Privacy Policy

1. Scope and who we are

This Privacy Policy applies to the website and online services operated by Mile High Cyber Solutions LLC (“MHCS,” “we,” “us,” or “our”), a Colorado limited liability company based in Denver, Colorado. It does not apply to third-party websites or services that have their own privacy policies.

2. Information we collect

Information you provide

• Contact and business information: name, business email, phone number, company, job role, website or domain, and communication preferences.
• Inquiry and intake information: details you submit about your environment, business needs, symptoms, scope, authorized systems, and requested services.
• Transaction information: selected service, amount, billing status, and related records. Payment-card details are submitted directly to Stripe and are not stored by MHCS.
• Engagement information: communications, approvals, deliverables, support history, and other records needed to perform an authorized engagement.

Information collected automatically

When you use the site, our hosting, security, and analytics providers may receive IP address, browser and device type, approximate location, referring page, pages viewed, timestamps, diagnostic data, cookie identifiers, and security-event information. Cloudflare may process request and security data to deliver, protect, and operate the site.

Information from other sources

We may receive information from payment processors, professional marketplaces such as Upwork, referrals, public business sources, and service providers. We use it only for the purposes described here or disclosed when it is collected.

3. How we use information

We use information to:

• respond to inquiries, recommend an appropriate service, and provide estimates;
• verify authorization, establish scope, perform services, document approvals, and deliver results;
• process test or live transactions when enabled, maintain business records, and prevent fraud;
• operate, secure, troubleshoot, and improve the site and our services;
• measure advertising and site performance, subject to available consent and opt-out controls;
• communicate about an engagement, requested services, policy changes, or security matters;
• enforce agreements, protect people and systems, and comply with law.

Where applicable law requires a legal basis, we rely on performance of a contract, steps requested before a contract, legitimate interests, consent, and compliance with legal obligations, as appropriate.

4. How we disclose information

We may disclose information only as reasonably necessary to:

• Service providers: Cloudflare for hosting, security, forms, and access controls; Sanity for content management; Stripe for checkout, payment processing, and fraud prevention; Google for analytics and advertising measurement; and other vendors used to operate the business.
• Professional advisers: accountants, attorneys, insurers, and consultants subject to appropriate duties.
• Legal and safety purposes: comply with lawful process; protect rights, safety, and systems; investigate fraud or abuse; or enforce our agreements.
• Business transactions: support a merger, financing, reorganization, or sale, subject to appropriate safeguards.
• At your direction: when you ask or authorize us to disclose information.

We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising except to the extent advertising technology configured on this site may constitute “sharing,” “sale,” or “targeted advertising” under applicable law. Where required, we will provide a consent or opt-out control before activating such technology.

5. Cookies, analytics, and advertising

Essential technologies may be used for security, load balancing, fraud prevention, form protection, preferences, and Cloudflare Access authentication. If enabled, Google Analytics 4 and Google Ads may use cookies or similar identifiers to measure visits, interactions, and advertising conversions. Google Analytics commonly receives session statistics, approximate location, and browser or device information.

Where required, nonessential analytics and advertising storage will remain disabled until you make a choice. You may also limit cookies in your browser and use Google’s available opt-out controls. If MHCS becomes subject to a law requiring recognition of a universal opt-out signal, such as Global Privacy Control, we will process a recognized signal as required for that browser and device.

6. Retention and security

We keep personal information only as long as reasonably necessary for the purposes described above, including providing services, maintaining transaction and authorization records, resolving disputes, enforcing agreements, and meeting tax, accounting, insurance, and legal obligations. Retention varies by record type and engagement. When information is no longer required, we take reasonable steps to delete, de-identify, or securely dispose of it.

We use administrative, technical, and organizational safeguards designed for the nature of the information. No transmission or storage system can be guaranteed completely secure. You are responsible for using approved secure channels and following our access instructions.

7. International processing

MHCS is based in the United States. Our providers may process information in the United States and other countries. Where required, they use contractual or other safeguards for international transfers.

8. Children

Our services are directed to businesses and adults. The site is not intended for children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child provided information to us.

9. Your choices and privacy rights

Depending on where you live and subject to exceptions, you may have rights to request access, correction, deletion, or portability of personal information and to opt out of its sale, targeted advertising, or certain profiling. You may also withdraw consent where processing depends on consent and appeal a denied privacy request.

Submit a request to contact@milehighcybersolutions.com with the subject “Privacy request.” Describe the request and the state or country where you live. We may request information necessary to reasonably verify your identity and authority. Authorized agents may submit requests where permitted by law. We will not unlawfully discriminate against you for exercising a privacy right.

Because privacy laws apply at different thresholds and contain exceptions, a particular right may not apply to MHCS or to all information. We will respond as required by applicable law. You may appeal a denied request by replying with “Privacy appeal” in the subject line. Colorado residents may contact the Colorado Attorney General if an appeal is denied.

10. Third-party links

The site may link to Stripe, Upwork, LinkedIn, or other third parties. Their privacy practices are governed by their own notices, not this Policy.

11. Changes to this Policy

We may update this Policy as our services or legal obligations change. We will post the revised version here and update the date above. If a change is material, we may provide additional notice as required by law.

12. Contact us