Last Updated: September 8, 2026 Effective Date: September 8, 2026
This Privacy Policy replaces and supersedes all prior versions, including the version dated January 1, 2023.
Ingressotek, (“Ingressotek,” “we,” “us,” “our”) provides security screening and weapons detection consulting services and, under separate written agreement, related detection systems and integration services. This Privacy Policy describes how we collect, use, disclose, and retain personal information in connection with www.ingressotek.com and any related media form, media channel, mobile website, or mobile application (collectively, the “Site”), and in connection with our marketing, sales, and business development activities.
This Policy covers:
This Policy does not cover:
By using the Site, you acknowledge this Policy. Where applicable law requires consent for a specific processing activity, we rely on consent obtained in accordance with that law rather than on your use of the Site.
Ingressotek, is the entity responsible for the personal information described in this Policy.
Ingressotek operates alongside affiliated brands, which may include Stratoscope Holdings, Stratos K9, and Stratos Executive Protection. Each entity is separately organized and separately contracts for its own services. Each entity is separately responsible for the personal information it controls. We may share information among these entities as described in Section 9 to respond to inquiries, coordinate services, and administer shared business systems. If you contact one entity, we may route your inquiry to the affiliate best able to respond.
We collect the categories of personal information listed below. We use the category names from the California Consumer Privacy Act, as amended (“CCPA”), so the disclosure is comparable across jurisdictions.
| Category | Specific information | Do we collect it? |
|---|---|---|
| Identifiers | Name, business and personal email address, telephone number, mailing or business address, employer, job title, IP address, unique device or online identifier, cookie identifier | Yes |
| Customer records | Business contact and billing details, signatory information, contract records | Yes, for clients and prospects |
| Commercial information | Services inquired about or purchased, engagement history, proposals, records of communications with us | Yes |
| Internet or network activity | Browsing and interaction data on the Site, pages viewed, time on page, referring and exit URLs, search terms used to reach the Site, clicks, scroll depth, browser type and version, operating system, device type, screen size, language, session date and time | Yes |
| Geolocation data | Approximate location (city, region, country) inferred from IP address. We do not collect precise geolocation from the Site. | Yes, approximate only |
| Audio and electronic information | Recordings or notes of telephone calls with us; email and message content you send us | Yes, where applicable |
| Professional or employment information | Employer, industry, role, seniority, department, company size, revenue band, technologies used, and similar business attributes obtained from data providers | Yes |
| Inferences | Lead scores, likely interest in specific services, seniority or buying-role inferences drawn from the above | Yes |
| Sensitive personal information | Government identifiers, financial account numbers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health information, genetic or biometric data, sexual orientation, contents of private communications | We do not seek or intentionally collect sensitive personal information through the Site. See Section 8. |
| Education information | Records subject to FERPA | No, except as described in Section 11 where applicable |
We do not use or disclose sensitive personal information for any purpose requiring a “limit the use of my sensitive personal information” mechanism under the CCPA. If sensitive information reaches us unsolicited, we delete it or restrict it to the purpose of responding to your communication.
a. Directly from you. When you complete a contact, inquiry, quote-request, subscription, or download form; email, call, or text us; meet with us; or provide information during an engagement or at an event or trade show.
b. Automatically from your device. Through cookies, pixels, tags, software development kits, server logs, and similar technologies, as described in Section 6.
c. From third-party data providers and website-visitor identification services. We use business-to-business sales intelligence, contact enrichment, and website-visitor identification services — including services of the type provided by Apollo.io and Leadfeeder/Dealfront, and similar vendors — which:
This means we may hold your name, work email address, and telephone number even if you never gave them to us. Those vendors collect that information from sources including public web pages, professional networking profiles, corporate websites, business registries, public records, event and conference materials, permission-based contributor networks, and commercially available data files. Their collection practices are governed by their own privacy notices, not this one. Section 15 explains how to ask us to delete your information or to stop contacting you.
d. From public and commercial sources. Company websites, press releases, regulatory filings, licensing and registration databases, court and property records, news reports, and professional directories.
e. From referrals and shared contacts. From existing clients, business partners, brokers, insurers, counsel, and industry contacts who refer you or provide your contact information. If you would prefer we not retain a referral, tell us and we will delete it.
f. From our clients. Where a client provides information about its personnel, tenants, guests, vendors, or others in connection with an engagement. See Section 1 regarding processing on behalf of clients.
