A Cloud Of Witnesses LLC — CloudWitness studio
9690 S 700 E, Sandy - 84070-3565, United States (US)
Return to the homepageThis Privacy Policy explains how A Cloud Of Witnesses LLC, a computer systems design company that also operates under the developer name CloudWitness, collects, uses, stores, shares and protects information when people visit the website at cloudwitness.mom, contact the studio, or engage the company for observation system design and integration services. The company respects the privacy of every visitor, client, supplier and partner, and it is committed to handling personal information in a careful, transparent and lawful manner.
The studio designs computer integrated systems for observation, telemetry, recording and audit. That work involves technical data about sites, sensors and networks, and it can also involve information about the people who operate those systems or who contact the company. This policy describes both categories, explains the choices available to individuals, and sets out the standards the company applies to itself. Please read it in full before submitting any information through the website.
A Cloud Of Witnesses LLC is the data controller responsible for the personal information described in this policy. The company is located at 9690 S 700 E, Sandy - 84070-3565, United States (US). The developer name CloudWitness is used by the same company to describe its engineering practice and its website. The company can be reached by email at contact@cloudwitness.mom or by telephone at +13078883786.
When this policy refers to the company, it means A Cloud Of Witnesses LLC in its capacity as the operator of this website and the provider of its services. When this policy refers to the studio, it means the same legal entity acting through its engineering and administrative team.
The company is a small professional practice rather than a large platform. Most personal information that reaches it arrives because a person chose to write, call or engage the studio. That makes the relationship direct and the expectations simple: the company uses the information to answer the person and to do the work, and for little else.
The developer name CloudWitness appears on the website, in proposals and in technical documentation as a shorthand for the engineering practice. It is not a separate legal entity. Any reference to CloudWitness in this policy is a reference to A Cloud Of Witnesses LLC acting through the same team and the same responsibilities.
This policy applies to personal information collected through the company website, through email and telephone contact with the studio, through proposals, surveys and engagements, and through support and stewardship activity after a system has been commissioned. It also applies to information collected at trade events and through professional correspondence.
This policy does not apply to information that a client stores on infrastructure that the company designs but does not operate. Where a client owns the observation system and controls the data within it, the client is the controller of that data and the company acts only on the client instructions. The company encourages clients to publish their own privacy notices for the people whose information is captured by their observation systems.
The policy also does not cover the practices of any third party website that may be linked from these pages. Those sites have their own notices and their own controllers. A visitor should read the notice of a destination site before providing information there.
Certain parts of the website may be governed by specific terms, such as the terms of service that apply to engagements. Where a specific term conflicts with this policy on a privacy question, this policy governs the handling of personal information, and the specific term governs the commercial relationship.
The company collects several categories of information, always with the aim of doing business honestly and efficiently. The categories are described below.
When a person completes the contact form, sends an email or calls the studio, the company receives the name, email address, subject line, message content and any attachments or details the person chooses to share. For clients and suppliers, the company may also receive a business name, job title, postal address, telephone number, billing details and project information.
When a person visits the website, the web server may record technical information such as the internet protocol address, browser type and version, operating system, referring page, pages viewed and the time of the visit. This information is used to keep the website secure and to understand how it is used.
During surveys and integration work, the studio may handle site plans, device schedules, network diagrams and configuration records. These documents may incidentally contain the names, email addresses or access details of the people who administer a client site. The company treats such information as confidential project material.
The company may receive professional information about contractors, job applicants and business partners, including references, qualifications and contact details, solely for the purpose of evaluating a working relationship.
The company does not seek sensitive categories of information such as health records, biometric identifiers, precise location history or information about political or religious beliefs. A person who sends such information voluntarily should understand that it will be handled with the same care as other material but that the company would prefer not to receive it unless the work genuinely requires it.
Where a client site uses cameras or sensors that may capture identifiable people, the company designs the system to suit the client purpose, and the client remains responsible for the notices, signage and lawful basis that apply to those who are observed. The company will advise on good practice but does not replace the client duty to the people within its care.
The company collects information in a small number of clearly defined ways. Direct collection occurs when a person submits the contact form, sends an email, makes a telephone call or signs a proposal. Automatic collection occurs through the web server logs that record requests to the website. Project collection occurs when the studio receives documents and credentials during a survey, an installation or a stewardship visit.
The company does not purchase personal information from data brokers, and it does not build behavioural profiles of website visitors for advertising purposes. Where the company learns that information was provided in error, it takes reasonable steps to delete it or to return it to its owner.
The company uses personal information for the following purposes. It responds to enquiries and prepares proposals. It delivers, commissions and supports observation systems. It maintains records of projects so that future technicians can understand what was installed and why. It issues invoices and meets accounting obligations. It protects the website and the studio against fraud, abuse and security threats. It complies with legal and regulatory duties that apply to the business. It improves the clarity and usefulness of the website and the services offered.
The company does not use personal information for automated decision making that produces legal effects, and it does not sell personal information to any party. Where the company wishes to use information for a purpose that is materially different from those listed here, it will provide a clear notice before doing so.
