Privacy Policy

Introduction

Cloud Ninjas LLC ("Cloud Ninjas," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website gpuitad.com, including any related services, buyback programs, sourcing requests, and GPU marketplace transactions.

We are based in Houston, Texas, United States, and operate in compliance with applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA) and the Texas Data Privacy and Security Act (TDPSA), as well as international standards such as the General Data Protection Regulation (GDPR) where applicable.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read and understood this policy.

Information We Collect

We may collect the following types of information when you interact with our website and services:

Personal Information You Provide

• Contact Information: Name, email address, phone number, company name, and job title when you fill out our contact, buyback, or sourcing forms.
• Equipment Information: Details about GPU hardware and IT equipment you submit for buyback quotes, sourcing requests, or ITAD services.
• Communication Data: Information you provide when you correspond with us via email, phone, or our website forms.
• Newsletter Preferences: Email address and communication preferences if you subscribe to our newsletter.

Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, referring URLs, and browsing patterns.
• Device Information: Browser type, operating system, IP address, and device type.
• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your browsing experience and analyze site traffic. You can manage your cookie preferences through our cookie consent banner.

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries, buyback requests, and sourcing submissions.
• To process and fulfill ITAD service requests, including equipment evaluation and logistics coordination.
• To provide quotes, invoices, and service documentation.
• To communicate with you about our services, promotions, and industry updates (with your consent where required).
• To improve our website, services, and customer experience.
• To comply with legal obligations, including data destruction certification and regulatory reporting.
• To detect, prevent, and address security incidents and fraudulent activity.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal information includes:

• Consent: Where you have given explicit consent for specific processing activities.
• Contractual Necessity: Processing necessary to fulfill our service obligations to you.
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services and preventing fraud.
• Legal Compliance: Processing required to comply with applicable laws and regulations.

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating our website and services, including Netlify (hosting), Shopify (GPU marketplace), shipping and logistics partners, and email communication platforms. These providers are contractually bound to protect your information.
• Compliance and Legal Obligations: When required by law, court order, or governmental regulation, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• With Your Consent: When you have given us explicit consent to share your information.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Specifically:

• Contact form inquiries: Retained for 3 years after the last communication.
• Buyback and sourcing records: Retained for 5 years for compliance and reporting purposes.
• ITAD service documentation: Retained for 7 years as required by regulatory standards including NIST 800-88 compliance documentation.
• Newsletter subscriptions: Retained until you unsubscribe.

When data is no longer needed, we securely delete or anonymize it in accordance with our data destruction and disposal procedures.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols.
• Secure data storage with access controls and authentication.
• NIST 800-88 compliant data destruction procedures for retired hardware.
• Regular security assessments and monitoring.
• Employee training on data protection and privacy practices.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

Your Rights and Choices

Under the CCPA (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and share.
• Request deletion of your personal information, subject to certain exceptions.
• Opt out of the sale of your personal information (we do not sell personal information).
• Non-discrimination for exercising your CCPA rights.
• Request a copy of your personal information held by us.

Under the GDPR (EEA/UK Residents)

If you are located in the EEA or UK, you have the right to:

• Access your personal information held by us.
• Rectify inaccurate or incomplete personal information.
• Request erasure of your personal information ("right to be forgotten").
• Restrict or object to processing of your personal information.
• Data portability to receive your information in a structured, commonly used format.
• Withdraw consent at any time where processing is based on consent.

Under the TDPSA (Texas Residents)

If you are a Texas resident, you have the right to:

• Confirm whether we process your personal data.
• Request correction or deletion of your personal data.
• Obtain a copy of your personal data in a portable format.
• Opt out of the processing of your personal data for targeted advertising or profiling.

To exercise any of these rights, please contact us using the information below. We will respond to your request within the timeframe required by applicable law.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. You can manage your cookie preferences through our cookie consent banner, which appears when you first visit our website.

You may also configure your browser to reject cookies or alert you when cookies are being sent. However, some parts of our website may not function properly without cookies.

For more information about the specific cookies we use, please refer to our cookie consent banner or contact us directly.

Third-Party Services

Our website uses the following third-party services that may collect information about you:

• Netlify: Website hosting and form processing. Netlify Privacy Policy
• Shopify: GPU marketplace integration. Shopify Privacy Policy
• Google Fonts: Font rendering.
• Constant Contact: Newsletter subscription management. Constant Contact Privacy Policy

These third-party services have their own privacy policies governing the use of your information. We encourage you to review their policies.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us.

International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and operations are located. If you are located outside the United States, please be aware that the data protection laws in the U.S. may differ from those in your country. By using our services, you consent to the transfer of your information to the United States.

For transfers from the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any material changes by posting the new Privacy Policy on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: