Privacy Policy

1. Information We Collect

The information we collect depends on how you interact with the Service.

Information You Provide to Us

You may voluntarily provide information such as:

• Name
• Business name
• Job title
• Email address
• Telephone number
• Mailing or business address
• Communication preferences
• Information included in a contact form, support request, assessment request, or consultation request
• Information submitted when downloading content or registering for an event
• Any other information you choose to provide

Please do not submit passwords, financial account credentials, Social Security numbers, protected health information, or other highly sensitive information through a general website contact form.

Information Collected Automatically

When you access the Service, we and our technology providers may automatically collect information such as:

• Internet Protocol address
• Browser type and version
• Device type and operating system
• General geographic location derived from an IP address
• Referring website or source
• Pages viewed
• Links selected
• Date and time of access
• Time spent on pages
• Website navigation and interaction data
• Device and browser identifiers
• Cookie identifiers
• Diagnostic, security, and performance information

We may use this information to operate the website, understand how visitors use it, troubleshoot technical issues, measure campaign effectiveness, and detect malicious or unauthorized activity.

Information from Other Sources

We may receive information from other sources, including:

• Referral partners
• Business partners
• Publicly available business directories
• Event and registration platforms
• Marketing and email platforms
• Analytics and advertising providers
• Social media platforms
• Existing customers or prospective customers
• Vendors and service providers

We may combine this information with information collected directly through the Service when permitted by law.

2. Cookies and Similar Technologies

We may use cookies, pixels, tags, scripts, local storage, and similar technologies to operate and improve the Service.

These technologies may be used to:

• Maintain essential website functionality
• Remember visitor preferences
• Protect forms and website features from abuse
• Measure website traffic and performance
• Understand how visitors interact with content
• Track the effectiveness of communications and campaigns
• Support marketing and advertising activities, where enabled and legally permitted

Types of Cookies

Cookies used through the Service may include:

Strictly Necessary Cookies

These cookies support essential website functions, security, form processing, and fraud prevention.

Preference Cookies

These cookies remember choices such as language, region, display, or consent preferences.

Analytics Cookies

These cookies help us understand website traffic, visitor activity, and website performance.

Marketing Cookies

If enabled, these cookies may be used to measure campaigns, understand referrals, or deliver more relevant advertising.

You can manage cookies through your browser settings and, where available, through the cookie-consent controls presented on our website. Disabling certain cookies may affect website functionality.

3. Analytics and Website Measurement

We may use analytics providers, including Google Analytics, to understand how visitors interact with the Service.

Analytics providers may collect information such as:

• IP address
• Device and browser information
• Pages viewed
• Referral source
• Approximate location
• Session activity
• Website interactions

We use analytics information to evaluate website performance, improve content, identify technical problems, and understand the effectiveness of our communications.

Information collected by analytics providers is also governed by their respective privacy policies and contractual terms. You can learn more by reviewing Google’s Privacy Policy.

Google also provides information about its Google Analytics opt-out browser add-on.

4. How We Use Information

We may use collected information to:

• Operate, maintain, and improve the Service
• Respond to inquiries and requests
• Provide assessments, consultations, proposals, or requested information
• Communicate about our services
• Deliver requested resources or event information
• Manage business relationships
• Personalize website content and communications
• Send newsletters, alerts, and marketing communications when permitted
• Measure website traffic and campaign performance
• Diagnose technical or performance issues
• Protect the security and integrity of our website, systems, and users
• Detect spam, phishing, fraud, malicious activity, or unauthorized access
• Maintain business and security records
• Enforce our agreements and policies
• Comply with legal, regulatory, contractual, and insurance requirements
• Establish, exercise, or defend legal claims
• Complete a corporate transaction, such as a merger, acquisition, financing, restructuring, or sale of assets

We may use aggregated or de-identified information for lawful business, security, analytics, and research purposes.

5. Legal Bases for Processing

Where the General Data Protection Regulation, United Kingdom GDPR, or similar law applies, we may process Personal Data under one or more of the following legal bases:

• Consent: You have given us permission to process information for a stated purpose.
• Contract: Processing is necessary to perform a contract with you or take requested steps before entering a contract.
• Legitimate interests: Processing is reasonably necessary for our legitimate business, security, operational, or marketing interests, provided those interests are not overridden by your rights.
• Legal obligation: Processing is necessary to comply with an applicable legal requirement.
• Protection of rights: Processing is necessary to protect the rights, safety, or property of Northern Hills Technology, our customers, users, or others.

