Legal
Privacy policy
This policy explains what Altura Systems, Inc. collects through this website, why, and what your rights are. It is written to be read, not to be skimmed past.
Who we are
Altura Systems, Inc. is a Corporation registered in the State of Delaware, United States, with its registered office at 131 Continental Dr, Ste 305, Newark, DE 19713, United States. For any privacy question, contact [email protected] or call +1 470-796-9783. We are the controller of the personal information described here.
What this policy covers
This policy covers https://alturasystems.io. It does not cover separate products we operate under their own terms, or third-party sites we link to, each of which publishes its own policy.
What we collect
Information you send us
If you submit the contact form, we receive the name, email address, organization (if you provide one), selected topic, and message you enter. If you email or call us instead, we hold whatever you choose to tell us.
Information collected automatically
Our web server records standard access logs: IP address, timestamp, the page requested, HTTP status, referring page, and browser user agent. Our network provider processes the same request data in order to deliver the site and to filter malicious traffic.
When you submit the contact form we also briefly record your IP address in order to enforce a rate limit. That record is discarded automatically within an hour and is not linked to your message.
Cookies and analytics
This website sets no cookies and runs no analytics or advertising trackers. There is no consent banner because there is nothing to consent to. The only third-party request the page makes is to Google Fonts for typefaces, described below.
Why we use it, and on what basis
- To answer you. We use contact details and message content solely to respond to your enquiry and to any follow-up conversation. Legal basis: our legitimate interest in responding to people who contact us, and steps taken at your request prior to entering a contract.
- To keep the site running and secure. Access logs and rate-limit records let us diagnose faults and resist abuse. Legal basis: legitimate interest in the security and availability of our systems.
- To meet legal obligations. Where law requires us to retain records, we do. Legal basis: legal obligation.
We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it to train AI models.
Who we share it with
We share personal information only with service providers acting on our instructions, and only as far as the service requires:
- Hosting provider. Operates the servers on which the site and its logs reside.
- Content delivery and security network. Serves the site and filters malicious traffic, processing request metadata in transit.
- Email delivery provider. Transmits contact form submissions to our inbox.
- Business email provider. Hosts the mailbox in which your correspondence is stored.
- Google Fonts. Serves the typefaces used on this site. Requesting a font discloses your IP address and user agent to Google. If you prefer to avoid this, a browser extension or setting that blocks third-party font loading will do so, and the site will fall back to system fonts without loss of function.
We may also disclose information where we are legally required to, or where necessary to establish or defend legal claims.
International transfers
We are based in the United States and our providers operate in the United States and Europe. If you contact us from outside those regions, your information will be transferred to and processed in them. Where transfers from the European Economic Area or the United Kingdom are involved, our providers rely on Standard Contractual Clauses or an equivalent approved mechanism.
How long we keep it
- Contact form submissions and correspondence: up to 24 months from our last exchange, unless an ongoing relationship requires longer.
- Server access logs: up to 30 days.
- Rate-limit records: up to 1 hour.
- Contract and financial records: as long as tax and company law require.
How we protect it
Transport is encrypted with HTTPS throughout. Credentials are stored outside the web root and never in source control. Administrative access requires SSH keys and provider accounts require multi-factor authentication. Further detail is on our security page.
No system is perfectly secure, and we will not claim otherwise. If a breach affects your information and presents a risk to you, we will notify you and any required regulator.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we relied on consent.
If you are in California, you additionally have the right to know what we collect and disclose, to request deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA.
To exercise any right, email [email protected]. We will respond within 30 days. We may need to verify your identity first, which normally means replying from the address we already hold. Exercising a right costs nothing.
If you are in the European Economic Area or the United Kingdom and believe we have handled your information improperly, you may also complain to your national supervisory authority.
Children
This website is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the effective date above. Material changes will be summarised at the top of this page for at least 30 days.