Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how GONDOLA ASSETS, LLC, a Utah limited liability company doing business as Gondola Assets, collects, uses, stores, shares, and protects personal information obtained through our website located at www.gondolaassets.mom, through any related digital properties, through our professional services, and through any other interactions you may have with our organization. This policy applies to all visitors, users, clients, prospective clients, vendors, and job applicants who interact with Gondola Assets in any capacity.

Gondola Assets is a computer systems design and related services firm specializing in enterprise systems architecture, cloud infrastructure engineering, systems integration, cybersecurity, and managed IT operations. Our principal office is located at 1337 E 750 N, Orem, Utah 84097-5480, United States of America. Throughout this document, references to Gondola Assets, we, us, and our refer to GONDOLA ASSETS, LLC and its affiliated operating entities. The website was developed and is maintained by the Gondola Assets engineering team, who designed this site with data privacy as a foundational requirement.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision contained herein, you should discontinue use of our website and services immediately. We reserve the right to modify this policy at any time, and such modifications will be effective immediately upon posting to this page. Your continued use after changes constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

This Privacy Policy is designed to comply with applicable privacy laws in the jurisdictions where we operate, including but not limited to the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and applicable provisions of the General Data Protection Regulation to the extent they govern our processing activities. We are committed to the principles of transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality in all our data handling practices.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you interact with our website, communicate with our team, or engage our services. This includes information submitted through our contact forms, email correspondence, phone calls, service inquiry forms, and client onboarding documentation. The categories of information we may collect include your full name, business email address, personal email address if provided, telephone number, job title, organization name, physical business address, billing address, payment information including bank account details and credit card data where applicable for service engagement, tax identification numbers, and any other information you choose to include in messages, project descriptions, or service requests submitted to us.

When you engage Gondola Assets for professional services, we may also collect additional information necessary for the performance of our contractual obligations. This can include system access credentials provided under strict security protocols, network configuration data, infrastructure documentation, architectural diagrams, and other technical information related to your existing systems environment that you authorize us to review and optimize. We treat all client-provided technical information with the highest level of confidentiality and security.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through standard web technologies including your Internet Protocol address, browser type and version, operating system type and version, device type and manufacturer, screen resolution, referring and exit pages, date and time stamps of your visit, pages viewed and time spent on each page, clickstream data including the sequence of links and buttons you interact with, mouse movement patterns, scroll depth, and form interaction behavior. We use server logs, web beacons, tracking pixels, and similar technologies to collect this information. Server log data is typically retained for thirty days before being purged unless required for security investigations or legal compliance.

2.3 Information from Third Parties

We may receive information about you from third-party sources to supplement our own records including business intelligence platforms, publicly available business registries, professional networking platforms, trade association directories, credit reporting agencies, and referral partners. We treat all information received from third-party sources in accordance with this Privacy Policy and applicable law.

3. How We Use Your Information

We use the information we collect for specific business purposes necessary to provide our services, operate our business, and comply with legal obligations. We use your information to provide, maintain, and improve our services including the delivery of contracted computer systems design, architecture consulting, cloud infrastructure engineering, systems integration, cybersecurity assessment, and managed IT operations services. This includes using your contact information to communicate about project status, deliverables, milestones, and service-related notifications throughout the engagement lifecycle. We use your information to respond to inquiries submitted through our website, by email, or by telephone, providing responsive and personalized replies. We may follow up on inquiries that do not result in an immediate engagement to determine whether your needs have changed. We use your information to process payments, manage billing and invoicing, maintain financial records, and fulfill accounting obligations. We use your information to send marketing communications about our services, industry insights, technical white papers, and company updates where you have provided consent or where otherwise permitted by applicable law. You may opt out at any time. We use your information to analyze website usage patterns, improve user experience, and develop aggregate insights. We use your information to protect the security and integrity of our systems, including monitoring for unauthorized access, investigating security incidents, detecting and preventing fraud, and complying with legal obligations.

4. Legal Bases for Processing

For individuals located in jurisdictions requiring a specified legal basis, we rely on the following grounds. Contractual Necessity: processing necessary for performance of a contract with you. Legitimate Interests: processing necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights, including operating our business, providing customer support, protecting against fraud, and marketing to existing and prospective business clients. Consent: where required, we obtain your consent before processing for specific purposes. You may withdraw consent at any time, though withdrawal does not affect lawfulness of prior processing. Legal Obligation: processing necessary to comply with applicable laws, regulations, court orders, or government requests. Vital Interests: in rare circumstances, processing necessary to protect vital interests.

