Last Updated: September 8, 2026 Effective Date: September 8, 2026
This Privacy Policy replaces and supersedes all prior versions, including the version dated January 1, 2023.
Stratoscope Holdings, (“Stratoscope,” “we,” “us,” “our”) provides risk, security, and business consulting and advisory services. This Privacy Policy describes how we collect, use, disclose, and retain personal information in connection with www.stratoscope.com and any related media form, media channel, mobile website, or mobile application (collectively, the “Site”), and in connection with our marketing, sales, and business development activities.
This Policy covers:
This Policy does not cover:
By using the Site, you acknowledge this Policy. Where applicable law requires consent for a specific processing activity, we rely on consent obtained in accordance with that law rather than on your use of the Site.
Stratoscope Holdings, is the entity responsible for the personal information described in this Policy.
Stratoscope operates alongside affiliated brands, which may include Ingressotek, Stratos K9, and Stratos Executive Protection. Each entity is separately organized and separately contracts for its own services. Each entity is separately responsible for the personal information it controls. We may share information among these entities as described in Section 9 to respond to inquiries, coordinate services, and administer shared business systems. If you contact one entity, we may route your inquiry to the affiliate best able to respond.
We collect the categories of personal information listed below. We use the category names from the California Consumer Privacy Act, as amended (“CCPA”), so the disclosure is comparable across jurisdictions.
| Category | Specific information | Do we collect it? |
|---|---|---|
| Identifiers | Name, business and personal email address, telephone number, mailing or business address, employer, job title, IP address, unique device or online identifier, cookie identifier | Yes |
| Customer records | Business contact and billing details, signatory information, contract records | Yes, for clients and prospects |
| Commercial information | Services inquired about or purchased, engagement history, proposals, records of communications with us | Yes |
| Internet or network activity | Browsing and interaction data on the Site, pages viewed, time on page, referring and exit URLs, search terms used to reach the Site, clicks, scroll depth, browser type and version, operating system, device type, screen size, language, session date and time | Yes |
| Geolocation data | Approximate location (city, region, country) inferred from IP address. We do not collect precise geolocation from the Site. | Yes, approximate only |
| Audio and electronic information | Recordings or notes of telephone calls with us; email and message content you send us | Yes, where applicable |
| Professional or employment information | Employer, industry, role, seniority, department, company size, revenue band, technologies used, and similar business attributes obtained from data providers | Yes |
| Inferences | Lead scores, likely interest in specific services, seniority or buying-role inferences drawn from the above | Yes |
| Sensitive personal information | Government identifiers, financial account numbers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health information, genetic or biometric data, sexual orientation, contents of private communications | We do not seek or intentionally collect sensitive personal information through the Site. See Section 8. |
| Education information | Records subject to FERPA | No, except as described in Section 11 where applicable |
We do not use or disclose sensitive personal information for any purpose requiring a “limit the use of my sensitive personal information” mechanism under the CCPA. If sensitive information reaches us unsolicited, we delete it or restrict it to the purpose of responding to your communication.
a. Directly from you. When you complete a contact, inquiry, quote-request, subscription, or download form; email, call, or text us; meet with us; or provide information during an engagement or at an event or trade show.
b. Automatically from your device. Through cookies, pixels, tags, software development kits, server logs, and similar technologies, as described in Section 6.
c. From third-party data providers and website-visitor identification services. We use business-to-business sales intelligence, contact enrichment, and website-visitor identification services — including services of the type provided by Apollo.io and Leadfeeder/Dealfront, and similar vendors — which:
This means we may hold your name, work email address, and telephone number even if you never gave them to us. Those vendors collect that information from sources including public web pages, professional networking profiles, corporate websites, business registries, public records, event and conference materials, permission-based contributor networks, and commercially available data files. Their collection practices are governed by their own privacy notices, not this one. Section 15 explains how to ask us to delete your information or to stop contacting you.
d. From public and commercial sources. Company websites, press releases, regulatory filings, licensing and registration databases, court and property records, news reports, and professional directories.
e. From referrals and shared contacts. From existing clients, business partners, brokers, insurers, counsel, and industry contacts who refer you or provide your contact information. If you would prefer we not retain a referral, tell us and we will delete it.
f. From our clients. Where a client provides information about its personnel, tenants, guests, vendors, or others in connection with an engagement. See Section 1 regarding processing on behalf of clients.