You may withdraw consent when consent is the applicable legal basis. Withdrawal does not affect processing performed before consent was withdrawn.

6. How We Disclose Information

We may disclose information to the following categories of recipients:

Service Providers

We may engage providers that assist with:

• Website hosting
• Content delivery
• Domain and DNS services
• Website security
• Spam and bot prevention
• Website analytics
• Customer relationship management
• Email delivery and marketing
• Form processing
• Scheduling
• Event registration
• Cloud hosting
• Data storage and backup
• Technical support
• Professional services

These providers may access information only as necessary to perform services for us, subject to applicable contractual and legal requirements.

Business Partners and Referral Sources

We may disclose information to a business partner or referral source when necessary to respond to a request, coordinate a jointly offered service, or manage a referral. We will do so only when reasonably appropriate and legally permitted.

Professional Advisors

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisors when reasonably necessary.

Legal and Security Disclosures

We may disclose information when we believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Protect the rights, property, or security of Northern Hills Technology or others
• Investigate suspected fraud, abuse, or malicious activity
• Enforce an agreement or policy
• Respond to a security incident
• Establish, exercise, or defend legal claims

Business Transactions

Information may be reviewed, transferred, or disclosed in connection with a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar business transaction.

7. Sale and Sharing of Personal Information

Northern Hills Technology does not sell Personal Data for money.

Certain privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include some uses of analytics, advertising, pixels, or cross-site tracking technologies.

Where legally required, we will provide an appropriate method to opt out of covered selling, sharing, or targeted advertising. Available choices may appear through our cookie-consent tool or a “Do Not Sell or Share My Personal Information” link.

We will process legally recognized browser-based opt-out preference signals, such as Global Privacy Control, when required by applicable law and supported by our website configuration.

8. Marketing Communications

We may use contact information to send newsletters, security alerts, service information, event announcements, and other marketing communications when permitted by law.

You may unsubscribe from marketing emails by using the unsubscribe link included in the message.

Unsubscribing from marketing does not prevent us from sending non-promotional communications related to:

• A current business relationship
• A requested consultation
• Service delivery
• Security notifications
• Billing
• Changes to applicable terms or policies
• Other transactional or legally required communications

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• The nature and sensitivity of the information
• The purpose for which it was collected
• The duration of a customer or prospective-customer relationship
• Contractual obligations
• Legal and regulatory requirements
• Tax, accounting, insurance, and recordkeeping requirements
• Security and fraud-prevention needs
• Applicable limitation periods
• The need to establish, exercise, or defend legal claims

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to legal and operational requirements.

Backup copies may remain for a limited period until they are overwritten or deleted through normal backup-management processes.

10. Information Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, alteration, disclosure, or misuse.

Depending on the nature of the information and systems involved, safeguards may include:

• Access controls
• Authentication controls
• Encryption
• Endpoint and network security
• Logging and monitoring
• Vulnerability and patch management
• Backup and recovery measures
• Vendor-management processes
• Security policies and employee training
• Incident-response procedures

No transmission method, website, system, or storage platform can be guaranteed to be completely secure. You should use caution when submitting information online and avoid sending highly sensitive information through general website forms.

The FTC recommends that businesses understand what personal information they maintain, retain only what is needed, protect it, securely dispose of unnecessary information, and maintain a security-incident response plan.

11. Security Incidents

If we identify a security incident involving Personal Data, we will investigate and respond in accordance with applicable law, contractual requirements, and our incident-response procedures.

Where legally required, we will notify affected individuals, regulatory authorities, customers, or other parties.

South Dakota law generally requires notice to affected residents within 60 days after discovery or notification of a qualifying breach, subject to statutory exceptions and law-enforcement delay. A breach affecting more than 250 South Dakota residents must also be disclosed to the South Dakota Attorney General.

12. Your Privacy Choices and Rights

Depending on your location and applicable law, you may have the right to:

• Request confirmation that we process your Personal Data
• Request access to Personal Data
• Request correction of inaccurate Personal Data
• Request deletion of Personal Data
• Request restriction of processing
• Object to certain processing
• Request a portable copy of certain information
• Withdraw consent
• Opt out of certain marketing communications
• Opt out of certain sales, sharing, targeted advertising, or profiling
• Limit certain uses of sensitive Personal Data
• Appeal the denial of a privacy request
• Lodge a complaint with an appropriate regulatory authority

These rights are not absolute. Applicable law may permit or require us to deny or limit a request, including when information must be retained for security, fraud prevention, contractual, legal, or recordkeeping purposes.

13. Submitting a Privacy Request

To submit a request concerning your Personal Data, contact us using the information in the “Contact Us” section below.

Please include:

• Your name
• Your preferred contact method
• The nature of your request
• The state or country in which you reside
• Sufficient information to help us identify relevant records

We may need to verify your identity before completing a request. Verification may require matching information provided with information already maintained by us. We will not request that you provide your account password through email or an unsecured form.

Where permitted by law, an authorized agent may submit a request on your behalf. We may request evidence of the agent’s authority and may need to verify your identity directly.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

14. California Privacy Rights

If Northern Hills Technology is subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act, California residents may have rights to:

• Know the categories and specific pieces of Personal Information collected
• Know the sources, purposes, and categories of recipients
• Request deletion
• Request correction
• Opt out of the sale or sharing of Personal Information
• Limit certain uses or disclosures of Sensitive Personal Information
• Receive equal service and pricing when exercising privacy rights

The CCPA provides rights to know, delete, correct, and opt out of covered selling or sharing, as well as a right against discrimination for exercising those rights.

Nothing in this section should be interpreted as an admission that Northern Hills Technology meets the statutory thresholds for application of the CCPA. We may choose to honor reasonable privacy requests even when a particular law does not require us to do so.

15. European and United Kingdom Privacy Rights

If applicable law in the European Economic Area, European Union, or United Kingdom applies to our processing of your Personal Data, you may have rights to:

• Be informed about processing
• Access Personal Data
• Correct inaccurate or incomplete information
• Request deletion
• Restrict processing
• Object to certain processing
• Receive portable data
• Withdraw consent
• Avoid decisions based solely on certain automated processing
• File a complaint with an applicable supervisory authority

The European Data Protection Board identifies these as core data-subject rights under the GDPR.

Because Northern Hills Technology is located in the United States, information submitted through the Service may be processed in the United States. Where legally required, we will use an appropriate legal mechanism for international transfers.

16. Other U.S. State Privacy Rights

Residents of certain U.S. states may have privacy rights under their state’s consumer privacy law.

Depending on the law, these rights may include access, correction, deletion, portability, and the ability to opt out of certain sales, targeted advertising, sharing, or profiling.

The availability and scope of these rights depend on factors such as:

• Your state of residence
• The type of information involved
• The purpose of processing
• Whether Northern Hills Technology is subject to that state’s law
• Applicable statutory exceptions

We will respond to valid requests as required by applicable law.

17. Children’s Privacy

The Service is intended for business and general adult audiences and is not directed to children under 13.

We do not knowingly collect Personal Data online from children under 13. If you are a parent or legal guardian and believe a child has provided Personal Data through the Service, please contact us. We will take reasonable steps to investigate and, where appropriate, delete the information.

Some Northern Hills Technology services may be limited to adults or business representatives who are at least 18 years old.

18. Third-Party Websites and Embedded Content

The Service may include links to third-party websites or embedded content provided by third parties.

Third parties may collect information when you interact with their content or visit their websites. Their practices are governed by their own privacy policies, not this Privacy Policy.

We do not control and are not responsible for the security, content, availability, or privacy practices of third-party websites or services. We encourage you to review the applicable privacy notice before providing information to a third party.

19. Automated Decision-Making

We do not use information collected through the public website to make decisions that produce legal or similarly significant effects based solely on automated processing.

If this practice changes, we will update this Privacy Policy and provide any choices or disclosures required by applicable law.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our website or services
• Technology providers
• Data-processing practices
• Security practices
• Legal or regulatory requirements

When we make changes, we will update the “Last Updated” date at the top of this page.

Material changes may also be communicated through the website or another appropriate method when required by law.

We encourage you to review this Privacy Policy periodically.

21. Contact Us

If you have questions about this Privacy Policy or want to submit a privacy request, contact:

Telephone: 605-644-8324

Website: Contact Northern Hills Technology