5. Disclosure of Your Information

We do not sell your personal information. We do not rent, trade, or otherwise disclose your personal information to third parties for their independent commercial use. We may share information with service providers and subcontractors who perform functions on our behalf, each bound by contractual obligations limiting their use to the specific purpose disclosed and requiring appropriate security measures. These include cloud hosting providers, payment processors, CRM operators, email services, analytics providers, and professional advisors. We may disclose information as required by law, regulation, legal process, or governmental request, making reasonable efforts to notify you unless prohibited. We may disclose information in connection with a corporate transaction, requiring the acquiring entity to honor this policy. We may disclose aggregated, de-identified, or anonymized information for any lawful purpose.

6. Data Retention

We retain personal information for no longer than necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form submissions and inquiry correspondence are retained for two years from last communication. Client engagement records are retained for the duration of the client relationship plus seven years following termination. Financial records are retained for seven years in accordance with applicable tax laws and financial regulations. Server logs are retained for thirty days before being purged. Anonymized aggregate analytics data may be retained indefinitely for trend analysis and business planning.

7. Data Security

We implement and maintain comprehensive administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information. Our security program is aligned with industry standards and regularly reviewed. Technical safeguards include TLS 1.3 encryption for data in transit, AES-256 encryption at rest, multi-factor authentication, role-based access controls, automated vulnerability scanning, intrusion detection and prevention systems, endpoint detection and response, SIEM with real-time alerting, and regular third-party security assessments. Administrative safeguards include documented security policies reviewed annually, mandatory security awareness training, background checks, formal incident response procedures, vendor risk management, and tested business continuity and disaster recovery plans. While we implement robust measures, no security system is absolute. In the event of a breach affecting your personal information, we will notify you and relevant authorities per applicable legal requirements.

8. Your Privacy Rights

Depending on your jurisdiction, you may have rights including access and data portability, correction of inaccurate information, deletion under certain circumstances, restriction of processing, opt-out of sale or sharing (Gondola Assets does not sell personal information and has not done so in the preceding twelve months), and non-discrimination for exercising privacy rights. To exercise rights, submit a verifiable request using the contact information in Section 16. We acknowledge within ten business days and respond within forty-five calendar days, with a possible forty-five day extension. Identity verification will be required.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance browsing, analyze traffic, and understand visitor patterns. Essential cookies enable core functionality and do not require consent. Analytics cookies help us understand interaction patterns anonymously. You may configure browser settings to manage cookies. Disabling essential cookies may affect site functionality. We do not currently respond to Do Not Track signals in a standardized manner as no universal standard exists.

10. Children's Privacy

Our website and services are directed at business professionals and not intended for individuals under eighteen. We do not knowingly collect personal information from children under thirteen. If we learn we have inadvertently collected such information, we will delete it immediately.

11. International Data Transfers

Gondola Assets is headquartered in the United States. Data processing occurs primarily within the United States. If you access our services from outside the United States, your information may be transferred to and processed within the United States. We implement appropriate safeguards for cross-border transfers as required by applicable law. By using our services, you acknowledge your information may be subject to United States law.

12. Third-Party Services and Links

Our website may contain links to third-party websites not owned or controlled by Gondola Assets. We are not responsible for third-party privacy practices. We encourage reviewing third-party privacy policies before providing information. When engaging service providers, we conduct due diligence and enter written agreements with data protection obligations consistent with this policy.

13. Do Not Track Signals

Certain browsers offer Do Not Track features. No consensus exists on interpretation of such signals. Our website does not currently respond to Do Not Track signals. You may manage tracking preferences through browser cookie controls.

14. Data Breach Notification

In the event of a security incident involving unauthorized access to, disclosure of, or loss of personal information, we will execute incident response procedures, assess scope and impact, and notify affected individuals and relevant authorities per applicable legal requirements. Notifications will describe the incident, affected categories, likely consequences, and measures taken to address the breach.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be posted with a new Last Updated date and additional notice where required by law. We encourage periodic review.

16. Contact Us About Privacy

For questions, concerns, or to exercise privacy rights, contact us at:

GONDOLA ASSETS, LLC
Attn: Privacy Office
1337 E 750 N
Orem, UT 84097-5480
United States of America

Email: service@gondolaassets.mom
Phone: +1 (509) 875-5889
Website: www.gondolaassets.mom

The Gondola Assets engineering team developed and maintains this website with data privacy and security as foundational design principles embedded throughout our technology platform.