Privacy Policy
What this website collects, why, and what you can ask us to do about it. This covers s32.io only. Customer deployments are governed by their own agreements.
1. The short version
We collect what you type into our forms, and a minimal record of which pages get visited. We do not use advertising cookies, third-party analytics services, cross-site trackers or data brokers, and we do not sell or share personal information. Our analytics are first-party and do not identify you.
2. Information you give us
| Where | What we collect | Why |
|---|---|---|
| Contact form | The fields on the form, which include your name, work email, organization and your message | To respond to your enquiry and assess eligibility |
| Document request (white papers, reports) | Full name, work email, organization, and optionally role and sector | To send you the material and understand who our work reaches |
| Newsletter | Email address | To send The S32 Briefing, after you confirm |
The newsletter uses double opt-in. We email you a confirmation link and send nothing until you click it. Every issue carries a one-click unsubscribe.
3. Information collected automatically
We run our own analytics rather than a third-party service. For each page view we record:
- the path visited;
- the referring URL, if your browser sends one;
utm_source,utm_mediumandutm_campaignvalues if present in the link you followed;- a randomly generated session identifier.
That identifier is stored in your browser’s session storage, not in a cookie. It is discarded when you close the tab, it is not linked to your name or email, and it cannot be used to recognize you on a later visit or on any other website.
Our web servers also keep standard technical logs, including IP address and user agent, which we use for security, abuse prevention and diagnostics.
Cookies
This website sets no advertising or analytics cookies. If you sign in to the customer portal, we set a session cookie that is strictly necessary to keep you signed in. That is the only cookie we set, and it is not used for tracking. Because we set no non-essential cookies, you will not see a consent banner.
Bot protection
Our forms are protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Turnstile receives technical signals from your browser for that purpose. It is designed not to profile users and does not track you across sites. Cloudflare, Inc. acts as our processor for this.
4. How we use information
- To answer your enquiry and to send you material you asked for.
- To carry out the eligibility, sanctions, export-control and end-use checks described in our Terms of Service and on Eligibility. This is a legal obligation for the capabilities concerned.
- To send the newsletter you subscribed to.
- To understand which pages are useful and to improve them.
- To keep the site secure and prevent abuse.
- To keep records we are required to keep.
We do not use your information for automated decision-making that produces legal effects, and we do not build advertising profiles.
5. Legal bases (UK and EU visitors)
| Purpose | Basis |
|---|---|
| Responding to enquiries, sending requested documents | Legitimate interests, and steps taken at your request before entering a contract |
| Newsletter | Consent, which you may withdraw at any time |
| Eligibility, sanctions and export-control screening | Legal obligation |
| Security, abuse prevention, first-party analytics | Legitimate interests |
6. Who we share it with
We share personal information only with service providers who process it on our instructions, under contract, and only as needed to run this site:
- Cloudflare, Inc., for bot protection and network security.
- Our hosting and email providers, to serve the site and deliver our replies and newsletter.
We may also disclose information where we are legally required to, or to establish or defend legal claims. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months.
7. International transfers
We are based in the United States and our providers may process data in the United States and other countries. Where we transfer personal data out of the United Kingdom or the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses, and the UK Addendum where applicable.
8. How long we keep it
| Record | Retention |
|---|---|
| Enquiries and document requests | Up to 3 years from your last contact, unless a contract or legal obligation requires longer |
| Eligibility and export-control screening records | As long as required by applicable export-control and sanctions rules |
| Newsletter subscription | Until you unsubscribe, plus a suppression record so we do not email you again |
| Analytics page views | Aggregated. The session identifier is discarded when your browser session ends |
| Server security logs | Up to 12 months |
9. Your rights
Wherever you live, you can ask us to give you a copy of the personal information we hold about you, correct it, delete it, or stop sending you marketing. Email privacy@s32.io.
If you are in the UK or EEA, you also have the right to restrict or object to processing, to data portability, to withdraw consent at any time, and to complain to your supervisory authority. In the UK that is the Information Commissioner’s Office.
If you are a California resident, you have the right to know what we collect and why, to request deletion, to request correction, and to be free from discrimination for exercising those rights. We do not sell or share personal information, so there is nothing to opt out of, but you may still contact us to confirm that. You may use an authorized agent; we will verify the request with you.
We respond within 30 days, or 45 days for California requests, and we will tell you if we need longer. We do not charge for this.
10. Security
The site is served over HTTPS with HSTS, and we apply the usual protections against clickjacking, content-type confusion and cross-origin leakage. Access to submitted enquiries is limited to people who need it. No system is perfectly secure, but we design for least privilege and we log access.
11. Children
This site is for business and government audiences. It is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
12. Changes
We will update this policy when our practices change, and will revise the “last updated” date. If a change materially affects how we use information you have already given us, we will tell you directly where we have a way to reach you.
13. Contact
Privacy questions and rights requests: privacy@s32.io
S32 Technologies, 1500 N Grant Street, Suite R, Denver, Colorado 80203, United States.