360CyberX, LLC ("360CyberX," "we," "us" or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit 360cyberx.com (the "Site"), use the assistant on the Site, contact us, apply for a job with us or otherwise interact with us. It also explains the choices and rights you have.
This Privacy Policy does not apply to information we process on behalf of our clients while providing services to them, such as data in a client's systems that we monitor, assess or support. That information is handled under our written agreement with the client, and the client's privacy notice applies to it.
1. What is personal information?
"Personal information" means information that identifies, relates to or could reasonably be linked to a particular person or household, such as a name, email address, phone number or IP address. It does not include information that has been de-identified or aggregated so that it can no longer reasonably be linked to you.
2. Personal information we collect
a. Information you provide to us
- Contact and inquiry information you enter in our forms, such as your first and last name, email address, subject, industry, how you heard about us and your message.
- Business information such as your organization, job title, purchasing and contract details, and communication preferences when you ask for a proposal, buy from us or work with us, including through a cooperative purchasing contract.
- Communications you send us by email, phone, text message or at events, and the information in them.
- Assistant conversations. The questions you type into the assistant on our Site and, if you ask to speak with a person, your name, email address, phone number and preferred way to be contacted.
- Job application information you submit through our job portal, such as your résumé, work history, education, certifications, references and work authorization.
b. Information we receive when you use the Site
- Device and log information. Our hosting and security providers receive your IP address, browser and device type, the pages you request, the referring page and the date and time of your visit. This information is used to deliver the Site, keep it secure and block malicious traffic.
- Site analytics. We record the pages you open on the Site, their titles, the website or tagged campaign link that brought you here, whether you use a computer, tablet or phone, and the time of each visit. We record this in our own business system, not with an outside analytics company. We do not store your IP address or your full browser details with these records, and we drop anything after a question mark in a web address. If you accept our analytics cookie, we also give your browser a random identifier so we can see return visits. If you later send our contact form or ask the assistant for a person, we connect those earlier visits to your inquiry so we can understand what you were looking for. If you decline, your visits are counted without any identifier and cannot be connected to you.
- Form protection. When you start using a form, Google reCAPTCHA collects information about your device and how you interact with the page to tell people apart from automated bots.
- Email engagement. Some of our business emails may record whether a message was opened or a link was clicked.
c. Cookies and similar technologies
We keep cookies to a minimum. Apart from the ones needed to run a secure Site, we use one analytics cookie of our own, and only after you accept it in our cookie notice. We do not use advertising or social media tracking cookies, and we do not use outside analytics services on the Site.
| Technology | Provider | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare | Strictly necessary. Distinguishes genuine visitors from malicious bots. | 30 minutes |
Security check cookies, such as cf_clearance | Cloudflare | Strictly necessary. Remembers that you passed a security check, if one was shown. | Set by the security check |
| reCAPTCHA | Strictly necessary for forms. Protects them from spam and abuse. Loads only when you begin using a form. | Set by Google | |
| Embedded map | Google Maps | Shows our office location on the Contact page. Google may set its own cookies when the map loads. | Set by Google |
Session storage (bos_chat_*) | 360CyberX | Keeps your assistant conversation open while you browse. Cleared when you close the browser tab. | Browser session |
cx_consent | 360CyberX | Strictly necessary. Remembers whether you accepted or declined our analytics cookie, so we do not ask again on every page. | 13 months |
cx_vk | 360CyberX | Analytics, set only if you accept. A random identifier that lets us recognize return visits and connect them to an inquiry you later send us. It contains no personal details. | 13 months |
Session storage (cx_vs) | 360CyberX | Marks the start of a visit so we can count visits rather than pages. Cleared when you close the browser tab. | Browser session |
You can change your choice at any time in Cookie settings. This Site is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply. You can also block or delete cookies in your browser settings, but parts of the Site, including our forms, may not work without strictly necessary cookies.
d. Information from other sources
We may receive business contact information from referrals, partners, events and public sources such as company websites, professional networks and government procurement portals. We may also receive information from cooperative purchasing organizations and public agencies when you buy or request services through a cooperative contract, and, for job candidates, from references and background screening providers, with any notice and consent the law requires.
e. Sensitive information
We do not ask for sensitive personal information through the Site. Please do not send health information, financial account numbers, passwords or government identification numbers through our forms or the assistant.
