Privacy Policy
How we collect, use, and protect your information
Effective Date: March 2026 · Last Updated: March 30, 2026
1. Who We Are
Gulf Shield Technologies ("GST," "we," "our," or "us") provides managed data protection, IT management, and application hosting services to small businesses and healthcare practices in the Tampa Bay area.
Contact: 2435 US-19 S, Suite 510, Holiday, FL 34691 · support@gulfshieldtech.com
2. Information We Collect
Information you provide: Name, email address, phone number, business name, and mailing address when you contact us, request a quote, or become a client. Payment information is processed by our payment processor and is not stored on our systems.
Information collected automatically: We use cookieless, privacy-respecting website analytics that do not track individual behavior or collect personal data. For managed service clients, we collect system health metrics and service logs necessary to deliver services.
3. Information We Do NOT Collect
- We do not use tracking cookies, advertising pixels, or behavioral analytics.
- We do not sell, rent, or share personal information with advertisers or data brokers.
- We do not access the contents of encrypted client backup data.
4. How We Use Your Information
- Delivering and maintaining services you have contracted for.
- Sending invoices and payment communications.
- Responding to support requests and inquiries.
- Sending service health and status reports.
- Security monitoring and incident response.
- Compliance with applicable legal obligations.
We do not use your information for marketing, profiling, or sale to third parties.
5. Third-Party Service Providers
We use a limited number of third-party providers to process payments, send transactional emails, and provide offsite backup storage. Each provider is contractually obligated to protect your data. A complete list of sub-processors is provided to managed service clients under their service agreement. We notify clients before engaging new sub-processors.
6. Data Security
We implement industry-standard administrative, technical, and physical safeguards to protect your information, including encryption at rest and in transit, access controls, network isolation, intrusion detection, and audit logging. Detailed security practices are available to clients and prospects upon request.
7. Data Retention
- Active clients: Data retained for the duration of the service agreement.
- After termination: Client data retained for 30 days, then permanently deleted. Immediate deletion available on written request.
- Website inquiries: Contact form submissions retained for 1 year, then deleted.
- Audit logs: Retained in accordance with applicable regulatory requirements.
8. HIPAA
For healthcare clients subject to HIPAA, we enter into a Business Associate Agreement (BAA) that governs our handling of Protected Health Information (PHI). Our BAA and detailed security documentation are available upon request. The BAA controls in the event of any conflict with this Privacy Policy regarding PHI.
9. Your Rights
You may request to access, correct, or delete the personal information we hold about you, receive a copy of your data in a portable format, or opt out of non-essential communications. Contact us at support@gulfshieldtech.com and we will respond within 30 days.
10. Children's Privacy
Our services are designed for businesses, not individuals under 16. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to active clients at least 30 days before taking effect. The "Last Updated" date at the top reflects the most recent revision.
12. Contact Us
Gulf Shield Technologies
2435 US-19 S, Suite 510, Holiday, FL 34691
support@gulfshieldtech.com