We use personal information for the following purposes. We do not use your personal information for any purpose materially different from those listed here without first providing notice and, where required, obtaining consent.
| Purpose | Examples |
|---|---|
| Respond to inquiries | Reviewing and answering form submissions, emails, and calls; scoping a possible engagement; sending requested materials |
| Provide and administer services | Delivering contracted services, project communications, scheduling, reporting, invoicing, and collections |
| Marketing, sales, and business development | Sending newsletters, service updates, capability information, event invitations, and offers; outbound sales contact by email, telephone, and text; developing and prioritizing leads; measuring campaign performance |
| Site operation, analytics, and improvement | Understanding traffic and content performance; diagnosing errors; testing and improving pages, forms, and navigation |
| Personalization | Tailoring content, follow-up, and proposals to your apparent industry, role, and interests |
| Market and industry research | Aggregate analysis of demand, sector trends, and buyer roles; surveys, where you choose to participate |
| Security and fraud prevention | Detecting and preventing abuse, scraping, spam, credential misuse, intrusion, and misuse of the Site; protecting our personnel, clients, and systems |
| Legal, licensing, and compliance | Meeting recordkeeping, licensing, insurance, tax, export control, sanctions screening, and other legal obligations; responding to lawful requests; establishing, exercising, or defending legal claims |
| Corporate transactions | Evaluating or completing a merger, financing, acquisition, reorganization, or sale of assets |
Legal bases (where the EU or UK GDPR applies). Where the GDPR applies to our processing, we rely on: our legitimate interests in operating and marketing a business-to-business services firm and in securing our systems; the necessity of processing to enter into or perform a contract with you; compliance with a legal obligation; and, where required for marketing or non-essential cookies, your consent, which you may withdraw at any time.
Automated decision-making. We do not make decisions producing legal or similarly significant effects about you by solely automated means. Lead scoring is used only to prioritize human outreach.
We and our service providers use cookies, pixels, tags, web beacons, local storage, and server logs on the Site. Categories in use:
Managing cookies. You can set your browser to refuse some or all cookies or to alert you when a cookie is set. Some parts of the Site may not work if you block cookies.
Opt-out preference signals. We honor the Global Privacy Control and similar browser- or device-level opt-out preference signals as a request to opt out of the sale or sharing of personal information for the browser or device transmitting the signal, to the extent required by applicable law. Because such signals are browser- and device-specific, you will need to enable them on each browser and device you use.
Do Not Track. Browsers may offer a “Do Not Track” setting. There is no common industry standard for responding to it, and we do not currently respond to Do Not Track signals. We do respond to opt-out preference signals as described above.
Third-party analytics providers. Analytics providers may set their own cookies and may use the information they collect for their own purposes as permitted by their agreements with us and their own notices.
a. Email tracking. Our marketing and sales emails may contain tracking pixels or coded links that tell us whether a message was opened, when, from what approximate location and device, and which links were clicked. We use this to gauge interest and to time follow-up. To prevent it, configure your email client to block remote images, or unsubscribe.
b. Marketing email. You may unsubscribe at any time using the link in any marketing message or by emailing privacy@stratoscope.com. We honor opt-outs within the period required by the CAN-SPAM Act and will act promptly in any event. We may continue to send transactional and relationship messages about an active engagement, a proposal you requested, or a legal or contractual matter.
c. Telephone calls and text messages. If you provide a telephone number, you consent to be contacted at that number about your inquiry and our services, including by autodialed or prerecorded call and by SMS at a mobile number, as described in our Terms & Conditions. Consent to marketing calls or texts is not a condition of receiving any service. Reply STOP to any text to stop texts; tell any caller to place you on our internal do-not-call list, or email privacy@stratoscope.com with “DO NOT CALL” in the subject line. Message and data rates may apply; message frequency varies.
d. Call recording and monitoring. Calls with us may be monitored or recorded for quality, training, accuracy, security, and recordkeeping. Because several states, including Florida, require the consent of all parties to a recording, we will notify you at the start of a recorded call. If you do not consent, say so and we will stop recording or end the call.
e. Mobile carrier data. We do not sell or share your telephone number, or your consent to be contacted, with third parties for their own marketing purposes.
Site forms and ordinary email are not secure or confidential channels. Do not submit through them:
Information submitted through the Site is not protected by any privilege or duty of confidentiality unless a signed confidentiality or non-disclosure agreement is already in effect and expressly covers it. If you need to send sensitive material, contact us first at 754.247.6824 and we will arrange a secure method. Unsolicited sensitive information may be deleted without review.