3. How we use personal information
We use personal information to:
- respond to your inquiries, prepare quotes and proposals, schedule meetings and follow up with you;
- provide, manage and support our services, including contracts, purchase orders and billing;
- operate the assistant on our Site, including answering questions and creating a support request when you ask to speak with a person;
- evaluate job applications, communicate with candidates, check references and make hiring decisions;
- send service notices and, where the law allows, business updates that you can unsubscribe from at any time;
- protect the Site, our business and our clients from fraud, spam, abuse and security incidents;
- improve the Site, our content, the assistant's answers and our services, including by seeing which pages and campaigns people find useful;
- keep a record of each inquiry in our customer relationship system, together with the Site visits connected to it if you accepted our analytics cookie, so the right person can follow up with the full picture;
- meet our legal obligations, respond to lawful requests and enforce our agreements.
The assistant is automated. It answers from our approved company information and uses a third-party artificial intelligence service to write responses. We keep conversation text so we can respond, follow up and improve its answers. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
4. Disclosure of personal information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as follows:
- Service providers that act on our behalf under contract, including our website host (WP Engine), website security and delivery network (Cloudflare), Google for form protection and the map on our Contact page, Microsoft for email and for hosting our business systems, and the artificial intelligence service that helps the assistant write answers. They may use personal information only to provide their services to us.
- Clients and public agencies. When you are a candidate for an IT staffing role, we may share your application with the client organization the role is for. When you buy or request services through a public or cooperative contract, we share what is needed to administer that contract.
- Professional advisers such as lawyers, accountants and insurers, who are bound by confidentiality obligations.
- Legal requirements and protection. When required by law, legal process or a lawful government request, or when we believe disclosure is needed to protect the rights, property or safety of 360CyberX, our clients or others.
- Business transfers. In connection with a merger, acquisition, financing or sale of all or part of our business, subject to the protections in this Privacy Policy.
- With your consent or at your direction.
5. How we protect personal information
Security is the core of our business. We maintain administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access limited to people who need it for their work, and security monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you and the appropriate authorities as the law requires.
6. Children's privacy
The Site and our services are intended for businesses and adults. They are not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
7. Accessing, correcting or deleting your information
You may ask us to tell you what personal information we hold about you, to give you a copy, to correct it or to delete it. Use the contact options in section 14. We will confirm your identity before acting on a request and respond within the time the law allows. Some information may be kept where the law requires it or where it is needed to resolve disputes or enforce our agreements.
8. Opting out
- Email. You can unsubscribe from our business emails using the link in any message or by contacting us. We may still send you messages about an active engagement or request.
- Text messages. If you agreed to receive text messages from 360CyberX, LLC, reply STOP to any message to opt out, or HELP for help. Message frequency varies, and message and data rates may apply. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties; information may be shared only with service providers that deliver our messages on our behalf.
- Analytics cookie. Choose Decline in our cookie notice, or open Cookie settings at any time to change your choice. Declining removes the identifier from your browser. You can also block or delete cookies in your browser settings, as described in section 2.c.
- Global Privacy Control and Do Not Track. If your browser sends either signal, our Site does not record your visit for analytics at all. We do not sell personal information or use it for targeted advertising.
9. Retention of personal information
We keep personal information only for as long as needed for the purposes described in this Privacy Policy. That includes the time needed to respond to your inquiry, the length of our business relationship plus the period required for legal, tax, audit and contract purposes, and, for job applications, the period required by employment laws and, with your agreement, for future openings. Security logs are kept for the shorter periods set by our hosting and security providers, unless they are needed to investigate an incident. Site analytics records are deleted automatically after 13 months, unless they are connected to an inquiry you sent us, in which case they are kept with that inquiry. When information is no longer needed, we delete it or make it anonymous.
