Privacy Policy

1. Who we are

CloudNode (“CloudNode”, “we”, “us”, “our”) is a technology engineering and strategy firm with its place of business at 3835 Co Rd 175, Unit 910, Leander, Texas 78641, United States.

This policy explains how we handle personal information through cloudnodeit.com (the “Site”) and in the ordinary course of our business relationships. For any question, request or complaint about it, write to hr@cloudnodeit.com.

2. What this policy covers — and what it does not

This policy covers personal information for which we are the controller: information where we decide why and how it is processed. That includes visitors to the Site, people who contact us, newsletter subscribers, client and prospective-client contacts, and candidates.

It does not cover personal data we process on behalf of a client during an engagement — for example, data held inside a system we design, build, migrate or operate for you. For that data the client is the controller and CloudNode acts as processor. Our obligations there are set out in the engagement agreement and its data processing addendum, which take precedence over this policy to the extent of any conflict.

3. Information we collect

3.1 Information you give us

• Contact form. Your name, email address, company, role, the area of interest you select, and whatever you choose to write describing your problem.
• Newsletter. Your email address.
• Correspondence. The content of emails, calls and meetings, and any files you send us.
• Candidates. The CV and supporting information you send when you apply to work with us.

Please do not send confidential, sensitive or regulated information through the Site. The contact form is not a secure channel, and sending it does not create a confidential relationship or place us under any duty of confidence. If you need to share something confidential, tell us and we will put an appropriate agreement in place first.

3.2 Information collected automatically

Our hosting provider records standard server logs when you request a page: IP address, browser and device type, the page you came from, the pages you request, and the date and time. These are used to serve the Site, keep it available, and detect abuse.

3.3 Cookies and similar technologies

We do not set advertising cookies, analytics cookies or any cross-site tracking technology. Our hosting provider may set strictly necessary cookies required to deliver and secure the Site. If we introduce analytics in future we will update this policy and, where the law requires it, ask for your consent before setting anything.

3.4 No third-party requests

Every file the Site needs — stylesheets, scripts, typefaces and images — is served from cloudnodeit.com. Loading a page makes no request to any third-party server, so no other company receives your IP address or browser details as a result of your visit. There are no embedded analytics, advertising tags, social widgets or content-delivery networks.

4. How we use information, and our legal bases

Where the EU or UK General Data Protection Regulation applies, we rely on the following bases.

• Responding to your enquiry — contact form and correspondence. Steps taken at your request prior to entering a contract (Art. 6(1)(b)), and our legitimate interest in answering people who approach us (Art. 6(1)(f)).
• Sending the newsletter — your email address. Your consent (Art. 6(1)(a)), which you may withdraw at any time.
• Operating and securing the Site — server logs. Our legitimate interest in a reliable, secure service (Art. 6(1)(f)).
• Managing a client relationship — contact and engagement records. Performance of a contract (Art. 6(1)(b)).
• Recruitment — application materials. Steps prior to a contract (Art. 6(1)(b)) and our legitimate interest in assessing candidates (Art. 6(1)(f)).
• Compliance, record-keeping and defending claims — as required. Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).

5. We do not sell your information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act as amended and comparable US state laws. We have not done so in the preceding twelve months, and we do not sell or share the personal information of minors.

6. Who we share information with

We disclose personal information only as described here:

• Service providers under contract, who may process it only on our documented instructions, only to perform services for us, and who are bound to protect it: our website hosting and form-handling provider, our business email provider, and, if we introduce one for the newsletter, our mailing-list provider. These providers are established in the United States. We will identify a specific provider on request.
• Professional advisers — lawyers, accountants, auditors — where necessary and under a duty of confidence.
• A successor in connection with a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply.
• Authorities and other parties where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims, or to protect the rights and safety of any person.

7. International transfers

We are established in the United States, and our service providers process information in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, your information will be transferred to and stored in the United States.

Where such a transfer requires a safeguard, we rely on the European Commission’s Standard Contractual Clauses (and, for the UK, the International Data Transfer Addendum), together with supplementary technical and organisational measures. You may request a copy of the relevant terms by writing to us.

8. How long we keep information

• Contact form submissions — up to 24 months after our last contact with you, unless a client relationship develops, in which case engagement retention applies.
• Newsletter subscriptions — until you unsubscribe, after which we keep a minimal suppression record so that we continue to honour your opt-out.
• Server logs — as retained by our hosting provider in the ordinary course, typically around 30 days.
• Client and contract records — for the term of the engagement and seven years afterwards, to meet tax, accounting and limitation-period requirements.
• Candidate information — 12 months after a decision, unless you ask us to keep it on file for longer.

We may keep information for longer where we are required to by law or where it is needed for a live or reasonably anticipated legal claim.

9. Your rights

If you are in the EEA, the UK or Switzerland, you have the right to access your personal data; to have inaccurate data corrected; to have data erased; to restrict processing; to data portability; to object to processing carried out on the basis of legitimate interests; and to withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with your supervisory authority.

If you are a resident of California, Colorado, Connecticut, Texas, Virginia or another US state with comparable legislation, you have the right to confirm whether we process your personal information and to access it; to correct inaccuracies; to delete it; to obtain a portable copy; to opt out of sale, sharing for targeted advertising, and certain profiling (none of which we carry out); and not to be discriminated against for exercising any of these rights. Where a state provides it, you also have the right to appeal a decision we make on your request.

To exercise any of these rights, write to hr@cloudnodeit.com. We will take reasonable steps to verify your identity before acting, and will respond within the period the applicable law requires — generally one month under the GDPR and 45 days under US state laws, each extendable where the law permits. You may use an authorised agent where the law allows; we may ask for proof of authority. If we decline a request we will tell you why, and how to appeal or complain.

10. Security

The Site is served over TLS. We apply access controls on a least-privilege basis, keep the number of systems holding personal information small, and select providers that maintain recognised security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Site is directed to businesses and professionals, not to children. We do not knowingly collect personal information from anyone under 16 in the EEA or UK, or under 13 in the United States. If you believe a child has provided us with personal information, write to us and we will delete it.

12. Automated decision-making

We do not make decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing.

13. Do Not Track and Global Privacy Control

We do not track visitors across third-party websites, so there is no cross-site tracking for a Do Not Track signal to disable. Where the law requires it, we honour the Global Privacy Control signal as a valid opt-out request.

14. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page shows when it last changed. Where a change is material, we will take reasonable steps to bring it to your attention.

15. How to contact us

CloudNode
3835 Co Rd 175, Unit 910
Leander, Texas 78641
United States
hr@cloudnodeit.com