Home / Privacy policy
Privacy policy
What we collect through this website, why we collect it, who we share it with, and how to get it back or have it deleted.
1. Who we are
This website, smartinfotechnologies.com, is operated by Smart Info Technologies LLC (“SIT”, “we”, “us”). We are the data controller for the personal information described in this policy.
Our mailing address is 7111 W 151 Street, Overland Park, KS 66223. You can reach us about anything in this policy at sales@smartinfotechnologies.com.
2. What this policy covers
This policy explains what we do with personal information collected through this website — smartinfotechnologies.com — and through direct contact with us by email or phone.
It also covers our sister site, smartscm.com, which we operate on the same terms.
It does not cover data held inside the applications we run for customers. Where your employer uses SmartSCM or another SIT-built system, your employer decides what is collected and why; we process that data on their instructions. Section 7 explains the difference, and your employer's own privacy notice will apply to you.
3. Information we collect
Information you give us
When you complete a contact form on this site, we collect your name, and — where you choose to provide them — your company, email address, telephone number, the enquiry type you selected, and whatever you write in the message field. We also record which page you submitted the form from.
If you email or call us directly, we keep that correspondence and any contact details in it.
Information collected automatically
When you visit, our analytics provider records technical and usage information: pages viewed, time on page, the site or search that referred you, approximate geographic location derived from your IP address, and your device, browser and operating system. IP addresses are truncated by Google Analytics before storage, so we do not see your full IP address in our analytics reports.
Our hosting provider maintains standard server logs, which may include full IP addresses, for security and diagnostic purposes.
Professional and Commercial Information We Collect From Third-Party and Public Sources
We may obtain professional, business-related information about you from public databases, government registries, commercial data brokers, and business-to-business (B2B) marketing partners.
The information we collect from these sources is strictly limited to professional and commercial details, which may include corporate entity names, business addresses, telephone numbers, and the names, job titles, and professional work email addresses of main corporate contacts. We use this information strictly to update and enrich our B2B database, verify the accuracy of our records, identify new business opportunities, and conduct B2B marketing and sales outreach via email.
Information we do not collect
We do not collect special category data (health, biometrics, political opinions, and similar) through this site, and we ask that you do not send it to us.
We do not sell any professional and personal information
We do not sell professional and personal information to anyone, under any definition of “sell” — including the broader definitions used by US state privacy laws. We do not disclose your information to third parties for their own independent marketing purposes or for monetary or other valuable consideration.
4. Cookies and analytics
We use a small number of cookies and similar technologies. None of the optional ones are set unless you switch them on. When you first arrive you are asked to choose, nothing optional loads until you do, and refusing is one click — the same as accepting.
| Purpose | Provider | What it does |
|---|---|---|
| Analytics | Google Analytics 4 | Optional. Tells us which pages are read and how people arrive, so we can improve the site. Sets cookies that identify a returning browser, typically for up to two years. If you decline, Google Analytics is never requested at all — it is not loaded and then blocked, it is simply never asked for. |
| Spam prevention | Google reCAPTCHA | Optional. Distinguishes people from automated scripts on our contact form. Collects device and browser information and interaction data, and is governed by Google's Privacy Policy and Terms of Service. If you decline it, the contact form still works — it uses a simple question we ask ourselves, which sets no cookies and sends nothing to any third party. |
We set no advertising cookies and run no advertising trackers on this site.
Typefaces are served from our own domain
The fonts this site is set in are hosted by us, not requested from Google Fonts. No third party learns your IP address in order to render the page.
Changing your mind
Select Cookie settings at the bottom of any page to change your choices or withdraw consent entirely. Withdrawing is as easy as giving consent, and takes effect immediately.
We record your choice — what you agreed to, and when — in your browser's local storage, along with the version of this policy it relates to. We ask again after twelve months, and sooner if we change what we use. That record is kept on your device; it is not sent to us.
You can also refuse or delete cookies in your browser settings, and Google publishes a browser add-on to opt out of Google Analytics everywhere. Refusing cookies will not stop you using any part of this site — we do not use cookie walls.
Global Privacy Control
If your browser or an extension sends a Global Privacy Control signal, we honour it automatically: nothing optional is loaded and you are not shown a banner at all. You can still opt in manually through Cookie settings if you want to.