10. Individuals in the EU, UK and other jurisdictions
If the data protection laws of the European Economic Area, the United Kingdom, Switzerland, Canada or a similar jurisdiction apply to you, this section also applies.
a. Legal basis for processing
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and providing services you request | Taking steps at your request before entering a contract, or performing a contract |
| Site security, fraud prevention and improving our services | Our legitimate interests in operating a secure and useful Site |
| Counting page views and visits without an identifier | Our legitimate interests in understanding how the Site is used |
| Recognizing return visits with our analytics cookie and connecting them to your inquiry | Your consent, which you can withdraw at any time in Cookie settings |
| Business updates and text messages | Your consent, or our legitimate interests where permitted |
| Recruiting | Taking steps at your request before an employment contract, and our legitimate interests in hiring |
| Recordkeeping and responding to lawful requests | Compliance with a legal obligation |
b. Your rights and choices
You may have the right to access, correct, delete, restrict or object to our processing of your personal information, to receive it in a portable format and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.
c. International transfers
We are based in the United States, and our service providers process information in the United States and other countries. Where required, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for personal information transferred from the EEA, the United Kingdom or Switzerland.
11. Your U.S. state privacy rights
Residents of Texas, California and other states with consumer privacy laws have rights under those laws. We extend the rights in this section to everyone who contacts us, subject to verification and legal exceptions.
a. Categories of personal information
In the past 12 months we have collected the following categories of personal information. We have not sold any of them or shared them for cross-context behavioral advertising.
| Category | Examples | Sources | Disclosed for business purposes to |
|---|---|---|---|
| Identifiers | Name, email address, phone number, IP address | You; your device | Service providers; clients and agencies as described in section 4 |
| Professional or employment information | Organization, job title, résumé, work history | You; references; public sources | Service providers; client organizations for staffing roles |
| Internet or network activity | Pages requested, browser and device type, form interaction signals, pages viewed on the Site and how you arrived | Your device | Hosting, security and form protection providers; Microsoft, which hosts our business systems |
| Commercial information | Quotes, purchase orders, contract details | You; public agencies and cooperative purchasing organizations | Service providers; professional advisers |
| Education information | Degrees and certifications in a job application | You | Service providers; client organizations for staffing roles |
| Inferences | None. We do not draw conclusions about your personal characteristics or preferences. | Not applicable | Not applicable |
b. Your rights
Depending on where you live, you may have the right to know what personal information we have collected about you and how we use it, to access and receive a portable copy of it, to correct it, to delete it, and to opt out of the sale of personal information, targeted advertising and profiling with legal or similarly significant effects. We do not sell personal information, engage in targeted advertising or conduct such profiling. We will not discriminate against you for exercising any of these rights.
c. How to make a request
Submit a request using the contact options in section 14 and tell us what you would like us to do. We will verify your identity using information we already hold. An authorized agent may submit a request for you with your signed permission or a valid power of attorney. We will respond within 45 days, and if we need more time we will tell you why.
d. Appeals
If we decline to take action on your request, you may appeal by replying to our decision. We will respond to your appeal within 60 days. If you are not satisfied with the outcome, you may contact the Texas Attorney General or the attorney general or privacy regulator in your state.
12. Other websites, including social media
The Site links to websites and services we do not control, such as our pages on LinkedIn, X and Facebook, the job portal and client portal we operate on a separate platform, and maps and other third-party services. The privacy practices of third-party sites are governed by their own policies, and we encourage you to read them.
13. Changes to this Privacy Policy
We may update this Privacy Policy as our services, technology or legal requirements change. We will post the updated version on this page with a new effective date and, for material changes, provide additional notice where the law requires. Your continued use of the Site after an update means the updated Privacy Policy applies to you.
14. How to contact us
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us using any of the options below.
Write to us
360CyberX, LLC
Attn: Privacy
3010 LBJ Freeway, Suite 1200
Dallas, Texas 75234
United States