1. Who We Are
Osiris LLC, operating as Osiris.TECH, is a managed IT service provider headquartered in the United States. We deliver technology management, cybersecurity, cloud, and strategic IT consulting to businesses across multiple industries. Our website serves as an information resource and a point of first contact for organizations evaluating our services.
References to "we," "us," or "Osiris.TECH" in this document mean Osiris, LLC and any subsidiaries or affiliates that operate under the same brand. References to "you" mean the individual reading this policy whether a site visitor, prospective client, or other interested party.
2. What This Policy Covers
This Privacy Policy explains:
- What personal information we collect when you visit our website or contact us
- Why we collect it and how we use it
- Who we share it with and under what circumstances
- How long we keep it
- What security controls we apply to protect it
- The rights you have over your personal information and how to exercise them
This policy does not cover:
- Personal data Osiris.TECH processes on behalf of client organizations as a data processor that is governed by the applicable service agreement and Data Processing Addendum
- Third-party websites or services linked from our site
- Information collected through offline channels such as in-person events or phone calls, except where explicitly noted
3. Information We Collect
3.1 Information You Give Us Directly
We collect personal information when you fill in a form, request a consultation, subscribe to communications, or reach out by email or phone. This typically includes:
- Contact details: your first and last name, business email address, and phone number
- Company information: organization name, industry, approximate size, and your role or title
- Inquiry content: the questions, requirements, or context you describe when you reach out
- Communication preferences: whether you want to receive newsletters or updates and in what format
We collect only what you choose to share. Providing additional detail is always optional and helps us respond more usefully.
3.2 Information Collected Automatically
When you browse our website, our hosting infrastructure and analytics tools automatically record certain technical data. We use this data to operate and improve the site, not to identify individuals. Automatically collected data includes:
- Network identifiers: your IP address and approximate geographic region (city or state level)
- Device and browser: browser name and version, operating system, and device type (desktop, tablet, mobile)
- Session behavior: pages viewed, time on page, navigation path, and links clicked
- Referral source: the URL or search term that brought you to our site
- Cookie and tracking data: identifiers placed by our analytics tools (see Section 7 for cookie details)
3.3 Information from Third-Party Sources
Occasionally we receive information about prospective clients from publicly available sources such as professional networks, business directories, or referrals from existing clients. We use this information solely to determine whether our services may be relevant and to initiate a conversation. We do not purchase personal data from data brokers.
3.4 A Note on Client-Side Data
When Osiris.TECH technicians access client systems, networks, or environments to deliver contracted services, we may encounter personal data belonging to client employees, customers, or end users. We act as a data processor in that context we follow the client's documented instructions, apply the security controls specified in the applicable agreement, and do not use that data for any purpose outside the service engagement. This Privacy Policy does not govern that processing.
4. How and Why We Use Your Information
We use personal information for specific, legitimate purposes. The table below maps each purpose to the legal basis we rely on where applicable law requires one.
| Purpose | What It Means in Practice | Legal Basis |
|---|---|---|
| Responding to inquiries | Answering questions submitted through our contact form or by email | Legitimate interest / Contract |
| Service delivery | Fulfilling contracted managed IT obligations for existing clients | Contract performance |
| Business development | Following up on leads and scheduling discovery calls or assessments | Legitimate interest |
| Marketing communications | Sending newsletters, security alerts, and service updates (with opt-out) | Consent or legitimate interest |
| Website analytics | Understanding traffic patterns to improve site performance and content | Legitimate interest |
| Security and fraud prevention | Detecting and blocking unauthorized access or abuse of our website | Legitimate interest |
| Legal compliance | Meeting recordkeeping, tax, and regulatory obligations | Legal obligation |
| Legal claims | Establishing, exercising, or defending legal rights when necessary | Legitimate interest |
We do not use personal information for automated decision-making that produces legal or similarly significant effects without human review. We do not profile individuals for advertising purposes.
6. How Long We Keep Your Information
We retain personal information for the minimum period needed to accomplish the purposes described in this policy, unless a longer period is required by law, contract, or legitimate business need.
| Data Category | Retention Period |
|---|---|
| Website inquiry and contact form submissions | Up to 3 years from last interaction; longer if a service relationship develops |
| Contracted client account and service records | Duration of the agreement plus a minimum of 7 years for legal and audit compliance |
| Website analytics data (anonymized) | Up to 26 months, then auto-deleted or re-aggregated |
| Marketing opt-in and opt-out records | Indefinitely, to honor communication preferences |
| Financial and billing records | As required by applicable tax law (typically 7 years) |
| Security incident and access logs | Up to 2 years, or longer if subject to investigation |
| Legal hold data | For the duration of any active legal matter, then per normal schedule |
When the applicable retention period expires and no legal basis exists to keep data longer, we securely delete or render it permanently anonymous using industry-standard methods such as cryptographic erasure or certified destruction.