Where the law requires a legal basis for processing, the company relies on one or more of the following. Consent applies when a person voluntarily submits the contact form or asks to receive information. Contract applies when processing is necessary to prepare or perform an agreement with a client or supplier. Legitimate interests apply when the company secures its website, maintains professional records or improves its services in a way that does not override the rights of individuals. Legal obligation applies when the company must retain or disclose information to comply with applicable law.
An individual may withdraw consent at any time by contacting the studio at contact@cloudwitness.mom. Withdrawal does not affect processing that already took place on the basis of consent, nor does it affect processing that rests on another legal basis.
A service provider, sometimes called a processor, is a company that handles information on behalf of the company. The company selects its providers with care, reviews their security practices at reasonable intervals, and requires written terms that cover confidentiality, security, breach notification and the return or deletion of information at the end of the relationship.
Typical providers include the company that hosts the website, the provider that carries studio email, and the accounting firm that processes invoices. Each provider receives only the information needed for its task, and none is permitted to use the information for its own marketing.
The company keeps personal information only for as long as it is needed for the purpose for which it was collected, or for as long as a legal obligation requires. Enquiries that do not lead to an engagement are normally removed within a reasonable period after the conversation ends. Client and project records are kept for the duration of the relationship and for a further period that reflects warranty, tax and professional liability needs.
When a retention period ends, the information is deleted, anonymised or archived in a form that no longer identifies an individual. Where information is held in backups, it is removed in the ordinary course of the backup rotation. The company reviews its retention schedule periodically to confirm that it still reflects the work it performs.
The company applies administrative, technical and physical safeguards to protect personal information. Technical measures include encryption in transit, access controls, strong authentication and logging of administrative activity. Administrative measures include least privilege access, documented procedures and periodic review of who can reach which records. Physical measures include locked premises and controlled access to any equipment that holds information.
No method of transmission or storage is completely secure, and the company cannot promise absolute security. It does promise to act promptly when a problem is discovered. If a breach occurs that is likely to result in a risk to individuals, the company will notify the affected people and the relevant authorities as required by law, and it will describe what happened, what it has done and what steps the affected people may take.
The company is based in the United States and normally processes information within that country. Some service providers may store or process information in other jurisdictions. Where information is transferred across a border, the company takes reasonable steps to ensure that the information remains protected, using contractual commitments and provider safeguards that are appropriate to the sensitivity of the information.
Individuals who wish to know where their information is held may contact the studio and the company will explain the arrangements that apply to the relevant service.
Subject to applicable law, individuals may have the right to access the personal information the company holds about them, to ask for corrections where the information is inaccurate, to ask for deletion where there is no continuing lawful reason to keep it, to ask for a restriction on processing, to object to processing based on legitimate interests, to receive a portable copy of information provided by consent or contract, and to withdraw consent at any time.
To exercise a right, a person may write to contact@cloudwitness.mom with enough detail for the company to understand the request and to verify identity. The company will respond within the period required by law. If a person is not satisfied with the response, that person may complain to the relevant supervisory authority in the applicable jurisdiction.
The website and the services of the company are intended for businesses and professional users. They are not directed at children, and the company does not knowingly collect personal information from children. If the company learns that it has received information from a child without the appropriate consent, it will delete that information promptly.
A parent or guardian who believes that a child has provided information to the company may contact the studio at contact@cloudwitness.mom and the company will investigate and act without delay.
Some browsers offer a do not track setting that asks websites not to follow a visitor across services. The company does not conduct cross site tracking for advertising, so this setting does not change the way the website behaves. If the company ever adopts a technology that would honour a do not track signal, it will describe that behaviour here and will respect the signal where the law requires it.
The website may link to the sites of clients, suppliers or professional bodies. The company does not control those sites and is not responsible for their privacy practices. A person who follows such a link should read the privacy notice of the destination site before providing any information there.
The company may update this policy to reflect changes in its practices, its services or the law. When a material change is made, the company will revise the effective date at the top of the page and will provide a prominent notice on the website. Continued use of the website after an update indicates that the revised policy has been reviewed.
A person who does not agree with a revised policy may stop using the website and may contact the studio to discuss any information that the company still holds.
Questions, requests and complaints about privacy should be addressed to A Cloud Of Witnesses LLC at the following details. Postal address: 9690 S 700 E, Sandy - 84070-3565, United States (US). Email address: contact@cloudwitness.mom. Telephone: +13078883786. The studio aims to respond to privacy enquiries within a reasonable period and to resolve concerns directly and fairly.
Where a request relates to information that is held inside a client observation system, the company may refer the request to that client, because the client is the controller of that system and the company acts only on the client instructions.
Personal information means any information that relates to an identified or identifiable individual. Controller means the organisation that decides why and how personal information is processed. Processor means an organisation that processes personal information on behalf of a controller. Consent means a freely given, specific, informed and unambiguous indication of agreement. Legitimate interests means a lawful reason for processing that balances the needs of the business against the rights of the individual.
Observation system means the arrangement of sensors, networks, recording devices, storage and dashboards that the company designs for a client. Stewardship means the ongoing monitoring, tuning and review activity that the company performs after a system is commissioned. CloudWitness means the developer and engineering practice operated by A Cloud Of Witnesses LLC.