Privacy Policy

1. Introduction

VanderNet Technology Services ("VanderNet," "we," "our," or "us") respects your privacy and is committed to protecting the personal information entrusted to us.

As a provider of cybersecurity, managed information technology, consulting, and related professional services, we recognize the importance of maintaining the confidentiality, integrity, and availability of information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information obtained through our website, www.vandernet.io, our communication channels, marketing activities, and our direct business interactions.

Information we process on behalf of our managed services clients may also be subject to separate contractual agreements, including Master Services Agreements (MSAs), Statements of Work (SOWs), confidentiality agreements, and applicable data protection obligations.

By interacting with our website or voluntarily providing personal information, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will seek that consent separately.

2. Information We Collect

We may collect the following categories of information.

3. How We Use Personal Information

VanderNet may use collected information for the following legitimate business purposes:

• Responding to questions, requests, and inquiries
• Scheduling consultations, assessments, and meetings
• Providing requested cybersecurity, technology, and consulting services
• Administering existing and prospective business relationships
• Providing customer support, service notices, and account communications
• Communicating about services, educational resources, events, or other relevant business offerings in accordance with applicable law and communication preferences
• Processing job applications and employment inquiries
• Maintaining website functionality, performance, and security
• Measuring website traffic and marketing effectiveness
• Preventing, detecting, investigating, and responding to suspected fraud, misuse, cybersecurity threats, or unauthorized activity
• Maintaining appropriate business records
• Complying with legal, regulatory, contractual, or professional obligations

We may use authorized customer relationship management systems, automation tools, and other business technology platforms to support these activities.

We do not use personal information for materially unrelated purposes without an appropriate legal basis, additional notice, or consent when required.

4. SMS and Mobile Messaging Privacy

VanderNet may offer SMS and MMS communications for individuals who choose to receive business-related text messages.

Depending on the messaging program and the consent provided, communications may include:

• Appointment confirmations and reminders
• Responses to consultation requests
• Customer service and support communications
• Account and service-related notifications
• Important operational updates
• Educational information, event announcements, service offerings, and promotional communications

Consent to receive marketing text messages is separate from consent to receive non-marketing or service-related text messages.

Providing a mobile telephone number through a website form, by itself, does not constitute consent to receive marketing text messages.

Additional information concerning applicable messaging programs is provided in our SMS Terms and Conditions.

5. Email Communications

We may communicate by email concerning requested information, business relationships, service delivery, educational content, and promotional offerings.

Where required, marketing communications will be sent only with appropriate consent or another legally permitted basis.

Marketing emails will include a reasonable method for unsubscribing or managing communication preferences.

Unsubscribing from marketing communications does not necessarily prevent receipt of essential business, contractual, security, or service-related communications.

6. Cookies and Website Analytics

Our website may use cookies, pixels, and similar technologies to support functionality, security, analytics, and marketing measurement. These technologies may include:

• Essential Technologies: Required for core website operation, security, and functionality.
• Functional Technologies: Used to support website features and remember preferences.
• Analytics Technologies: Used to understand website traffic, visitor interactions, and site performance.
• Advertising Technologies: Where used, these help measure campaign effectiveness and support advertising activities.

We may use website analytics, customer relationship management, and advertising platforms, including Google Analytics, GoHighLevel, and other authorized providers, as applicable to our current website configuration.

Visitors may manage available cookie preferences through the privacy and cookie controls provided on our website, where implemented. Browser settings may also allow cookies to be restricted or deleted.

Where consent is legally required before optional tracking technologies are activated, we will seek that consent. Disabling certain technologies may affect website functionality or measurement capabilities.

We do not treat acceptance of website cookies as consent to receive SMS marketing communications.

7. How We Share Information

VanderNet does not sell personal information or mobile messaging consent information.

We may disclose personal information to authorized parties when reasonably necessary for the purposes described in this policy, including:

• Service Providers and Subcontractors: Companies supporting website hosting, customer relationship management, email delivery, telecommunications, analytics, payment administration, technical services, and other business operations.
• Professional Advisors: Legal counsel, accountants, auditors, insurers, and other professional advisors when appropriate.
• Legal and Regulatory Authorities: When disclosure is required by applicable law, valid legal process, or other legally recognized obligations.
• Security and Fraud Prevention: When reasonably necessary to investigate or respond to threats, fraud, unlawful activity, or security incidents.
• Business Transactions: Where legally permitted, information may be disclosed as necessary in connection with a proposed or completed merger, acquisition, reorganization, or transfer of business assets, subject to applicable confidentiality and privacy obligations.

These disclosures do not authorize the disclosure of mobile messaging opt-in data or consent for another organization's independent marketing or promotional activities.

We expect service providers processing personal information on our behalf to handle that information in accordance with applicable contractual and legal obligations.

Where advertising or analytics technologies constitute regulated sharing or targeted advertising under applicable privacy law, VanderNet will provide required disclosures and choices. Such processing will not include the transfer of SMS opt-in consent to third parties for their marketing purposes.

