Privacy Policy (Draft) — Cascadia Risk Management Corporation

Effective date: February 21, 2026

Applies to: cascadiarisk.management, tips.cascadiarisk.management, and CRMC’s Tor hidden service tip portal (.onion) (collectively, the “Sites”)

Cascadia Risk Management Corporation (d.b.a. Cascadia Risk Management) (“CRMC,” “we,” “us,” or “our”) provides investigative, protective, intelligence gathering, and risk reduction services. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit or use the Sites, contact us, submit an inquiry, request services, or submit a tip.

1) Information we collect

A. Information you provide to us

Depending on how you interact with the Sites, you may provide:

Contact form information (cascadiarisk.management/contact):

• Name
• Email address
• Phone number (optional)
• Message content (including any details you include about your matter) 

Service Request / Client Intake information (cascadiarisk.management/clients/intake):

• Name
• Company name (optional)
• Email address
• Phone number
• Address information (street/city/state or province/postal code/country fields) 
• Information associated with your service request that you submit

Tip submissions (CRMC .onion tip portal):

• The content of the tip you submit
• Any files/attachments you upload (if the tip portal supports uploads)
• Any contact information you choose to include (if any)
• Any identifiers you include in the body of your tip (for example: names, phone numbers, locations, usernames, case details)

Important: You control what you share. If you include identifying or sensitive details in a message or tip, we will receive and process that content.

B. Information collected automatically

When you visit the Sites, we (and our service providers) may automatically receive certain information, such as:

• Device and browser information (e.g., browser type, operating system)
• Pages viewed, links clicked, time spent, referring page
• Approximate location (e.g., city/region inferred from IP on clearnet sites)
• Log data (e.g., IP address on clearnet sites, request timestamps, error logs)

Tor/.onion note: Tor is designed to reduce what websites can learn about you. However, your tip content itself (and anything you include within it) may still be identifying.

C. Cookies and similar technologies

We may use cookies or similar technologies for:

• Basic site functionality (e.g., security, fraud prevention, form protection/CSRF)
• Preferences (where applicable)
• Performance and reliability (e.g., error monitoring)

You can often control cookies through your browser settings. Some site features may not work properly if cookies are disabled.

2) How we use information

We use information for purposes such as:

• Responding to inquiries and scheduling consultations
• Evaluating and processing service requests/intake submissions
• Communicating with you about potential or ongoing engagements
• Operating, maintaining, and securing the Sites
• Preventing fraud, abuse, or unlawful activity
• Complying with legal obligations and enforcing our agreements
• Conducting internal recordkeeping and administrative functions

3) How we share information

We do not sell your personal information.

We may share information in the following circumstances:

A. Service providers (processors)

We may share information with vendors that help us operate the Sites and deliver services (e.g., website hosting, email delivery, security tooling, form processing). These vendors are authorized to use information only as necessary to provide services to us.

B. Client portal / third-party platforms

Our website links to a third-party client portal (for example, via “Client Portal”).  If you choose to use a third-party portal or platform, your information will be processed under that provider’s privacy terms as well as ours.

C. Legal, safety, and compliance

We may disclose information if we believe in good faith that disclosure is necessary to:

• Comply with law, regulation, legal process, or lawful requests
• Protect the rights, safety, and security of CRMC, our clients, tipsters, or others
• Investigate or prevent suspected fraud, abuse, or security issues

D. Business transfers

If CRMC is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

4) Confidentiality and investigative services

CRMC is an investigative services agency. Communications with CRMC may involve sensitive details. We treat client and tip information as confidential to the extent feasible and consistent with law, operational needs, and any applicable contracts. However:

• Contact and intake submissions do not create an attorney-client relationship, and may not be privileged.
• If you are represented by counsel, you may prefer to have your attorney contact us.

5) Data retention

We retain information for as long as reasonably necessary to:

• Respond to you and operate our business
• Provide services (if you become a client)
• Maintain records required by law, licensing, accounting, or insurance obligations
• Resolve disputes and enforce agreements
• Protect against fraud and security threats

Retention periods vary based on the type of information and why we collected it.

6) Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is 100% secure. You can help protect yourself by:

• Avoiding sharing unnecessary sensitive details through web forms
• Using Tor Browser for the .onion tip portal if anonymity is important
• Using a secure email account and device hygiene practices

7) Your choices and rights

Depending on where you live, you may have rights to:

• Request access to or a copy of certain personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of personal information (subject to exceptions, including legal obligations and legitimate business needs)
• Opt out of certain cookies (via browser controls)

To submit a request, contact us using the information in Section 10. We may need to verify your identity before fulfilling certain requests.

8) Children’s privacy

The Sites are not intended for children under 13, and we do not knowingly collect personal information from children under 13.

9) Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” above indicates when this policy was last updated. Material changes will be posted on the Sites.

10) Contact us

For privacy questions or requests, contact:

Cascadia Risk Management Corporation (CRMC)

Email: hello@cascadiarisk.management 

Phone: +1 (206) 457-CRMC (2762)