Last updated: 9 August 2026
palmiq Inc. (“palmiq”, “we”, “us”) provides managed IT, cybersecurity, cloud and compliance services. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and the rights you have over it.
It covers palmiq.com and the services we deliver to clients. Where we process data on behalf of a client — for example inside systems we manage for them — that client is the controller and their own privacy notice governs; we act as a processor under our contract with them.
1. Who is responsible for your data
Controller: palmiq Inc., 20130 Lakeview Center Plaza, Suite 400, Ashburn, Virginia 20147, USA.
Privacy inquiries: info@palmiq.com · 703-336-9700
We operate from the United States with teams in Peru and India. Personal information may be accessed from any of those locations — see section 8.
2. Information we collect
Information you give us
- Contact and inquiry details — name, work email, telephone number, company name, job title, and anything you write in a message.
- Form submissions — discovery call requests, webinar registrations, resource downloads, support requests and job applications, including any scheduling preferences you provide.
- Client relationship data — the contact details, contract and billing information needed to deliver services under an agreement.
- Recruitment data — CVs and application details, where you apply to us.
Information collected automatically
- Device and usage data — IP address, browser and device type, referring page, pages viewed, and approximate location derived from IP.
- Analytics identifiers — cookie and similar identifiers used by Google Analytics 4 and Google Tag Manager.
- Advertising identifiers — conversion and remarketing identifiers used by Google Ads.
Information from other sources
- Publicly available business information, and details provided by a colleague who refers you or registers you for a session.
We do not knowingly collect special category data (health, biometric, political or religious information) through this website, and ask that you do not submit it in free-text fields.
3. Why we use it, and our legal basis
Where the GDPR or UK GDPR applies, we rely on the following bases:
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and booking calls | Steps prior to a contract; legitimate interests |
| Delivering contracted services | Performance of a contract |
| Sending a requested resource, recording or invite | Consent, or performance of a contract |
| Service and security notices | Legitimate interests; legal obligation |
| Marketing email you have opted into | Consent |
| Website analytics and advertising | Consent, where required by law |
| Security monitoring and fraud prevention | Legitimate interests; legal obligation |
| Recruitment | Steps prior to a contract; legitimate interests |
| Accounting, tax and dispute handling | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have assessed that our interest in operating and securing our business does not override your rights. You may object at any time — see section 9.
4. Cookies and tracking
Our site uses cookies and similar technologies for three purposes:
- Strictly necessary — required for the site to function. These cannot be switched off.
- Analytics — Google Analytics 4, to understand which pages are useful.
- Advertising — Google Ads conversion tracking and remarketing.
Where consent is required by law, analytics and advertising cookies are set only after you provide it, and you may withdraw consent at any time. You can also control cookies through your browser, and opt out of Google Analytics using Google’s browser add-on.
We do not currently respond to Global Privacy Control or Do Not Track signals in a standardized way; we will update this section if that changes.
5. Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under US state privacy laws.
We share personal information with:
- Service providers acting on our instructions — hosting, email delivery, analytics, CRM, ticketing and scheduling platforms. Each is bound by contract to process data only for us.
- Technology vendors where you have asked us to arrange licensing or support on your behalf.
- Professional advisers — lawyers, accountants, auditors, under duties of confidentiality.
- Authorities, where we are legally required to disclose, or to establish or defend legal claims.
- A successor entity, in the event of a merger, acquisition or asset sale.
6. How long we keep it
- Inquiries that do not become clients — up to 24 months from last contact.
- Client records — for the life of the contract and 7 years afterwards, to meet tax, accounting and contractual obligations.
- Recruitment data — 12 months after a decision, unless you ask us to keep it longer for future roles.
- Analytics data — as configured in Google Analytics, currently up to 14 months.
- Security logs — typically 12 months.
Where we no longer need data, we delete it or irreversibly anonymise it.
7. How we protect it
We are a security company and hold ourselves to the controls we recommend: role-based access, multi-factor authentication, encryption in transit and at rest, endpoint protection, 24/7 monitoring, logging, and least-privilege access to client environments.
No system is perfectly secure. If a breach affects your personal information and the law requires notification, we will notify you and the relevant supervisory authority within the applicable deadline.
8. International transfers
palmiq operates in the United States, Peru and India. If you are in the European Economic Area, the United Kingdom or Switzerland, your personal information will be transferred outside your jurisdiction.
Where we make such transfers, we rely on appropriate safeguards — normally the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum where relevant, and supplementary technical measures such as encryption and access control. A copy of the relevant safeguards is available on request.
9. Your rights
If you are in the EEA, UK or Switzerland
You have the right to: access your data; correct it; erase it; restrict processing; object to processing based on legitimate interests or direct marketing; data portability; and withdraw consent at any time without affecting processing already carried out.
You also have the right to lodge a complaint with your supervisory authority. We would appreciate the chance to address it first.
If you are a California resident
Under the CCPA as amended by the CPRA you have the right to know what we collect and why; to access and delete personal information; to correct inaccurate information; to opt out of sale or sharing (we do neither); to limit the use of sensitive personal information (we do not use it for inferring characteristics); and not to be discriminated against for exercising these rights.
Other US states
Residents of states with comparable privacy laws — including Virginia, Colorado, Connecticut, Utah and Texas — have equivalent rights of access, correction, deletion, portability and opt-out. We honor these regardless of residency where practical.
How to exercise them
Email info@palmiq.com with your request. We will verify your identity before acting, and respond within the period the applicable law requires — generally 30 days under GDPR and 45 days under US state laws. You may use an authorized agent where the law permits.
10. Children
Our services are directed at organizations, not individuals under 18, and we do not knowingly collect their personal information through this site. Where we support K-12 school districts, any student data is processed on the district’s instructions under our contract with them, and the district remains the controller. If you believe a child has provided us information directly, contact us and we will delete it.
11. Third-party links
Our site links to third-party sites, including vendor and partner pages. We are not responsible for their privacy practices, and this policy does not cover them.
12. Changes to this policy
We will post any changes on this page and update the date at the top. Where a change is material, we will take reasonable steps to notify you.
13. Contact
palmiq Inc. 20130 Lakeview Center Plaza, Suite 400 Ashburn, Virginia 20147, USA