8. Information Processed on Behalf of Clients

In delivering cybersecurity, managed IT, and consulting services, VanderNet may access, transmit, store, or otherwise process information belonging to our business clients.

Depending on the engagement, this may include business records, employee information, technical system information, security logs, and other information contained in client-managed systems.

Where VanderNet processes personal information on a client's behalf, the client generally determines the purposes of that processing, subject to applicable laws and contractual arrangements.

VanderNet processes such information as reasonably necessary to deliver authorized services and fulfill contractual obligations.

The handling of client information, including confidentiality, permitted uses, retention, security responsibilities, and incident notifications, may be governed by the applicable MSA, SOW, data protection agreement, or other executed contractual terms.

Individuals seeking access to, correction of, or deletion of information controlled by a VanderNet client may need to direct their request to the relevant client organization.

This Privacy Policy does not expand, replace, or amend the contractual obligations established under an executed client agreement.

9. Data Security

VanderNet employs administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, alteration, and disclosure.

Depending on the nature of the information and systems involved, safeguards may include access controls, identity verification, encryption, security monitoring, personnel procedures, and other appropriate security measures.

Access to personal information is limited according to legitimate operational and business requirements.

No method of electronic transmission, storage, or information processing can be guaranteed completely secure. Although we take reasonable measures to protect information, we cannot guarantee that every security incident or unauthorized access attempt can be prevented.

We maintain processes for evaluating and responding to suspected security incidents and will provide notifications when required by applicable law or contractual obligations.

10. Artificial Intelligence and Business Automation

VanderNet may use approved automation, analytical, and artificial intelligence-assisted technologies to improve administrative efficiency, communication workflows, operational processes, and service delivery.

Personal information processed through these systems will remain subject to this Privacy Policy and applicable contractual obligations.

We will evaluate the intended use of such technologies and apply appropriate safeguards based on the sensitivity of the information involved.

Use of client confidential information with external technology platforms remains subject to applicable service agreements, confidentiality obligations, and any additional required authorizations.

This section does not independently authorize the use or disclosure of client information beyond the purposes permitted under applicable agreements and law.

11. Data Retention

We retain personal information for as long as reasonably necessary to accomplish the purposes for which it was collected, maintain business records, provide requested services, resolve disputes, enforce agreements, and satisfy applicable legal obligations.

Retention considerations may include:

• The nature and sensitivity of the information
• The purpose for which it was collected
• The duration of the business relationship
• Applicable contractual requirements
• Legal, accounting, tax, and regulatory obligations
• Security, fraud prevention, and dispute-resolution needs

Information relating to prospective customers may be retained while a legitimate business relationship or follow-up purpose exists, subject to applicable law and communication preferences.

Employment applicant information may be retained in accordance with applicable employment laws and internal retention practices.

Certain records may remain temporarily in backups or archives pursuant to established technical retention cycles.

When information is no longer reasonably necessary, we will delete, de-identify, or otherwise dispose of it in accordance with applicable requirements and established procedures.

Client information processed under managed service arrangements may follow separately agreed retention and disposition requirements.

12. Privacy Rights and Choices

Depending on your residence, the nature of the information, and applicable law, you may have rights to:

• Request information about the personal information we maintain
• Request access to certain personal information
• Request corrections to inaccurate information
• Request deletion of eligible personal information
• Request information concerning applicable disclosure practices
• Opt out of certain marketing communications or regulated data-processing activities
• Withdraw consent where processing relies on consent
• Exercise other privacy rights provided by applicable law

Certain requests may be limited by legal requirements, contractual obligations, security considerations, or applicable exceptions.

We may take reasonable steps to verify your identity and authority before responding to requests involving personal information.

We will respond to valid requests within applicable legal timeframes.

Where applicable law provides an appeal process or protection against discrimination for exercising privacy rights, we will honor those requirements.

13. Children's Privacy

Our website and services are intended primarily for businesses and professional audiences.

We do not knowingly collect personal information directly from children under the age of 13 through our public website without appropriate authorization.

If we become aware that personal information has been collected from a child in circumstances requiring parental consent or other protective measures, we will take appropriate action in accordance with applicable law.

Parents or guardians may contact hello@vandernet.io with relevant concerns.

14. Third-Party Websites and Services

Our website may contain links to third-party websites, tools, or services that are independently operated.

VanderNet is not responsible for the privacy practices or content of independently operated third-party websites.

We encourage visitors to review the applicable privacy policies before providing personal information to such organizations.

15. International Processing

Some authorized technology providers may process or store information in jurisdictions outside the United States.

Where international processing occurs, we will take appropriate measures consistent with applicable legal and contractual obligations.

16. Changes to This Privacy Policy

VanderNet may modify this Privacy Policy to reflect changes in our services, technology systems, business practices, or applicable requirements.

The effective date displayed at the beginning of this policy will identify the most recent revision.

Material changes will be communicated through appropriate channels when required by applicable law.

Any revised policy will be made available through our website.

17. Contact Information

For questions about this Privacy Policy, privacy requests, or concerns about how personal information is handled, please contact: