Testudo Technology Solutions ("Testudo," "we," "us," or "our"), established in Virginia Beach, United States, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website info@testudotech.com (the "Site") or use our services (collectively, the "Service"). It also outlines your rights under U.S. federal law and, where applicable, international data protection standards.

If you do not agree with this Privacy Policy, please do not use our Service.

1. Data Controller

The data controller responsible for your personal data is:

Testudo Technology Solutions
123 Address
Virginia Beach, VA, 23464
United States
Phone: 123‑456‑7890
Email: info@testudotech.com

2. Information We Collect

A. Information You Provide

  • Full name
  • Email address
  • Organization name and job title
  • Phone number (if provided)
  • Any other information you voluntarily provide (e.g., through contact forms or proposals)

B. Information Collected Automatically

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and duration of visit
  • Cookies and similar tracking technologies (see Section 6)

C. Sensitive & Security‑Related Data

Because Testudo provides Infrastructure Intelligence services, we may process operational data tied to critical infrastructure. This information is stored securely and handled in compliance with U.S. federal cybersecurity standards (e.g., NERC CIP, FISMA).

3. Legal Bases for Processing

We process your personal data on the following bases:

  • Contract performance: To provide requested services under government or enterprise contracts.
  • Legal obligations: To comply with U.S. federal and state regulatory requirements (FAA, DHS, DOE, etc.).
  • Legitimate interests: To maintain security, improve our Service, and prevent fraud.
  • Consent: For optional communications such as newsletters or marketing emails.

4. How We Use Your Data

We may use your information to:

  • Provide and manage the Service
  • Respond to inquiries and support requests
  • Comply with FAA and cybersecurity regulations
  • Send administrative communications (and marketing, if consented)
  • Analyze Service performance and user experience
  • Fulfill contractual and legal obligations

5. Sharing of Data

We do not sell your personal data. We may share your data with:

  • Service providers: For IT hosting, analytics, and secure communications.
  • Regulatory authorities: When required by law (e.g., DHS under CIRCIA, FAA compliance audits).
  • Contract partners: When necessary to fulfill obligations under government or utility contracts.
  • Business transfers: In the event of a merger, acquisition, or sale of assets.

All third parties are bound by confidentiality and security obligations consistent with applicable law.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable essential Site functionality
  • Monitor performance and usage trends
  • Personalize content (with consent)

You may manage or disable cookies in your browser settings.

7. International Data Transfers

Although Testudo primarily operates in the United States, data may be securely transferred to or accessed from partner jurisdictions when necessary for contract fulfillment. In such cases, Testudo ensures adequate safeguards are in place.

8. Data Retention

We retain your personal data only as long as necessary for operational, legal, and compliance purposes:

  • Standard business inquiries: up to 2 years
  • Regulatory records (e.g., FAA or DHS compliance): up to 7 years or longer if required by law
  • Contractual deliverables: retained per contract terms

9. Data Security

Testudo employs technical and organizational measures to safeguard your data, including:

  • End‑to‑end encryption for all transmissions
  • Secure, non‑cloud‑based data storage for sensitive infrastructure information
  • Access controls with role‑based permissions
  • Compliance with NERC CIP, FISMA, and CMMC standards

10. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time (for non‑essential uses)

Requests can be submitted via email at info@testudotech.com.

11. Children’s Privacy

Our Service is not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be announced on this Site and, where appropriate, via direct communication. Continued use of the Service after updates indicates acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

Testudo Technology Solutions
123 Address, Virginia Beach, VA, 23464
United States
Email: info@testudotech.com