01. About this policy
Iron Fist Labs LLC ("we", "our", or "us") operates ironfistlabs.com. This policy explains how we handle information collected through this website and initial inquiries.
02. Information we collect
When you submit an inquiry, we collect your first and last name, email address, company, telephone number, message, inquiry topic, and the page from which you contacted us. We also collect your service selection when relevant to your inquiry. Please do not send passwords, sensitive incident evidence, health information, or other confidential records through the general inquiry form.
Our hosting and security services process technical information needed to operate and protect the website, including connection and browser information. Our inquiry service uses a protected, derived identifier based on your IP address to limit abusive submissions.
03. How we use information
We use inquiry details to respond to you, understand your requirements, organize follow-up, and discuss services you request. We use technical information to operate the website, troubleshoot problems, and prevent spam and abuse. Submitting an inquiry does not subscribe you to a marketing newsletter.
04. Service providers
We host the website on Amazon Web Services. We store and manage inquiries in HubSpot so our team can track requests and respond. These providers process information in connection with delivering their services.
We use Cloudflare Turnstile to protect forms from spam and abuse. Turnstile processes browser and connection signals, including IP address and browser information, to distinguish legitimate visitors from automated traffic. See the Cloudflare Turnstile Privacy Addendum and HubSpot privacy information.
Service providers may process information outside your country. Applicable protections and contractual arrangements depend on the provider and service used. We may also disclose information when required by law or necessary to protect legal rights and security.
05. Cookies, analytics, and external links
With your permission, we use Google Analytics 4 to measure page visits, campaign sources, scrolling, navigation and contact clicks, form starts, and successful inquiries. Google processes browser and device information and analytics identifiers to provide these reports. Analytics does not load until you accept it. We do not send inquiry field contents such as names, email addresses, telephone numbers, company names, or messages to Google Analytics. For Google Analytics, we remove URL query strings from page addresses and accept only restricted campaign labels. Advertising features are disabled. We do not currently load Google Ads conversion tags. If you separately accept LinkedIn measurement using Accept both in our preferences, we load the LinkedIn Insight Tag on our penetration-testing marketing pages. LinkedIn can process page URLs, referring URLs, IP address, browser and device information, timestamps, cookies and advertising identifiers, and limited page interaction data. It may match visits to LinkedIn member accounts to provide advertising measurement and audience insights. We send a conversion identifier after an inquiry is successfully received, without supplying inquiry contents or email addresses for enhanced matching. See LinkedIn privacy information. Choosing Analytics only does not enable LinkedIn tracking. Our inquiry form connects to HubSpot through our server and does not embed a HubSpot marketing form or tracking script. Security features may use browser signals or storage needed for verification. We also use browser storage limited to the current tab to remember campaign labels (source, medium, campaign, content, and term), the landing-page path, and the referring website hostname. This information expires after 30 minutes of inactivity and is sent to HubSpot with your inquiry to help us understand which marketing brings inquiries. We do not store unrelated URL query parameters, full referring URLs, or advertising click identifiers in this attribution feature.
Links to YouTube, LinkedIn, and other websites take you to services governed by their own privacy policies. You can accept or decline analytics and change your choice using Analytics preferences in the footer. We remember your choice for up to 180 days. Declining does not prevent you from using our forms. You can withdraw LinkedIn permission by choosing Analytics only or Decline optional tracking; we stop loading its tag. You can also manage third-party cookies through your browser and advertising choices through your LinkedIn settings. Analytics cookies are configured to expire after 180 days and may be renewed on visits. See Google privacy information.
06. Retention and security
We retain personal information for as long as needed to respond to requests, manage business relationships, and meet applicable legal obligations. You can contact us to request deletion, subject to requirements that may require us to retain certain records.
We use technical and organizational safeguards to protect information. No internet transmission or storage system can be guaranteed completely secure.
07. Your choices and rights
Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to the processing of your information, or request a portable copy. Where processing depends on consent, you may withdraw that consent. You may also have a right to complain to your local data protection authority.
Contact info@ironfistlabs.com to make a request. We may need to verify your identity before acting on it. We do not sell personal data for monetary value.
08. Contact and updates
For privacy questions, email info@ironfistlabs.com or write to Iron Fist Labs LLC, 135 N Old Woodward Ave, Suite 200, Birmingham, MI 48009, United States. You may also contact our Switzerland and EU team at emea@ironfistlabs.com.
We will update this page when our website practices change. The revision date appears above.