We disclose personal information in the following circumstances. We disclose it only for the business purposes described in Section 5.
a. Service providers and processors, which act on our behalf under contract and are prohibited from using the information for their own purposes: website hosting and content delivery; email, calendaring, and file storage; customer relationship management and marketing automation; sales intelligence, contact enrichment, and visitor identification; analytics; telephony, call recording, and text messaging; e-signature; accounting, billing, and payment processing; IT support and security services; insurance and claims administration.
b. Affiliated entities, as described in Section 2.
c. Professional advisers, including our attorneys, accountants, auditors, insurers, and insurance brokers, where reasonably necessary.
d. Subcontractors and partner firms engaged to perform or support services, subject to confidentiality obligations.
e. Clients, where the information relates to services we perform for that client.
f. Legal and safety disclosures. To comply with applicable law, subpoena, warrant, court order, licensing or regulatory requirement, or other lawful request; to establish, exercise, or defend legal claims; to enforce our Terms & Conditions; to detect, prevent, or address fraud, security, or technical issues; or where we reasonably believe disclosure is necessary to prevent imminent physical harm or serious injury to any person.
g. Corporate transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, information may be disclosed to counterparties and their advisers under confidentiality obligations, and may be transferred to a successor.
h. With your direction or consent, including when you ask us to introduce you to a partner or vendor.
Sale and sharing. We do not sell personal information for money. However, when the advertising and retargeting technologies described in Section 6 are active, our disclosure of identifiers, internet activity, and inferences to advertising platforms meets the broad definitions of a “sale” and of “sharing for cross-context behavioral advertising” under the CCPA, and of “targeted advertising” under other state privacy laws. We treat those disclosures accordingly.
We keep personal information only as long as necessary for the purposes described in this Policy, or as required by law, and then delete it or de-identify it. Our general practice:
| Information | Retention |
|---|---|
| Contact form and inquiry records | Up to 12 months from last contact, unless an engagement results |
| Marketing contact records and lead data | Until you opt out or ask for deletion, or up to 12 months without engagement, whichever is first |
| Suppression and do-not-contact records | Indefinitely, in minimized form, so we can honor your opt-out |
| Client engagement records, contracts, reports, and deliverables | Term of engagement plus 7 years, or longer where required by licensing, insurance, tax, or statute-of-limitations considerations |
| Call recordings | 12 months, unless retained for a specific legal or contractual reason |
| Web server logs and analytics data | 14 months for analytics; 12 months for raw logs |
| Accounting, tax, and payment records | 7 years, or as required by law |
| Records subject to legal hold | Until the hold is released |
Bracketed periods must be confirmed against your actual systems, licensing obligations, insurance requirements, and record retention schedule before publication.
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and loss. These include access controls and least-privilege permissions, multi-factor authentication for business systems, encryption of data in transit and, where applicable, at rest, vendor due diligence and contractual data protection commitments, personnel confidentiality obligations and training, and logging and monitoring.
No method of transmission over the internet or of electronic storage is completely secure. While we use reasonable measures appropriate to the nature of the information we hold, we cannot and do not guarantee the absolute security of personal information. You are responsible for protecting the credentials and devices you use to communicate with us.
If a breach of security affecting personal information occurs, we will investigate and provide notice to affected individuals and to regulators to the extent and within the timeframes required by applicable law, including section 501.171, Florida Statutes, and comparable state breach notification laws.
a. Information clients give us about other people. During an engagement, a client may provide personal information about its employees, contractors, tenants, guests, vendors, or others — for example, in an organizational chart, incident record, access log, or interview list. We process that information solely to perform the engagement, under the client’s instructions and under our services agreement or an accompanying data processing agreement. The client remains responsible for having a lawful basis to disclose it to us and for providing any required notice to those individuals. If you believe we hold information about you that a client provided, direct your request to that client; we will assist the client in responding.
b. Assessment and interview material. Where an engagement involves interviews, surveys, or assessments of personnel, we will agree with the client in advance on what is attributed, what is reported in aggregate, and what is retained. We do not volunteer individually attributed statements outside the agreed reporting scope unless required by law or by the engagement terms.
c. Deliverables. Reports and deliverables may contain personal information where necessary to the analysis. We restrict distribution to the recipients the client designates and retain copies as described in Section 10.
d. De-identified and aggregate information. We may create de-identified or aggregated information from engagement data — for example, anonymized benchmarks or industry statistics — and use it to improve our methods and to produce general market materials. We maintain such information in de-identified form, do not attempt to re-identify it, and do not publish anything that identifies a client or individual without written permission.