We use personal information for the following purposes. We do not use your personal information for any purpose materially different from those listed here without first providing notice and, where required, obtaining consent.
| Purpose | Examples |
|---|---|
| Respond to inquiries | Reviewing and answering form submissions, emails, and calls; scoping a possible engagement; sending requested materials |
| Provide and administer services | Delivering contracted services, project communications, scheduling, reporting, invoicing, and collections |
| Marketing, sales, and business development | Sending newsletters, service updates, capability information, event invitations, and offers; outbound sales contact by email, telephone, and text; developing and prioritizing leads; measuring campaign performance |
| Site operation, analytics, and improvement | Understanding traffic and content performance; diagnosing errors; testing and improving pages, forms, and navigation |
| Personalization | Tailoring content, follow-up, and proposals to your apparent industry, role, and interests |
| Market and industry research | Aggregate analysis of demand, sector trends, and buyer roles; surveys, where you choose to participate |
| Security and fraud prevention | Detecting and preventing abuse, scraping, spam, credential misuse, intrusion, and misuse of the Site; protecting our personnel, clients, and systems |
| Legal, licensing, and compliance | Meeting recordkeeping, licensing, insurance, tax, export control, sanctions screening, and other legal obligations; responding to lawful requests; establishing, exercising, or defending legal claims |
| Corporate transactions | Evaluating or completing a merger, financing, acquisition, reorganization, or sale of assets |
Legal bases (where the EU or UK GDPR applies). Where the GDPR applies to our processing, we rely on: our legitimate interests in operating and marketing a business-to-business services firm and in securing our systems; the necessity of processing to enter into or perform a contract with you; compliance with a legal obligation; and, where required for marketing or non-essential cookies, your consent, which you may withdraw at any time.
Automated decision-making. We do not make decisions producing legal or similarly significant effects about you by solely automated means. Lead scoring is used only to prioritize human outreach.
We and our service providers use cookies, pixels, tags, web beacons, local storage, and server logs on the Site. Categories in use:
Managing cookies. Use the ‘Cookie Preferences’ link in the Site footer at any time.
Opt-out preference signals. We honor the Global Privacy Control and similar browser- or device-level opt-out preference signals as a request to opt out of the sale or sharing of personal information for the browser or device transmitting the signal, to the extent required by applicable law. Because such signals are browser- and device-specific, you will need to enable them on each browser and device you use.
Do Not Track. Browsers may offer a “Do Not Track” setting. There is no common industry standard for responding to it, and we do not currently respond to Do Not Track signals. We do respond to opt-out preference signals as described above.
Third-party analytics providers. Analytics providers may set their own cookies and may use the information they collect for their own purposes as permitted by their agreements with us and their own notices.
a. Email tracking. Our marketing and sales emails may contain tracking pixels or coded links that tell us whether a message was opened, when, from what approximate location and device, and which links were clicked. We use this to gauge interest and to time follow-up. To prevent it, configure your email client to block remote images, or unsubscribe.
b. Marketing email. You may unsubscribe at any time using the link in any marketing message or by emailing privacy@ingressotek.com. We honor opt-outs within the period required by the CAN-SPAM Act and will act promptly in any event. We may continue to send transactional and relationship messages about an active engagement, a proposal you requested, or a legal or contractual matter.
c. Telephone calls and text messages. If you provide a telephone number, you consent to be contacted at that number about your inquiry and our services, including by autodialed or prerecorded call and by SMS at a mobile number, as described in our Terms & Conditions. Consent to marketing calls or texts is not a condition of receiving any service. Reply STOP to any text to stop texts; tell any caller to place you on our internal do-not-call list, or email privacy@ingressotek.com with “DO NOT CALL” in the subject line. Message and data rates may apply; message frequency varies.
d. Call recording and monitoring. Calls with us may be monitored or recorded for quality, training, accuracy, security, and recordkeeping. Because several states, including Florida, require the consent of all parties to a recording, we will notify you at the start of a recorded call. If you do not consent, say so and we will stop recording or end the call.
e. Mobile carrier data. We do not sell or share your telephone number, or your consent to be contacted, with third parties for their own marketing purposes.
Site forms and ordinary email are not secure or confidential channels. Do not submit through them:
Information submitted through the Site is not protected by any privilege or duty of confidentiality unless a signed confidentiality or non-disclosure agreement is already in effect and expressly covers it. If you need to send sensitive material, contact us first at 754.247.6824 and we will arrange a secure method. Unsolicited sensitive information may be deleted without review.