7. Cookies and Tracking Technologies
7.1 What Cookies Do
Cookies are small data files stored in your browser when you visit a website. They allow the site to remember information between page loads and visits. We also use similar technologies including pixel tags and local storage. None of our cookies are used to deliver third-party advertising.
7.2 Cookie Categories We Use
| Category | Purpose and Examples |
|---|---|
| Essential | Necessary for the website to function e.g., remembering your cookie consent choice and maintaining session security. You cannot opt out of these. |
| Analytics | Measure how visitors interact with pages and identify content improvements. We use Google Analytics with IP anonymization enabled. |
| Functional | Remember optional preferences such as language settings or form auto-fill to improve your browsing experience. |
| Marketing (limited) | Track the effectiveness of marketing campaigns that direct traffic to our site. We do not use retargeting or behavioral advertising cookies. |
7.3 Your Cookie Choices
You can control cookies in several ways:
- Consent banner: on your first visit we present a consent tool where you can accept or decline non-essential cookie categories
- Browser settings: most browsers let you block or delete cookies through their privacy or settings menus
- Google Analytics opt-out: install the browser add-on at tools.google.com/dlpage/gaoptout to prevent Analytics tracking across all sites
Declining analytics or functional cookies will not prevent you from using the site, but some features may behave differently.
8. How We Protect Your Information
Information security is central to Osiris.TECH's identity as a company. We apply the same security discipline to our own data environment that we recommend to clients. Our controls include:
8.1 Technical Controls
- Data transmitted across our systems is encrypted in transit using industry-standard protocol (TLS/SSL) and encrypted at rest within our infrastructure
- Multi-factor authentication required for all employee access to systems holding personal data
- Network segmentation and firewall policies limiting access to production systems
- Continuous threat surveillance and automated patching routines are maintained to protect operational integrity.
9. Your Privacy Rights
Depending on where you live, different legal frameworks give you rights over your personal information. The table below summarizes the rights we honor regardless of jurisdiction, followed by jurisdiction-specific notes.
| Right | What You Can Ask Us to Do |
|---|---|
| Access | Provide a copy of the personal information we hold about you, along with details about how we use and share it |
| Correction | Fix personal information that is inaccurate, outdated, or incomplete |
| Deletion | Erase your personal information when retention is no longer legally or contractually required subject to exceptions noted below |
| Restriction | Temporarily pause processing while a dispute about accuracy or legal basis is resolved |
| Portability | Receive your personal data in a structured, machine-readable format and transfer it to another service if technically feasible |
| Objection | Object to processing based on legitimate interest, including for direct marketing we will stop unless we have a compelling overriding reason |
| Withdraw Consent | Revoke any consent you have given at any time; this does not affect processing already completed before withdrawal |
| Non-Discrimination | Exercise any of the above rights without receiving inferior service, higher prices, or any other penalty from Osiris.TECH |
To submit a request, email privacy@osiris.tech with your name, the right you wish to exercise, and enough identifying information for us to locate your records. We will verify your identity before acting and respond within 30 calendar days. Complex requests may require up to an additional 60 days; we will notify you if an extension is necessary.
We may be unable to delete information we are legally required to retain, or information necessary to complete a contract. In those cases we will explain the specific reason we cannot fulfill the request in full.
10. California Residents Additional Rights
The California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), grants California residents specific rights that supplement those in Section 9.
10.1 Categories of Personal Information Collected in the Past 12 Months
- Identifiers name, email address, IP address, company name
- Professional information job title, industry, company size
- Internet activity pages visited, session behavior on our website
- Geolocation city and state level, derived from IP address
- Commercial information service inquiries and client purchase history
- Inferences conclusions about technology needs drawn from inquiry content
10.2 We Do Not Sell or Share Personal Information
Osiris.TECH does not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising. No opt-out is required because we do not engage in these activities.
10.3 Sensitive Personal Information
We do not intentionally collect sensitive personal information as defined by the CCPA such as financial account numbers, precise geolocation, health data, or government-issued identifiers through the website. If such information is inadvertently submitted via a contact form, we delete it and request that you resend your inquiry without including sensitive details.
10.4 Authorized Agents
California residents may designate an authorized agent to submit CCPA requests on their behalf. We require written proof of the authorization and may contact you directly to verify the request before processing it.
10.5 Shine the Light
California Civil Code Section 1798.83 allows California residents to request information about personal information disclosed to third parties for direct marketing during the preceding calendar year. Osiris.TECH does not disclose personal information to third parties for their own direct marketing purposes. No request under this provision is necessary.
11. International Data Transfers
Osiris.TECH's primary operations and systems are located in the United States. If you visit our website or contact us from outside the United States including from the European Economic Area (EEA), the United Kingdom, or Canada your personal information will be transferred to and processed in the United States.
United States data protection law differs from the laws of many other countries. Where we transfer personal data from the EEA or the UK to the United States or other countries not recognized as providing an equivalent level of protection, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the equivalent instrument recognized by UK authorities.
To inquire about the specific mechanisms we use for your data, contact privacy@osiris.tech.
12. Marketing and SMS Communications
12.1 Email Marketing
If you subscribe to our mailing list or request ongoing communications, you will receive emails covering cybersecurity news, service updates, and occasional promotional content. Every marketing email includes a one-click unsubscribe link. Processing your opt-out typically takes up to five business days.
Transactional messages such as consultation confirmations, invoice notices, and service-related alerts are not subject to marketing opt-out and will continue for the duration of any active relationship.
12.2 SMS / Text Messages
We send text messages only to individuals who have explicitly opted in. Message types include:
- Appointment and consultation reminders
- Support ticket status updates
- Security alerts relevant to a client's environment
- Billing and account notifications
- Opt-out: reply STOP to any text message at any time. You will receive a single confirmation and no further messages.
- Help: reply HELP or visit www.osiris.tech/sms-help for support.
- Frequency: varies by engagement type; we do not send bulk promotional SMS campaigns.
- Carrier charges: standard message and data rates from your carrier may apply.
- Data sharing: SMS opt-in data is never shared with third parties for marketing purposes.
13. Children's Privacy
Our website and services are designed for business audiences. We do not knowingly collect or solicit personal information from anyone under the age of 16. If we discover that we have inadvertently collected information from a minor, we will delete it promptly. If you have reason to believe a child has submitted personal information through our site, contact privacy@osiris.tech immediately.
14. Third-Party Links
Our website may contain links to external resources partner websites, technology vendor pages, industry publications, or social media platforms. These links are provided for convenience and informational value. Osiris.TECH does not control, endorse, or take responsibility for the privacy practices of any external site. When you navigate away from www.osiris.tech, this Privacy Policy no longer applies. We encourage you to review the privacy notice of any third-party site you visit.
15. Do Not Track Signals
Some browsers transmit a "Do Not Track" (DNT) header to websites as you browse. There is currently no universally accepted technical standard for how websites should respond to DNT signals. Our website does not alter its behavior in response to DNT headers. If a recognized standard is established, we will reassess our approach. In the meantime, you can manage tracking preferences through our cookie consent tool (Section 7) or your browser settings.
16. Changes to This Privacy Policy
We may update this Privacy Policy as our practices evolve, as new services are introduced, or as laws change. The "Last Revised" date at the top of the document and in the header of each page reflects when the most recent changes took effect.
For material changes meaning those that meaningfully affect how we collect or use personal information, or that reduce your rights we will provide more prominent notice, such as a banner on the website or a direct email to known contacts, at least 14 days before the change takes effect where practicable.
Continued use of the website after a revised policy is posted constitutes acknowledgment of the changes. If you disagree with a change, you may contact us to discuss it or discontinue use of the site.
17. How to Reach Us
Our Privacy Team handles all questions, complaints, and formal data subject requests. We are committed to responding promptly and transparently.
| Primary Contact | |
|---|---|
| Privacy Email | privacy@osiris.tech |
| General Inquiries | info@osiris.tech |
| DSAR / Rights Request | privacy@osiris.tech subject line: Privacy Rights Request |
| Breach / Incident | privacy@osiris.tech subject line: Urgent Privacy Incident |
| Response Time Target | Initial acknowledgment within 3 business days; substantive response within 30 days |