Privacy Policy

1. Introduction

This Privacy Policy explains how Tier 1 Services LLC, d/b/a T1 Services (“T1 Services,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects information when you visit t1services.us, contact us, request a consultation, or engage us for consulting or professional services.

2. Information We Collect

Information you provide

Depending on how you interact with T1 Services, you may provide:

• Name and contact information, including email address and telephone number.
• Company, organization, or property information.
• The service you are interested in.
• Information contained in messages, consultation requests, or other communications.
• Billing, business contact, and engagement administration information.
• Information necessary to scope, perform, document, or administer professional services.

Information collected automatically

When you visit our website, certain technical information may be generated or processed automatically, including:

• Internet Protocol (IP) address.
• Browser and device information.
• Date and time of requests.
• Pages or website resources requested.
• Referring information.
• Security, fraud-prevention, server, network, firewall, and content-delivery logs.

This information is primarily used to operate, secure, troubleshoot, and improve our website and services.

3. How We Use Information

T1 Services may use information to:

• Respond to questions, inquiries, and consultation requests.
• Communicate with prospective and existing clients.
• Evaluate, quote, and scope potential engagements.
• Deliver contracted professional services.
• Prepare assessments, reports, recommendations, and other deliverables.
• Administer contracts, billing, and business records.
• Maintain, secure, troubleshoot, and improve our website and technology.
• Detect or investigate fraud, abuse, unauthorized activity, or security incidents.
• Meet legal, contractual, accounting, insurance, and regulatory obligations.
• Establish, exercise, or defend legal claims.

We do not use personal information obtained through this website to create profiles for third-party behavioral advertising.

4. Sale of Personal Information

T1 Services does not sell personal information.

We also do not sell sensitive personal information or use personal information obtained through this website for third-party targeted advertising.

5. Service Providers and Third Parties

T1 Services may use third-party providers to operate our website, business, and client services. Depending on the service involved, these providers may include:

• Cloud hosting and infrastructure providers.
• Content delivery and website security providers.
• Email, collaboration, and communications providers.
• Domain and DNS providers.
• Payment, accounting, and business administration providers.
• Professional advisers.
• Security and fraud-prevention providers.

These providers may process information only as reasonably necessary for the services they provide to T1 Services or as otherwise permitted by applicable agreements and law.

Amazon Web Services

T1 Services uses Amazon Web Services (“AWS”) infrastructure for portions of its website and technology environment. Website requests and communications may therefore be processed through AWS services used for hosting, content delivery, security, application processing, email delivery, or related infrastructure.

reCAPTCHA

Our website uses Google reCAPTCHA or related fraud-prevention technology to help protect forms against spam, automated submissions, abuse, and malicious activity. This technology may process technical and interaction information such as IP address, device or browser characteristics, cookies or similar technologies, and information concerning interactions with the website for security and fraud-prevention purposes.

6. Third-Party Sharing Required for the Scope of Services

As part of providing contracted services, T1 Services may need to share certain client information, technical information, business information, or other data with third parties when reasonably necessary to perform the agreed-upon scope of work.

Such third parties may include, as applicable:

• Software and technology vendors.
• Cloud service providers.
• Cybersecurity and security product vendors.
• Hardware manufacturers, distributors, or suppliers.
• Internet, telecommunications, hosting, or network providers.
• Managed service, specialty, or authorized subcontractors.
• Payment processors.
• Insurance carriers or brokers.
• Auditors, assessors, or compliance-related service providers.
• Other vendors, consultants, or service providers involved in completing an authorized engagement.

T1 Services will limit information shared with third parties to information reasonably necessary to perform the applicable service, troubleshoot an issue, obtain technical support, procure or configure products or services, complete an assessment, or otherwise fulfill the client's authorized scope of work.

Where practical, T1 Services will use vendors and service providers with appropriate privacy and security practices. Third-party providers, however, may maintain their own privacy policies, terms, data-processing practices, and security controls.

By authorizing T1 Services to perform services that reasonably require interaction with a third-party provider, the client authorizes T1 Services to provide that third party with information reasonably necessary to complete the authorized work.

T1 Services will not intentionally provide a third party with client data unrelated to the authorized scope of services unless:

• The client directs or authorizes the disclosure.
• The disclosure is required by law.
• The disclosure is reasonably necessary to protect systems, property, individuals, or legal rights.
• The disclosure is otherwise permitted under the applicable client agreement.

When an engagement involves particularly sensitive, confidential, regulated, or protected information, additional restrictions may be established through a Statement of Work, Master Services Agreement, confidentiality agreement, Business Associate Agreement, Data Processing Agreement, or other written agreement.

7. Cookies and Similar Technologies

Our website and supporting services may use cookies, local storage, or similar technologies when necessary to maintain website functionality, protect forms, detect suspicious activity, and support website or infrastructure security.

T1 Services does not currently use cookies for third-party behavioral advertising. Your browser may allow you to block or delete cookies, although doing so may affect website functionality or security features.

8. Information Obtained During Client Engagements

Professional consulting engagements may require T1 Services to review information beyond that collected through this website. Depending on the engagement, this may include:

• Technology inventories and system information.
• Network, cloud, and security configurations.
• Policies and procedures.
• Vulnerability and risk information.
• Vendor information.
• Business records.
• Physical security information.
• Photographs or observations obtained during authorized on-site assessments.
• Documentation supplied by the client.
• Assessment findings, evidence, and recommendations.

T1 Services uses such information for purposes reasonably related to the applicable engagement, contractual obligations, security, recordkeeping, and legal requirements.

Specific contracts, Statements of Work, confidentiality agreements, Business Associate Agreements, Data Processing Agreements, or other written agreements may establish additional requirements. If an applicable written agreement conflicts with this general Privacy Policy, that agreement will govern the applicable client engagement to the extent of the conflict.

9. Information Security

T1 Services uses reasonable administrative, technical, and organizational safeguards designed to protect information under our control against unauthorized access, alteration, disclosure, loss, or destruction.

Measures may include, where appropriate:

• Access controls and least-privilege practices.
• Multi-factor authentication.
• Encryption.
• Network and cloud security controls.
• Logging and monitoring.
• Secure configuration practices.
• Data retention controls.
• Security awareness practices.

No website, network, storage system, or transmission method can be guaranteed to be completely secure, and T1 Services cannot guarantee absolute security of information transmitted over the Internet.

10. Data Retention

T1 Services retains information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, security, contractual, accounting, insurance, regulatory, and legal purposes.

Retention periods may vary based on the type of information and the applicable engagement. When information is no longer reasonably required, we may delete, anonymize, destroy, or otherwise dispose of it in accordance with our business and legal requirements.

11. Other Disclosures of Information

T1 Services may also disclose information:

• At the direction or with the consent of the individual or client.
• When reasonably necessary to perform an authorized or contracted service.
• To accountants, attorneys, insurers, or other professional advisers.
• When required by law, regulation, subpoena, court order, or lawful governmental request.
• To investigate fraud, abuse, security incidents, or unlawful activity.
• To protect the rights, safety, property, systems, or interests of T1 Services, our clients, or others.
• In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

We do not disclose personal information to third parties for their independent direct-marketing purposes.

12. Maryland Privacy Rights

T1 Services is based in Maryland. Where the Maryland Online Data Privacy Act or another applicable Maryland privacy law applies, qualifying Maryland consumers may have rights regarding their personal data.

Depending on the circumstances and applicability of the law, these rights may include:

• Confirming whether personal data is being processed.
• Accessing personal data.
• Correcting inaccuracies.
• Requesting deletion.
• Obtaining a copy of certain personal data.
• Obtaining information concerning categories of third parties receiving personal data.
• Opting out of certain sales, targeted advertising, or profiling activities.
• Appealing certain decisions involving privacy requests.

T1 Services does not sell personal information. Some statutory rights apply only when legal eligibility requirements are met. Nothing in this Policy is intended to create rights beyond those provided by applicable law.

13. Privacy Rights in Other U.S. States

Residents of certain U.S. states may have additional privacy rights under applicable state law, potentially including access, correction, deletion, portability, limitation, or opt-out rights. T1 Services will process verified privacy requests as required by applicable law.

14. Exercising Your Privacy Rights

To submit a privacy request, contact privacy@t1services.us. Please include enough information for us to identify the information involved and understand your request.

We may request additional information when reasonably necessary to verify your identity or authority to make the request.

Where required by applicable law, you may also submit an appeal regarding the denial of a privacy request by contacting the same email address and identifying the request as a Privacy Request Appeal.

T1 Services will not discriminate against an individual for exercising a privacy right provided by applicable law.

15. Children's Privacy

T1 Services' website and professional services are intended for businesses, organizations, property owners, and adults seeking professional consulting services. The website is not directed toward children under 13, and T1 Services does not knowingly collect personal information from children under 13 through this website.

16. External Websites

Our website may contain links to third-party websites or services. T1 Services does not control and is not responsible for the privacy, security, content, or practices of third-party websites. Visitors should review the privacy policies of external sites they choose to use.

17. Client Responsibilities

Clients remain responsible for determining the privacy, security, regulatory, and legal requirements applicable to their own operations and information. Unless expressly agreed otherwise in writing, T1 Services' consulting services do not transfer a client's compliance obligations to T1 Services.

18. Browser Privacy Signals

Some browsers and devices provide “Do Not Track” or similar privacy signals. Because standards regarding some signals vary, our website may not respond to every browser-based signal. Where applicable law requires recognition of a legally valid universal opt-out mechanism, T1 Services will comply with applicable requirements for processing activities subject to that law.

19. International Visitors

T1 Services is a Maryland-based business primarily providing services within the United States. Our services are not specifically directed toward individuals in foreign jurisdictions. Visitors accessing the website from outside the United States understand that information may be transmitted to, processed, and stored in the United States.

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our website, services, technology, legal requirements, or business practices. The revised version will be posted on this page with an updated “Last updated” date.

21. Contact T1 Services