We disclose personal information in the following circumstances. We disclose it only for the business purposes described in Section 5.
a. Service providers and processors, which act on our behalf under contract and are prohibited from using the information for their own purposes: website hosting and content delivery; email, calendaring, and file storage; customer relationship management and marketing automation; sales intelligence, contact enrichment, and visitor identification; analytics; telephony, call recording, and text messaging; e-signature; accounting, billing, and payment processing; IT support and security services; insurance and claims administration.
b. Affiliated entities, as described in Section 2.
c. Professional advisers, including our attorneys, accountants, auditors, insurers, and insurance brokers, where reasonably necessary.
d. Subcontractors and partner firms engaged to perform or support services, subject to confidentiality obligations.
e. Clients, where the information relates to services we perform for that client.
f. Legal and safety disclosures. To comply with applicable law, subpoena, warrant, court order, licensing or regulatory requirement, or other lawful request; to establish, exercise, or defend legal claims; to enforce our Terms & Conditions; to detect, prevent, or address fraud, security, or technical issues; or where we reasonably believe disclosure is necessary to prevent imminent physical harm or serious injury to any person.
g. Corporate transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, information may be disclosed to counterparties and their advisers under confidentiality obligations, and may be transferred to a successor.
h. With your direction or consent, including when you ask us to introduce you to a partner or vendor.
Sale and sharing. We do not sell personal information for money. However, when the advertising and retargeting technologies described in Section 6 are active, our disclosure of identifiers, internet activity, and inferences to advertising platforms meets the broad definitions of a “sale” and of “sharing for cross-context behavioral advertising” under the CCPA, and of “targeted advertising” under other state privacy laws. We treat those disclosures accordingly.
We keep personal information only as long as necessary for the purposes described in this Policy, or as required by law, and then delete it or de-identify it. Our general practice:
| Information | Retention |
|---|---|
| Contact form and inquiry records | Up to 24 months from last contact, unless an engagement results |
| Marketing contact records and lead data | Until you opt out or ask for deletion, or up to 24 months without engagement, whichever is first |
| Suppression and do-not-contact records | Indefinitely, in minimized form, so we can honor your opt-out |
| Client engagement records, contracts, reports, and deliverables | Term of engagement plus 7 years, or longer where required by licensing, insurance, tax, or statute-of-limitations considerations |
| Call recordings | 12 months, unless retained for a specific legal or contractual reason |
| Web server logs and analytics data | 14 months for analytics; 12 months for raw logs |
| Accounting, tax, and payment records | 7 years, or as required by law |
| Records subject to legal hold | Until the hold is released |
Bracketed periods must be confirmed against your actual systems, licensing obligations, insurance requirements, and record retention schedule before publication.
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and loss. These include access controls and least-privilege permissions, multi-factor authentication for business systems, encryption of data in transit and, where applicable, at rest, vendor due diligence and contractual data protection commitments, personnel confidentiality obligations and training, and logging and monitoring.
No method of transmission over the internet or of electronic storage is completely secure. While we use reasonable measures appropriate to the nature of the information we hold, we cannot and do not guarantee the absolute security of personal information. You are responsible for protecting the credentials and devices you use to communicate with us.
If a breach of security affecting personal information occurs, we will investigate and provide notice to affected individuals and to regulators to the extent and within the timeframes required by applicable law, including section 501.171, Florida Statutes, and comparable state breach notification laws.
a. The client controls screening data. Where a client deploys a screening or detection system, the client — not Ingressotek — determines what is collected, who is screened, how alarms are resolved, and how records are kept. The client is the controller of that data and is responsible for providing notice to screened persons, obtaining any required consent, and complying with applicable law. Our role is limited to consulting, integration, configuration, or support as set out in a written agreement, in which capacity we act as a service provider or processor.
b. Data generated by detection systems. Depending on the system and configuration, deployments may generate images, video, alarm records, sensor data, object classifications, throughput counts, timestamps, and operator entries, and may in some configurations involve biometric identifiers or facial images. Where a configuration involves biometric or facial recognition data, additional legal requirements may apply, including the Illinois Biometric Information Privacy Act, Texas Capture or Use of Biometric Identifier Act, Washington’s My Health My Data Act, and comparable state laws, which can require written notice, written consent, a published retention and destruction schedule, and restrictions on disclosure and profit. These obligations generally fall on the deploying client, and we will address allocation of them expressly in any written agreement. We do not maintain a biometric database of screened persons.
c. Access during support. If we access a client system for configuration, testing, tuning, calibration, or support, we may incidentally view screening records, images, or logs. Our personnel access such data only as necessary, under confidentiality obligations, and do not copy, extract, retain, or use it for any purpose other than the support task, except as expressly authorized in writing.
d. Do not send us screening records or technical data. Do not transmit screening images, alarm records, incident footage, threat assessments, or export-controlled technical data through our Site forms or by unencrypted email. Certain system documentation is subject to the Export Administration Regulations or International Traffic in Arms Regulations, and transmitting it improperly may violate federal law. Contact us to arrange a compliant transfer method.
e. Export control and sanctions screening. Before disclosing controlled technical data or entering a transaction, we may collect and process information about you, your organization, its ownership, and the intended end use and end user, and may screen that information against U.S. government restricted-party lists. We retain those screening records to demonstrate compliance.
f. De-identified and aggregate information. We may use de-identified and aggregated performance data — such as alarm rates, throughput, and false-alarm statistics — to improve configurations and produce general capability materials, where permitted by our agreement with the client and where no individual or client is identifiable.