Applicability. Comprehensive state privacy laws apply to businesses that meet specific revenue and data-volume thresholds, and each contains exemptions. Where a law applies, we honor its rights as written. Where it does not, we honor the requests below as a matter of practice, subject to our legal, contractual, licensing, and recordkeeping obligations.
Depending on where you live and which law applies, you may have the right to:
How to submit a request. Email privacy@stratoscope.com with the subject line “Privacy Request,” or write to us at the address in Section 19, or call 754.247.6824. Tell us what right you are exercising and which email addresses, telephone numbers, or names we should search.
Verification. We will take reasonable steps to verify your identity before acting, generally by confirming control of the email address or telephone number in our records, and may ask for additional information for a request involving specific pieces of personal information. We use verification information only for that purpose.
Authorized agents. An authorized agent may submit a request on your behalf with written, signed permission or a valid power of attorney. We may contact you to confirm the authorization.
Timing. We will acknowledge a request within 10 business days and respond within 45 days, and may extend by an additional 45 days with notice. Requests to opt out or to stop marketing are honored within 15 business days or sooner.
Fees. We do not charge a fee for a reasonable request. We may charge a reasonable fee, or decline, for a manifestly unfounded, repetitive, or excessive request, and will tell you why first.
If you are in the EEA or UK. Where the GDPR applies, you may also object to processing based on legitimate interests, request restriction of processing, and lodge a complaint with your supervisory authority. Please contact us first so we can try to resolve the matter.
If you received an email, call, or text from us and never contacted us, it is because we obtained your business contact information from one of the sources described in Section 4, most likely a business contact data provider, a referral, a public source, or a visit to our Site that our visitor-identification service associated with your organization.
You may stop it immediately. Email privacy@stratoscope.com with “DO NOT CONTACT” in the subject line and we will add you to our suppression list, delete your record from our marketing systems, and retain only the minimum information needed to make sure we do not contact you again. You do not need to explain why, and doing so has no effect on any business relationship.
If you want to know where a specific record came from, ask and we will tell you which vendor or source supplied it, so you can also contact that vendor directly.
The Site is intended for business users 18 years of age or older. We do not knowingly collect personal information from children, we do not direct the Site or any marketing to children, and we do not sell or share the personal information of any consumer we know to be under 16 years of age. If we learn that we hold personal information from a child under 13 without verifiable parental consent, we will delete it as promptly as reasonably practicable, consistent with the Children’s Online Privacy Protection Act. A parent or guardian who believes we hold information about a child may contact privacy@stratoscope.com.
The Site contains links to third-party websites, platforms, and resources. We do not control those sites and are not responsible for their content, security, or privacy practices. This Policy does not apply to them. Review the privacy notice of any site you visit from ours before providing information.
The Site is operated and hosted in the United States, and our service providers are located primarily in the United States. If you access the Site or communicate with us from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction. Where required, we use appropriate safeguards for such transfers, including standard contractual clauses. By using the Site or contacting us, you understand that this transfer will occur.
The Site and our services are not directed to, and are not offered to, persons in jurisdictions where doing so would be unlawful or would subject us to registration requirements.
We may update this Policy from time to time. When we do, we will revise the “Last Updated” date above and post the revised Policy on the Site. If we make a material change — including a change to the categories of personal information we collect, the purposes for which we use it, or the categories of parties to whom we disclose it — we will provide prominent notice on the Site and, where we have your email address and the change materially affects your rights, notify you by email before the change takes effect where practicable. We will obtain your consent for a material change where applicable law requires it. Changes are not applied retroactively to information already collected in a way that conflicts with the notice under which it was collected.
We maintain prior versions of this Policy and will provide a copy on request.
If you need this Policy in an alternative accessible format, contact us and we will provide one at no charge.
Privacy requests and questions: privacy@stratoscope.com
Mailing address: Stratoscope Holdings, LLC / Inc.Attn: Privacy 515 N Flagler Dr, Suite P-300 West Palm Beach, FL 33401
Telephone: 754.247.6824 General inquiries: info@stratoscope.com Website: https://stratoscope.com
