Privacy Policy and Data Handling Notice

1. Scope and Applicability

This Privacy Policy and Data Handling Notice (the “Policy”) sets forth the practices of Van Loon Technologies LLC, a Florida limited liability company (together with its successors and assigns, “Van Loon Technologies,” “VLT,” the “Company,” “we,” “us,” or “our”), with respect to the collection, use, processing, retention, disclosure, and safeguarding of Personal Information (as defined herein) obtained through the Company’s public website located at www.vanloontechnologies.com and any associated subdomains (collectively, the “Site”). This Policy governs the Site only. The processing of data on behalf of clients in the course of managed services engagements is governed exclusively by the applicable master services agreement, statement of work, business associate agreement, or other written instrument executed between the Company and such client (each, a “Client Agreement”), which shall control in the event of any conflict with this Policy.

2. Acceptance of Terms

By accessing, browsing, or otherwise using the Site, or by submitting any information through the Site, you (“User” or “you”) acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. If you do not agree with any provision of this Policy, you must discontinue use of the Site and refrain from submitting any information through it.

3. Definitions

For purposes of this Policy, “Personal Information” means any information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual, including without limitation name, email address, telephone number, organization name, and the contents of any message voluntarily submitted. “Processing” means any operation performed on Personal Information, whether or not by automated means, including collection, recording, organization, storage, retrieval, use, disclosure, or erasure. “Service Provider” means any third party that Processes Personal Information on behalf of the Company pursuant to the Company’s instructions.

4. Categories of Information Collected

4.1 Information Voluntarily Provided. The Company collects Personal Information that Users affirmatively and voluntarily submit through the Site’s inquiry and review request forms, which may include name, organization, email address, telephone number, topic of inquiry, and message content.

4.2 Technical Information. In the ordinary course of delivering web content, the Company’s hosting and content delivery infrastructure, and certain third-party resources embedded in the Site (including web font services), may automatically receive technical data such as Internet Protocol (IP) address, browser type, device characteristics, referring URL, and date and time of access, as necessary to transmit content to the User’s device and to protect the Site against abuse.

4.3 No Sensitive Data Solicited. The Company does not knowingly solicit, through the Site, protected health information, Social Security numbers, financial account numbers, payment card data, or other sensitive categories of information. Users are expressly directed not to submit any such information through the Site’s forms.

5. Cookies, Tracking Technologies, and Analytics

As of the Effective Date, the Site does not deploy first-party cookies, advertising pixels, cross-site tracking technologies, session replay tools, or third-party behavioral analytics. The Company does not engage in targeted advertising, profiling, or the tracking of Users across third-party websites or online services. Should the Company elect to implement any such technologies in the future, this Policy shall be amended accordingly prior to deployment and, where required by applicable law, appropriate notice and consent mechanisms shall be implemented.

6. Purposes and Lawful Bases of Processing

The Company Processes Personal Information solely for the following purposes: (a) responding to inquiries, review requests, and requests for proposals or quotations; (b) evaluating, establishing, and administering prospective and existing business relationships; (c) maintaining the security, integrity, and availability of the Site; (d) complying with applicable legal, regulatory, and contractual obligations, including recordkeeping obligations associated with public-sector procurement and the Universal Service (E-rate) program where applicable; and (e) establishing, exercising, or defending legal claims.

7. Disclosure to Third Parties

The Company does not sell, rent, lease, or trade Personal Information, and does not “share” Personal Information for cross-context behavioral advertising, as such terms are defined under applicable state privacy laws. The Company may disclose Personal Information only: (a) to Service Providers engaged to facilitate form submission, email delivery, web hosting, and business communications, each of which is permitted to Process Personal Information solely as necessary to perform services on the Company’s behalf; (b) where required by law, regulation, subpoena, court order, or other legal process, or upon lawful request by a governmental authority; (c) where reasonably necessary to protect the rights, property, or safety of the Company, its clients, Users, or the public; and (d) in connection with any merger, acquisition, reorganization, or transfer of all or substantially all of the Company’s assets, subject to the successor’s assumption of obligations materially consistent with this Policy.

8. Data Security

The Company maintains administrative, technical, and physical safeguards reasonably designed to protect Personal Information against unauthorized access, disclosure, alteration, and destruction, including encrypted transmission (HTTPS/TLS) for all Site traffic, security response headers, multi-factor authentication on Company business systems, and access restrictions limiting Personal Information to personnel with a legitimate business need. Notwithstanding the foregoing, no method of transmission over the Internet or method of electronic storage is entirely secure, and the Company cannot and does not guarantee absolute security.

9. Data Retention

The Company retains Personal Information only for so long as is reasonably necessary to fulfill the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, audit, or reporting requirements. Records associated with public procurement or the E-rate program may be retained for the periods required under applicable federal rules, which may extend to ten (10) years following the last date of service. Upon expiration of the applicable retention period, Personal Information is securely deleted or rendered de-identified.

10. Your Rights and Choices

Subject to applicable law, Users may request: (a) access to the Personal Information the Company holds concerning them; (b) correction of inaccurate Personal Information; (c) deletion of Personal Information, subject to the Company’s retention obligations; and (d) cessation of non-essential communications. Requests may be submitted in writing to the contact address set forth in Section 14. The Company will respond within the time period prescribed by applicable law and may require reasonable verification of the requester’s identity prior to fulfilling any request. The Company shall not discriminate against any User for the exercise of any right described herein.

11. Children’s Privacy

The Site is intended for business and institutional audiences and is not directed to individuals under the age of thirteen (13). The Company does not knowingly collect Personal Information from children through the Site, consistent with the Children’s Online Privacy Protection Act (COPPA). Any student data entrusted to the Company by educational institutions in connection with contracted services is governed exclusively by the applicable Client Agreement and applicable federal and state student privacy laws, including the Family Educational Rights and Privacy Act (FERPA) where applicable.

12. Third-Party Links and Resources

The Site may contain links to, or embed resources from, third-party websites and services that are not owned or controlled by the Company. The Company is not responsible for the privacy practices, content, or security of any such third parties, and the inclusion of any link does not imply endorsement. Users are encouraged to review the privacy policies of any third-party service they access.

13. Amendments

The Company reserves the right, in its sole discretion, to modify, amend, or supplement this Policy at any time. Any such modification shall be effective upon posting of the revised Policy to the Site with an updated Effective Date. Continued use of the Site following the posting of any modification constitutes acceptance of the revised Policy.

14. Governing Law and Contact Information

This Policy shall be governed by and construed in accordance with the laws of the State of Florida and applicable federal law of the United States, without regard to conflict-of-laws principles. Inquiries, requests, or notices concerning this Policy should be directed to:

Van Loon Technologies LLC
Attn: Privacy & Compliance
801 S Federal Hwy, Suite 418
Pompano Beach, FL 33062
info@vanloontechnologies.com