Applicability. Comprehensive state privacy laws apply to businesses that meet specific revenue and data-volume thresholds, and each contains exemptions. Where a law applies, we honor its rights as written. Where it does not, we honor the requests below as a matter of practice, subject to our legal, contractual, licensing, and record keeping obligations.
Depending on where you live and which law applies, you may have the right to:
How to submit a request. Email privacy@ingressotek.com with the subject line “Privacy Request,” or write to us at the address in Section 19, or call 754.247.6824. Tell us what right you are exercising and which email addresses, telephone numbers, or names we should search.
Verification. We will take reasonable steps to verify your identity before acting, generally by confirming control of the email address or telephone number in our records, and may ask for additional information for a request involving specific pieces of personal information. We use verification information only for that purpose.
Authorized agents. An authorized agent may submit a request on your behalf with written, signed permission or a valid power of attorney. We may contact you to confirm the authorization.
Timing. We will acknowledge a request within 10 business days and respond within 45 days, and may extend by an additional 45 days with notice. Requests to opt out or to stop marketing are honored within 15 business days or sooner.
Fees. We do not charge a fee for a reasonable request. We may charge a reasonable fee, or decline, for a manifestly unfounded, repetitive, or excessive request, and will tell you why first.
If you are in the EEA or UK. Where the GDPR applies, you may also object to processing based on legitimate interests, request restriction of processing, and lodge a complaint with your supervisory authority. Please contact us first so we can try to resolve the matter.
If you received an email, call, or text from us and never contacted us, it is because we obtained your business contact information from one of the sources described in Section 4, most likely a business contact data provider, a referral, a public source, or a visit to our Site that our visitor-identification service associated with your organization.
You may stop it immediately. Email privacy@ingressotek.com with “DO NOT CONTACT” in the subject line and we will add you to our suppression list, delete your record from our marketing systems, and retain only the minimum information needed to make sure we do not contact you again. You do not need to explain why, and doing so has no effect on any business relationship.
If you want to know where a specific record came from, ask and we will tell you which vendor or source supplied it, so you can also contact that vendor directly.
The Site is intended for business users 18 years of age or older. We do not knowingly collect personal information from children, we do not direct the Site or any marketing to children, and we do not sell or share the personal information of any consumer we know to be under 16 years of age. If we learn that we hold personal information from a child under 13 without verifiable parental consent, we will delete it as promptly as reasonably practicable, consistent with the Children’s Online Privacy Protection Act. A parent or guardian who believes we hold information about a child may contact privacy@ingressotek.com.
The Site contains links to third-party websites, platforms, and resources. We do not control those sites and are not responsible for their content, security, or privacy practices. This Policy does not apply to them. Review the privacy notice of any site you visit from ours before providing information.
The Site is operated and hosted in the United States, and our service providers are located primarily in the United States. If you access the Site or communicate with us from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction. Where required, we use appropriate safeguards for such transfers, including standard contractual clauses. By using the Site or contacting us, you understand that this transfer will occur.
The Site and our services are not directed to, and are not offered to, persons in jurisdictions where doing so would be unlawful or would subject us to registration requirements.
We may update this Policy from time to time. When we do, we will revise the “Last Updated” date above and post the revised Policy on the Site. If we make a material change — including a change to the categories of personal information we collect, the purposes for which we use it, or the categories of parties to whom we disclose it — we will provide prominent notice on the Site and, where we have your email address and the change materially affects your rights, notify you by email before the change takes effect where practicable. We will obtain your consent for a material change where applicable law requires it. Changes are not applied retroactively to information already collected in a way that conflicts with the notice under which it was collected.
We maintain prior versions of this Policy and will provide a copy on request.
If you need this Policy in an alternative accessible format, contact us and we will provide one at no charge.
Privacy requests and questions: privacy@ingressotek.com
Mailing address: Ingressotek, Attn: Privacy 515 N Flagler Dr, Suite P-300 West Palm Beach, FL 33401
Telephone: 754.247.6824 General inquiries: info@ingressotek.com Website: https://ingressotek.com