Privacy policy

1. Introduction

Glacier Byte Technology LLC (“we,” “our,” or “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website glacierbytetechnology.com and use our services.

As a cybersecurity contractor, we use safeguards appropriate to the limited information handled by this public website. Contract-specific security requirements apply when they are included in an agreement and within the scope of the system or service being delivered.

2. Information we collect

2.1 Information you provide

Depending on the form you use, we collect:

• Full name
• Email address
• Organization name
• Service interest and project timeline
• Message content and other details you choose to provide
• Email address submitted for the newsletter

2.2 Automatically collected information

We automatically collect certain information when you visit our website:

• IP address contained in standard server access logs
• Browser and device information contained in the user-agent string
• Referring page, when provided by your browser
• Requested page or file, response status, and date and time of the request

3. How we use your information

We use the information we collect for the following purposes:

• Responding to your inquiries and service requests
• Communicating about our cybersecurity services and solutions
• Keeping the website running and secure
• Complying with legal obligations and security requirements
• Protecting against fraudulent or unauthorized access
• Reviewing employment inquiries you send us

4. Form data processing

Contact and newsletter submissions are processed through AWS Lambda and Amazon Simple Email Service (SES). When you submit a form:

• Your data is transmitted securely via HTTPS/TLS encryption to our API
• Spam is filtered with a hidden form field and rate limits
• Form data is delivered to our designated email address via Amazon SES
• Submissions are not stored in a website database; they are delivered as email
• Input is checked before it is processed

A newsletter sign-up contains only the email address you provide. It arrives in our inbox as an email, and we delete it on request. Contact us at the address below.

For more information about AWS's privacy practices, please visit the AWS Privacy Policy.

5. Server logs and cookies

Server logs

Like most websites, ours keeps standard server logs: the page requested, the time, the response code, browser type, referring page, and a network address (usually our content-delivery network's, not yours). Our firewall also keeps request counts and a short sample of recent traffic. We use these only to keep the site running and secure. They stay in our own AWS account and are never sold or shared. The site has no analytics, tracking cookies, or ad trackers.

Server logs are deleted after 60 days, and firewall samples after about three hours. For visitors in the EU/EEA and UK, our lawful basis is our legitimate interest in operating and securing the website (GDPR Article 6(1)(f)).

Cookies

The marketing site (glacierbytetechnology.com) is cookieless by default: simply browsing it sets no cookies. We use localStorage only to remember your preferred light or dark theme; localStorage is not a cookie and is never sent to a server. The site also uses sessionStorage to rate-limit form submissions in your browser (cleared when you close the tab) and a service worker that caches the site's own files for faster and offline loading; neither holds personal information. No analytics, advertising, or cross-site tracking cookies are set.

Form spam protection is handled by a hidden form field and server-side rate limits. No third party is involved.

We periodically review these practices and the jurisdictions in which the site operates. If we introduce analytics, advertising technology, or another use that requires consent, we will update this notice and add the appropriate controls. You may request access to or deletion of information we hold, or object to processing where applicable, by contacting us.

6. Data security

We use administrative and technical measures designed to protect the limited information handled through this website, including:

• HTTPS/TLS encryption for all data transmission
• Input validation and sanitization to prevent XSS and injection attacks
• Rate limiting to prevent automated abuse
• Routine security review and vulnerability management
• Safeguards informed by applicable NIST guidance
• Secure hosting on Amazon S3 with CloudFront (HTTPS, private origin)

No method of transmission over the internet is 100% secure. We implement the controls listed above and review them as the website and its risks change.

7. Information sharing and disclosure

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We disclose information only in the following circumstances:

• Website providers: AWS (CloudFront, Lambda, SES, API Gateway, and S3) hosts the site and processes forms.
• Legal Compliance: When required by law, court order, or governmental request
• Security Purposes: To protect our rights, property, safety, or that of our users or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets

8. Data retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Contact form submissions are kept as business email and deleted on request or when no longer needed. Newsletter sign-ups arrive in our inbox as email, and we delete them on request. Server logs are deleted after 60 days. Form-processing logs, which record a partly masked email address and, for contact submissions, the organization name, are deleted after 90 days.

9. Your privacy rights

Depending on where you live and which law applies, you may have rights to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Objection: Object to our processing of your personal information
• Portability: Request transfer of your data to another service

You may submit any of these requests to the email address below. We may need enough information to verify your identity and locate the relevant records. We will honor a request when required by applicable law and, where reasonably possible, even when a particular law does not require it.

10. California privacy disclosures

We do not use this marketing site to collect information about your activity over time across unrelated websites for behavioral advertising. Because we do not sell personal information or share it for cross-context behavioral advertising, browser Do Not Track signals and opt-out preference signals such as Global Privacy Control do not currently change how this site operates. If those practices change, we will update this policy and honor applicable opt-out signals.

No third party tracks visitors on this site for advertising.

11. Government work

Federal security, privacy, and acquisition requirements are applied when they are included in a contract and within the defined scope of the work. This public marketing website is not represented as a FedRAMP-authorized cloud service or as a federal information system. Product or service mappings to NIST publications support customer documentation; they do not by themselves constitute an agency authorization or certification.

12. Children's privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

13. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page with a new “Last Updated” date. When appropriate, we may also provide a notice elsewhere on the site.

14. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: