Effective date: 2026-01-07
This Privacy Policy describes the information practices of ElephantHop (“we,” “us,” or “our”) in connection with elephanthop.com (the “Site”) and our identity and access management consulting services (the “Services”). By accessing or using the Site, you acknowledge the practices described in this Policy.
This Policy is a statement of our practices only. It is not a contract, does not create any warranty, representation, or legal right for any person, and does not impose obligations on ElephantHop beyond those required by applicable law. Nothing in this Policy grants any person rights beyond those required by applicable law, and no person may rely on this Policy as the basis for any claim.
Scope
This Policy applies to personal information we collect through the Site and in connection with marketing, selling, and delivering our Services. It does not apply to information we process on behalf of our clients, which is addressed in the Client Engagement Data section below.
Information We May Collect
Information you provide. When you contact us, request a consultation, or engage our Services, we may collect information you choose to provide, such as your name, email address, phone number, mobile phone number, company name, job title, billing information, and the contents of your communications with us, among other information.
Information collected automatically. When you visit the Site, we and our service providers may collect technical information such as IP address, browser type, device identifiers, operating system, pages viewed, referring pages, and access dates and times, through cookies, log files, and similar technologies.
Information from other sources. We may receive information about you from publicly available sources, business partners, or referrals, and may combine it with information we collect directly.
Client Engagement Data
In performing the Services, we may access systems and data controlled by our clients, including directories, identity records, credentials, and device information. We access and process such data at the direction of the client and subject to the written agreement governing the engagement. With respect to such data, the client is the controller and ElephantHop acts as a processor or service provider. This Policy does not govern client-controlled data, and any inquiry regarding such data should be directed to the applicable client. As between ElephantHop and any individual whose data is contained in client systems, the terms of our written agreement with the client control.
How We May Use Information
We may use personal information for business purposes, including, but not limited, to:
- Respond to inquiries and consultation requests
- Provide, administer, secure, and improve the Services and the Site
- Manage client relationships, billing, and accounts
- Send communications about our Services
- Protect the security and integrity of our systems and investigate suspected fraud, abuse, or violations of law
- Comply with legal obligations, enforce our agreements, and establish, exercise, or defend legal claims
- Fulfill any other purpose disclosed at the time of collection, with your consent, or as otherwise permitted or required by law
How We May Disclose Information
We do not currently sell personal information in exchange for money.
We may disclose personal information in the following circumstances, and as otherwise permitted or required by law:
Service providers. We may disclose information to third parties that perform functions on our behalf, such as website hosting, email, scheduling, payment processing, analytics, and business operations.
Professional advisors. We may disclose information to our attorneys, accountants, insurers, and similar advisors.
Legal process and protection. We may disclose information when we believe in good faith that disclosure is required or permitted by law, regulation, legal process, or governmental request, or is reasonably necessary to protect the rights, property, or safety of ElephantHop, our clients, our personnel, or others.
Business transfers. In connection with any merger, acquisition, financing, reorganization, or sale of all or a portion of our assets, personal information may be disclosed or transferred as a business asset.
With your consent. We may disclose information for any other purpose with your consent.
SMS and Mobile Phone Numbers
We do not share, sell, or rent customer mobile phone numbers with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party.
We use your mobile number to communicate with you in connection with our Services. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP, and you can get assistance by replying HELP.
Cookies, Analytics, and Do Not Track
The Site uses cookies and similar technologies to operate properly and to help us understand how the Site is used. You can control or delete cookies through your browser settings; disabling cookies may affect Site functionality. Because there is no industry standard for responding to “Do Not Track” browser signals, the Site does not currently respond to them.
Third-Party Websites
The Site may contain links to websites operated by third parties. We are not responsible for the privacy practices or content of third-party websites, and this Policy does not apply to them.
Data Retention
We retain personal information for as long as we consider reasonably necessary for the purposes described in this Policy, or as otherwise permitted or required by law. Retention periods vary based on the nature of the information and the purposes for which it is processed.
Security
We maintain safeguards intended to protect personal information, appropriate to the nature of the information and our business. However, no method of transmission or storage is completely secure. We do not warrant or guarantee the security of any information, and any information you transmit to us is provided at your own risk.
Your Choices
You may opt out of marketing emails at any time by using the unsubscribe link in any message or by contacting us via our contact form. You may opt out of text messages as described in the SMS section above.
Where applicable law grants you rights with respect to your personal information, we will respond to verifiable requests to the extent required by that law. We may require reasonable verification of identity before acting on any request, and we may decline any request where permitted by law, including where identity cannot be verified, where the information is subject to a retention obligation, or where the request relates to data we process on behalf of a client.
United States Processing
The Site is operated from the United States and our Services are directed to businesses located in the United States. Information we collect is processed and stored in the United States. If you access the Site from outside the United States, you do so on your own initiative, you are responsible for compliance with local law, and you understand that your information will be transferred to and processed in the United States.
Children
The Site and Services are intended for businesses and their adult representatives. We do not knowingly collect personal information from anyone under 18. Persons under 18 are not authorized to use this website for any purpose.
Changes to This Policy
We may update this Policy at any time and without prior notice. Updates are effective when posted, and the effective date above will reflect the most recent revision. Your continued use of the Site after an update constitutes acknowledgment of the revised Policy.
Governing Law and Venue
This Policy and any dispute arising out of or relating to it or our privacy practices are governed by the laws of the State of Colorado, without regard to conflict of law principles. Exclusive venue for any such dispute lies in the state courts located in Larimer County, Colorado, or the United States District Court for the District of Colorado, and you consent to personal jurisdiction in those courts.
Severability
If any provision of this Policy is held invalid or unenforceable, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.