Privacy policy

1. Introduction

Glacier Byte Technology LLC (“we,” “our,” or “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website glacierbytetechnology.com and use our services.

As a cybersecurity contractor, we use safeguards appropriate to the limited information handled by this public website. Contract-specific security requirements apply when they are included in an agreement and within the scope of the system or service being delivered.

2. Information we collect

2.1 Information you provide

Depending on the form you use, we collect:

• Full name
• Email address
• Organization name
• Service interest and project timeline
• Message content and other details you choose to provide
• Email address submitted for the newsletter

2.2 Automatically collected information

We automatically collect certain information when you visit our website:

• IP address contained in standard server access logs
• Browser and device information contained in the user-agent string
• Referring page, when provided by your browser
• Requested page or file, response status, and date and time of the request

3. How we use your information

We use the information we collect for the following purposes:

• Responding to your inquiries and service requests
• Communicating about our cybersecurity services and solutions
• Improving the website and understanding aggregate usage patterns
• Complying with legal obligations and security requirements
• Protecting against fraudulent or unauthorized access

4. Form data processing

Contact and newsletter submissions are processed through AWS Lambda and Amazon Simple Email Service (SES). When you submit a form:

• Your data is transmitted securely via HTTPS/TLS encryption to our API
• Cloudflare Turnstile verifies you are not a bot before processing
• Form data is delivered to our designated email address via Amazon SES
• Submissions are not stored in a website database; they are delivered as email
• Rate limiting and input validation are enforced to prevent abuse

A newsletter request contains only the email address you provide. It is retained in our business email or newsletter distribution records until you unsubscribe or ask us to delete it. You can use the unsubscribe instructions in a newsletter or contact us at the address below.

For more information about AWS's privacy practices, please visit the AWS Privacy Policy.

5. Analytics and cookies

Website analytics (first-party, cookieless)

We use first-party, privacy-respecting analytics to understand how our website is used. We do not use any third-party analytics service, advertising tracker, cookie, or client-side tracking script for analytics. Instead, our content-delivery network (Amazon CloudFront) records standard server access logs for requests to the site. These logs are delivered only to storage we control inside our own Amazon Web Services account and are not shared with any third-party analytics provider. For each request, the logs may include your IP address, browser type / user-agent, the referring page, the page or file path requested (including counts of template-document downloads), the HTTP response status, and a date and time stamp.

We use this information only for aggregate website-usage statistics, to count document downloads, and to keep the site secure and reliable. We do not use it to build profiles of individual visitors. For visitors in the EU/EEA and UK, our lawful basis is our legitimate interests in operating, securing, and improving the website (GDPR Article 6(1)(f)). We retain raw access logs for a limited period (approximately 30 to 90 days) and then delete them, keeping only aggregate, non-identifying statistics.

Cookies

The marketing site (glacierbytetechnology.com) is cookieless by default: simply browsing it sets no cookies. We use localStorage only to remember your preferred light or dark theme; localStorage is not a cookie and is never sent to a server. No analytics, advertising, or cross-site tracking cookies are set.

Two features load a third party only when you choose to use them. At that point, the provider may use a necessary cookie or receive limited technical information:

• Form spam protection. When you begin filling in the contact or newsletter form, we load Cloudflare Turnstile to confirm you are not a bot. Turnstile processes limited security signals, such as IP address and browser or device information, for bot detection. It is not loaded unless you engage a form. See Cloudflare's Turnstile Privacy Addendum.
• Careers job board. Our open roles are hosted on a third-party board (Dover). On the Careers page it is not loaded automatically: you click "Load the job board," and only then does Dover load and potentially set its own cookies. Until you click, no Dover content is loaded. See Dover's Privacy Policy.

We periodically review these practices and the jurisdictions in which the site operates. If we introduce analytics, advertising technology, or another use that requires consent, we will update this notice and add the appropriate controls. You may request access to or deletion of information we hold, or object to processing where applicable, by contacting us.

6. Data security

We use administrative and technical measures designed to protect the limited information handled through this website, including:

• HTTPS/TLS encryption for all data transmission
• Input validation and sanitization to prevent XSS and injection attacks
• Rate limiting to prevent automated abuse
• Routine security review and vulnerability management
• Safeguards informed by applicable NIST guidance
• Secure hosting on Amazon S3 with CloudFront (HTTPS, private origin)

No method of transmission over the internet is 100% secure. We implement the controls listed above and review them as the website and its risks change.

7. Information sharing and disclosure

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We disclose information only in the following circumstances:

• Website providers: AWS (including CloudFront, Lambda, SES, API Gateway, and storage) supports site delivery and form processing. Cloudflare Turnstile provides bot protection.
• Careers (Dover): Our careers page embeds a job board hosted by Dover (app.dover.com). If you apply through it, the information you submit is collected and processed by Dover under its own privacy policy; we do not receive that application data through this website.
• Legal Compliance: When required by law, court order, or governmental request
• Security Purposes: To protect our rights, property, safety, or that of our users or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets

8. Data retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Contact form submissions are retained for business communication purposes and deleted upon request or when no longer needed. Newsletter addresses are retained until you unsubscribe or ask us to delete them. Raw CloudFront access logs are generally retained for approximately 30 to 90 days before deletion or aggregation.

9. Your privacy rights

Depending on where you live and which law applies, you may have rights to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Objection: Object to our processing of your personal information
• Portability: Request transfer of your data to another service

You may submit any of these requests to the email address below. We may need enough information to verify your identity and locate the relevant records. We will honor a request when required by applicable law and, where reasonably possible, even when a particular law does not require it.

10. California privacy disclosures

We do not use this marketing site to collect information about your activity over time across unrelated websites for behavioral advertising. Because we do not sell personal information or share it for cross-context behavioral advertising, browser Do Not Track signals and opt-out preference signals such as Global Privacy Control do not currently change how this site operates. If those practices change, we will update this policy and honor applicable opt-out signals.

We do not authorize third parties to track visitors on this site for behavioral advertising. When you engage a form, Cloudflare may receive the limited technical signals described above. When you choose to load the careers board, Dover may receive device and usage information under its own privacy policy. We use both features for the purposes described here, not to build advertising profiles.

11. Government work

Federal security, privacy, and acquisition requirements are applied when they are included in a contract and within the defined scope of the work. This public marketing website is not represented as a FedRAMP-authorized cloud service or as a federal information system. Product or service mappings to NIST publications support customer documentation; they do not by themselves constitute an agency authorization or certification.

12. Children's privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

13. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page with a new “Last Updated” date. When appropriate, we may also provide a notice elsewhere on the site.

14. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: