diff --git a/.gitignore b/.gitignore
index 00062c3..dfbf2da 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,4 +12,7 @@ node_modules/
 
 # NPM debug logs
 npm-debug.log*
-yarn-debug.log*
\ No newline at end of file
+yarn-debug.log*
+
+# Privacy Policy Word Doc
+_privacy-policy.docx
\ No newline at end of file
diff --git a/src/_docs/_privacy-policy.pdf b/src/_docs/_privacy-policy.pdf
index 110fbed..6500075 100644
Binary files a/src/_docs/_privacy-policy.pdf and b/src/_docs/_privacy-policy.pdf differ
diff --git a/src/privacy-policy.njk b/src/privacy-policy.njk
index 7e33e1d..423b8da 100644
--- a/src/privacy-policy.njk
+++ b/src/privacy-policy.njk
@@ -9,7 +9,7 @@ isLandingPage: false
 <div class="module">
     <h1>Privacy Policy - dlseitz.dev</h1>
 
-    <strong>Last updated: August 25, 2025</strong>
+    <strong>Last updated: September 7, 2025</strong>
 
     <p>This <strong>Privacy Policy</strong> describes my policies and procedures on the collection and use of your information when you use my Service. I use your personal data to communicate with you regarding your inquiries.</p>
 
@@ -88,7 +88,7 @@ isLandingPage: false
     </section>
     <section id="data-protection">
         <h2>How I Protect Your Information</h2>
-        <p>I have implemented reasonable technical and organizational security measures to protect your personal data. Your information is transmitted from the contact form using <a href="https://developers.google.com/search/docs/crawling-indexing/https" target="_blank" rel="noopener noreferrer">HTTPS encryption</a>, which is enforced by default on this .dev domain.</p>
+        <p>I have implemented reasonable technical and organizational security measures to protect your personal data. A <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy" target="_blank" rel="noopener noreferrer">Content Security Policy (CSP)</a> is used to ensure your submitted data is only ever sent to my server, protecting it from being redirected to any other location. Your information is transmitted from the contact form using <a href="https://developers.google.com/search/docs/crawling-indexing/https" target="_blank" rel="noopener noreferrer">HTTPS encryption</a>, which is enforced by default on this .dev domain.</p>
         <p>Submitted data undergoes multiple security checks to prevent spam and abuse, including the use of <a href="https://www.hcaptcha.com/" target="_blank" rel="noopener noreferrer">hCaptcha</a> and rate limiting to verify the user is a human and minimize the risk of unauthorized access to stored data. The data is also validated and sanitized to ensure its integrity before it is stored in my database.</p>
         <p>However, security is an ongoing practice, and no method of electronic transmission or storage is ever absolutely secure. While I strive to protect your data, I cannot guarantee its absolute security.</p>
     </section>