.

8. Your Privacy Rights

Depending on your location (including Virginia under the VCDPA), you may have the right to:

  • Access your personal data
  • Correct inaccuracies
  • Delete your data
  • Obtain a copy of your data
  • Opt out of targeted advertising or data sales [oag.state.va.us]

To exercise rights, contact us at: [email protected]

9. Cookies and Tracking Technologies

We use cookies to:

  • Improve site functionality
  • Analyze traffic and usage
  • Remember user preferences

You can manage cookies via your browser settings.

10. Third-Party Services and Links

Our website may include links or embedded content from third parties.

11. Hosted and Client Data

  • We may act as a data processor on behalf of clients
  • Clients remain the data controller
  • We only process data as required to deliver services

12. Children’s Privacy

Our services are not directed to individuals under 13.

13. International Data Transfers

Your data may be processed in the United States or other jurisdictions.

14. Changes to This Privacy Policy

We may update this policy periodically.

15. Contact Information

CMHWorks, LLC
19287 Lincoln Rd
Purcellville, VA 20132
Email: [email protected]
Website: https://cmhworks.com

Turnstile Privacy Addendum

Last updated: JUNE 18, 2025

1. INTRODUCTION

Turnstile, developed by Cloudflare, Inc. (Cloudflare), is a pro-privacy website security tool that processes minimal Signals (as defined below) solely to protect web properties against malicious activity by distinguishing human users from bots and blocking bot traffic.

Cloudflare does not control whether a website chooses to use Turnstile; instead, we make Turnstile available to any website that is looking for a way to detect and block bot traffic.

2. SCOPE OF THIS ADDENDUM

This Turnstile Addendum is supplemental to Cloudflare’s main Privacy Policy. It provides additional information specific to your use and interaction with Turnstile. This Addendum also applies to the personal data processed using Cloudflare’s Challenge Platform, and any reference to “Turnstile” in this addendum applies equally to the Challenge Platform.

The Cloudflare Privacy Policy continues to apply to your use and interaction with Turnstile, except where this Turnstile Addendum provides more specific information. In those cases, the more specific information will apply instead.

3. INFORMATION WE COLLECT

Cloudflare Turnstile processes a variety of client-side signals (“Signals”) such as client IP address, TLS Fingerprint, User-Agent Header and Sitekey and associated origin. Cloudflare does not have the ability to directly identify any individuals from any of the Signals Turnstile collects, including IP addresses.

4. HOW WE USE INFORMATION WE COLLECT

(i) Bot detection and blocking

Turnstile is a tool to protect web properties by distinguishing human users from bots and blocking any detected bot traffic that could otherwise harm the safety and security of that property.

It does so by evaluating the Signals listed above specific to both the website visitor and the website visited. The purpose of collecting these Signals is not to identify, profile or target any individuals but solely to detect and block bots. The Signals collected by Turnstile are strictly necessary for this purpose (i.e. detecting and blocking bots to enable visitors to enjoy a safe and secure experience when visiting websites that have implemented Turnstile).

Cloudflare is a data processor of Signals that we process to provide the Turnstile service to our customers, that is, securing our customers’ websites. This means that we process Signals for this purpose on behalf of, and pursuant to instructions issued by, our website operator customers (who are the data controllers of any data processed for this purpose). If you have questions, or wish to exercise any data protection rights, regarding Cloudflare’s processing of Turnstile data to provide our service, please contact the relevant website operator.

(ii) Improving Turnstile’s bot detection capabilities

Cloudflare also processes the Signals described in this Privacy Notice to improve Turnstile. This is necessary to refine and improve our bot detection algorithms in order to respond to evolving bot threats, and to maintain the security of the web properties that website visitors choose to visit.

Cloudflare is a data controller of Signals that we process to improve Turnstile’s bot detection capabilities. This Turnstile Privacy Notice (in conjunction with Cloudflare’s main Privacy Policy) governs our processing of Signals for this purpose.

5. NOTICE TO EU AND UK RESIDENTS

To the extent that the data described in the Turnstile Privacy Notice qualifies as personal data, then:

  • When processing this personal data as a processor to protect our customers’ websites, our customers, as controllers, determine the lawful basis of this processing, and we process this data under their instruction and on their behalf; and

  • When processing this personal data as a controller, we rely on our legitimate interests in improving the effectiveness of Turnstile’s bot detection capabilities to process this Turnstile data.

6. COOKIES

The Signals collected by Turnstile are strictly necessary for the purpose of detecting and blocking bots to enable visitors to enjoy a safe and secure experience when visiting websites that have implemented Turnstile.

For more information about the cookies used by Cloudflare, please check our Cookie Policy and our Turnstile Developer Docs.

CONTACT FOR PRIVACY CONCERNS

If you have questions or concerns about this Turnstile Privacy Notice or your personal data processed through Turnstile, please contact Cloudflare’s Data Protection Officer at [email protected].