Your inquiry.
Your information.
This policy explains how we handle information submitted through the CitiGRC website.
Effective October 24, 2026
How we use it
We use your contact details and message to review your request, respond, and discuss the next step.
Sending a message does not subscribe you to marketing. We do not sell contact details or use them for advertising profiles. The website sends a notification to our info@citigrc.com inbox; it does not automatically send you a promotional message or a customer autoresponder.
Contact messages are not published on this website.
Service providers
Cloudflare hosts this website and processes the project form through its Worker and D1 services. Cloudflare Turnstile helps verify that submissions are legitimate, and Cloudflare's email service delivers the notification to CitiGRC.
Our business inbox is provided through Microsoft 365. When we receive or reply to an email, Microsoft processes that correspondence as our email provider.
These providers may process technical information needed to deliver and protect their services. You can read the Cloudflare privacy policy and Microsoft privacy statement for their practices.
How long we keep it
Project inquiry records in the website database are retained for up to 90 days, then removed.
Email correspondence is held separately in our business inbox. Correspondence or other records needed to discuss, arrange, or carry out an ongoing project may be retained separately for that purpose. Removing a website inquiry record does not automatically remove an email copy.
Temporary abuse-prevention counters are kept only for the limited period needed to protect the submission service.
Security & site tools
We use HTTPS, server-side form validation, spam checks, and submission limits to protect the inquiry service. Our inquiry records do not store your IP address in plain text; temporary keyed signals support abuse prevention.
This site does not use advertising trackers or a visitor analytics service. Security tools such as Turnstile may process browser and network information to perform their checks.
No website or email service can guarantee absolute security. Please use the project form for ordinary inquiry details and contact us before sending sensitive documents.
Questions & requests
For a privacy question or to ask about access, correction, or removal of information you submitted, email info@citigrc.com. Include enough context for us to identify the inquiry, but do not send sensitive information in your request.
This website is operated by Citigroup Remodeling Corp, using the public brand CitiGRC. If our website's information practices change, we will update this page and its effective date.