5. Why we use it
| What we do | Why | Our lawful basis (UK/EU GDPR) |
|---|---|---|
| Answer your enquiry and follow it up | You asked us to | Steps taken at your request prior to entering a contract, and our legitimate interest in responding to enquiries |
| Keep a record of correspondence | So the next conversation starts where the last one ended | Legitimate interests |
| Analytics | Understand which pages are useful and improve the site | Consent — we ask everywhere, not only where the law demands it |
| Spam and abuse prevention | Keep the contact form usable | Legitimate interests |
| Meet legal, tax and accounting obligations | We have to | Legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded they are not. You can object at any time — see section 11.
6. Who we share it with
We do not sell, rent or trade personal information. We share it only with service providers who process it on our behalf, under contract and on our instructions:
- Google Cloud Platform — hosting and infrastructure
- Google Analytics — website analytics
- Google reCAPTCHA — spam prevention on forms
- [EMAIL PROVIDER] — delivery and storage of the email your enquiry becomes
We may also disclose information where we are legally required to, where necessary to establish or defend legal claims, or in connection with a merger, acquisition or sale of assets — in which case we will tell you before your information becomes subject to a different policy.
7. Data inside our applications
This is a distinction worth stating plainly, because it determines whom you should approach about your data.
When a customer uses SmartSCM or another application we built and host, that customer is the controller of the personal data in their system — their staff records, their contacts, their trading-partner details, their shipment records. We are a processor: we hold and process that data on their documented instructions, under a written agreement that includes data protection terms.
So if you are an employee, a driver, a customer contact or a carrier contact whose details appear in one of those systems, the organisation that gave us your data is the right place to direct access, correction or deletion requests. If you approach us instead, we will pass your request to them promptly and help them respond, but we will not amend or delete their data on our own initiative.
8. How long we keep it
- Enquiries that do not become a relationship — at lease 24 months from the last contact
- Enquiries that become a customer relationship — for the life of the relationship and 7 years afterwards, to meet contractual, tax and accounting requirements
- Analytics data — 14 months, the retention period set in our Google Analytics property
- Server logs — at lease 90 days
9. International transfers
We are based in the United States and our infrastructure runs on Google Cloud Platform. If you contact us from outside the United States, your information will be transferred to and processed there.
For transfers of personal data out of the UK or European Economic Area, we and our providers rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU–US and UK–US Data Privacy Framework where the recipient participates in it. A copy of the relevant safeguards is available on request.
10. How we protect it
All traffic to this site and to our applications is encrypted using TLS 1.2+, with older versions of the protocol disabled. Data at rest is encrypted using AES-256 on Google Cloud Platform. Access is role-based and limited to people who need it, and we operate SOC 2-aligned controls covering access management, audit trails, monitoring, secure change management and data protection.
Our full technical security overview sets this out in more detail, including the distinction between our own controls and the certifications held by Google for the underlying infrastructure.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant supervisory authority where the law requires it.
11. Your rights
Depending on where you live, you may have the right to:
- ask what personal information we hold about you and get a copy
- have inaccurate information corrected
- have information deleted
- restrict or object to how we use it, including objecting to processing based on legitimate interests
- receive information you gave us in a portable format
- withdraw consent at any time, where we relied on consent
- not be discriminated against for exercising any of these rights
For residents of California and other US states with comparable laws: we do not sell personal information and we do not share it for cross-context behavioural advertising, so there is no opt-out to offer. You may still exercise the rights to know, delete and correct, and you may use an authorised agent to do so.
To exercise any right, email sales@smartinfotechnologies.com. We will respond within one month (UK/EU) or 45 days (US state laws), and we may ask you to verify your identity first. There is no charge.
If you are unhappy with our response, you may complain to your supervisory authority — in the UK, the Information Commissioner's Office at ico.org.uk. We would rather you raised it with us first.
12. Children
This is a business website. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
13. Changes to this policy
We update this policy when what we do changes. The date at the top shows the current version. Where a change materially affects how we use information you have already given us, we will tell you directly rather than rely on you noticing.
14. Contact us
Questions, requests and complaints about this policy: sales@smartinfotechnologies.com, or write to Smart Info Technologies LLC, 7111 W 151 Street, Overland Park, KS 66223.