Privacy
Privacy Policy.
This Privacy Policy describes how AEGIS ISD, LLC ("AEGIS ISD," "we," "us," or "our") collects, uses, and discloses information in connection with our marketing website at aegisisd.com. It does not apply to Protected Health Information (PHI) or other Customer Data processed by our platform on behalf of healthcare customers, which is governed by the executed Business Associate Agreement and the customer's own privacy notices.
Effective date: April 24, 2026 · Last updated: April 24, 2026
1. Scope
This Privacy Policy applies to information we collect on or through the aegisisd.com website and related marketing channels. When we provide our healthcare program integrity platform to a health plan, state agency, or other customer, that customer is the controller or covered entity for information (including PHI) processed through the platform, and our handling is governed by the applicable Business Associate Agreement (BAA) and data processing terms, not by this Policy.
2. Information we collect
We collect the following categories of information:
- Information you provide. When you email us or request a demo, we receive your name, business email, organization, role, phone number if you include it, and the contents of your message.
- Automatic information. Our servers receive standard HTTP log data including IP address, user-agent string, referrer, requested URL, and timestamp. These logs are used for security monitoring, troubleshooting, and abuse prevention.
- Cookies and third-party resources. The website uses strictly-necessary cookies or storage only, if enabled by hosting infrastructure. It also loads Google Fonts, which may cause standard request metadata to be sent to Google-hosted domains. We do not use analytics, advertising, retargeting, session-replay, or behavioral tracking cookies on this marketing site. See our Cookie Policy.
We do not intentionally collect sensitive categories of personal information on this website. Please do not submit PHI or other sensitive information through the marketing website; use the contracted channels instead.
3. How we use information
We use the information we collect to:
- respond to your inquiries and provide information about our services;
- schedule and conduct demonstrations of our platform;
- send you service-related communications that you have requested;
- operate, secure, and improve the website;
- comply with legal obligations, respond to lawful requests, and protect our rights and the rights of others; and
- prevent fraud, abuse, or security incidents affecting the website or our services.
4. How we share information
We share information only in the following limited circumstances:
- Service providers. We share information with vendors that help us operate the website and communicate with prospects (for example, our cloud hosting provider and font-delivery provider). Each service provider is expected to protect information and use it only for the services they provide to us.
- Legal and safety. We may disclose information if we believe in good faith that disclosure is required by law, is necessary to comply with a legal process, or is appropriate to protect the rights, property, or safety of AEGIS ISD, our customers, or the public.
- Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to customary confidentiality protections.
We do not sell personal information and we do not share personal information for cross-context behavioral advertising.
5. Retention
We retain the information we collect only as long as reasonably necessary for the purposes described in this Policy, or as required by law. Specific retention periods are as follows:
- Inquiry and demo-request contact information (name, email, organization, message content): up to twenty-four (24) months after the most recent interaction if no contracted relationship results, then deleted or de-identified.
- Customer-relationship records (once a contract is entered into): for the duration of the relationship and for seven (7) years after termination, or longer where required by tax, audit, or other legal obligations.
- Server and security logs (IP address, user-agent, request metadata): up to ninety (90) days in ordinary operation. Logs may be retained longer when reasonably necessary to investigate a specific security incident or to comply with legal process or hold.
- Email correspondence retained in our business email system: according to our records-retention schedule, generally seven (7) years.
6. Security
We maintain administrative, technical, and physical safeguards designed to protect the information we hold. A summary of our security program is published at aegisisd.com/security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Children
The website is intended for professional and business audiences and is not directed to children under the age of 16. We do not knowingly collect personal information from children.
8. International users
AEGIS ISD is based in the United States, operates the website from the United States, and intends this Privacy Policy for U.S. residents. We do not currently target or market our services to, or knowingly collect personal information from, residents of the European Union, the United Kingdom, or other jurisdictions whose privacy laws would impose additional obligations beyond U.S. law. If you access the website from outside the United States, you understand that your information will be transferred to and processed in the United States under applicable U.S. law. If AEGIS ISD begins serving customers or data subjects subject to the EU General Data Protection Regulation, the UK GDPR, Canada's PIPEDA, or other non-U.S. privacy regimes, this Privacy Policy will be revised to provide the additional disclosures and rights required by those laws before the relevant processing begins.
9. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be highlighted on this page, and where applicable law requires additional notice or consent, we will provide it.
10. Contact us
If you have questions about this Privacy Policy or wish to exercise any of the rights described below, contact us at privacy@aegisisd.com or by mail at AEGIS ISD, LLC, 7753 Green Mountain Way, Winter Garden, FL 34787, United States.
For California residents
Your California privacy rights.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), may give you specific rights with respect to your personal information if AEGIS ISD is a covered "business" under the CCPA. This section supplements the Privacy Policy above and explains the practices we follow for California privacy requests.
Notice at collection
In the preceding twelve (12) months, we have collected the following categories of personal information (as enumerated in Cal. Civ. Code §1798.140(v)(1)) from California residents who interact with our marketing website:
- Identifiers — including name, business email address, telephone number (if you provide it), and IP address. Sources: directly from you and automatically from your device. Business/commercial purposes: to respond to inquiries, schedule demonstrations, operate and secure the website, and comply with law. Retention: up to twenty-four (24) months after last interaction for inquiries without a contracted relationship; for the duration of the customer relationship plus seven (7) years if a contract results. No sale or sharing.
- Commercial information — including organization name, role, and subject-matter interests you express. Source: directly from you. Business/commercial purposes: to qualify demo requests and tailor communications. Retention: same as identifiers above. No sale or sharing.
- Internet or other electronic network activity information — including server logs, pages requested, and referrer headers. Source: automatically from your device. Business/commercial purposes: security monitoring, troubleshooting, and abuse prevention. Retention: up to ninety (90) days in ordinary operation; longer if reasonably necessary for a specific security investigation or legal hold. No sale or sharing.
We do not collect sensitive personal information as defined in Cal. Civ. Code §1798.140(ae) (including Social Security number, driver's license, financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, genetic data, biometric identifiers, health information, contents of communications not addressed to us, or information about sex life or sexual orientation). We do not collect precise geolocation data, biometric information, or information about minors from visitors to this marketing website.
Sources and purposes
Sources: directly from you (forms, emails), automatically from your device (server logs, strictly necessary cookies or storage), and from our service providers (for example, our cloud host's operational logs and Google Fonts request delivery). Purposes are listed in Section 3 of the Privacy Policy above.
No sale or sharing of personal information
We do not sell personal information and we do not share personal information for cross-context behavioral advertising. Because we do not engage in either activity, there is no mechanism to opt out of it; this disclosure satisfies the corresponding notice requirement under the CCPA. If we were to change this practice in the future, we would update this Policy, provide an opt-out mechanism, and honor Global Privacy Control (GPC) signals.
Your rights under the CCPA
If you are a California resident, you have the right to:
- Know what personal information we have collected about you, the categories of sources, the business or commercial purposes, and the categories of third parties with whom we share it;
- Access the specific pieces of personal information we hold about you;
- Correct inaccurate personal information we maintain about you;
- Delete personal information we hold about you, subject to legal exceptions;
- Opt out of the sale or sharing of personal information (not applicable — we do not engage in either);
- Limit the use and disclosure of sensitive personal information (not applicable — we do not collect sensitive personal information on this website); and
- Non-discrimination for exercising any of the above rights. We will not deny you services, charge you a different price, or provide you a different level of quality because you exercised a CCPA right.
How to submit a request
To exercise any of these rights, email privacy@aegisisd.com with the subject line "California Privacy Request" or send the request by mail to the address listed below. Include enough information to reasonably verify your identity and the nature of the request. If AEGIS ISD becomes legally required to provide an additional request method, such as a toll-free number or webform, we will update this page before relying on that method. We will acknowledge your request within ten (10) business days of receipt and respond within forty-five (45) calendar days, with a one-time extension of up to an additional forty-five (45) calendar days when reasonably necessary (we will notify you of any extension within the first 45-day period and the reason for it).
Financial incentives
We do not offer financial incentives, payments, price or service differences, or any other form of consideration in exchange for personal information.
Authorized agents
You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of written authorization from you and may require you to verify your own identity directly with us.
"Shine the Light"
California Civil Code §1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
Privacy contact
Reach the AEGIS ISD privacy team.
For privacy questions, to exercise a right under the CCPA or other applicable law, or to report a concern, email our privacy team. Customers should also review the data protection terms in their applicable order form and BAA.
Privacy contact
- Email: privacy@aegisisd.com
- AEGIS ISD, LLC
- 7753 Green Mountain Way
- Winter Garden, FL 34787
- United States