PRIVACY NOTICE

Last updated: November 1, 2026

 

This privacy notice for Camelot Secure, a division of DigiFlight, Inc. (“Company,” “we,” “us,” or “our”), describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

 

  • Visit our website at https://camelotsecure.com
  • Engage with us in other related ways, including cybersecurity consulting, business development, sales inquiries, partner engagements, or industry events
Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at tori.oliver@digiflight.com.

 

SUMMARY OF KEY POINTS

  • What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Camelot Secure and the Services, the choices you make, and the features you use.
  • Do we process sensitive personal information? We do not intentionally process sensitive personal information through our public web properties.
  • Do we receive information from third parties? We may receive professional B2B information from public databases, corporate directories, and joint marketing partners.
  • How do we process your information? We process your information to deliver, improve, and administer our Services, communicate with you regarding cybersecurity solutions and commercial inquiries, maintain infrastructure security, and comply with the law. We do not sell your personal data or share it for cross-context behavioral advertising.
  • With whom do we share personal information? We share information only in limited operational circumstances with contracted service providers supporting our technical infrastructure, hosting, security monitoring, and corporate administration under strict confidentiality agreements.
  • How do we keep your information safe? We maintain organizational, administrative, and technical safeguards designed to protect personal information from unauthorized access, alteration, or disclosure.
  • What are your rights? Depending on your geographical location (such as the EEA, UK, Canada, or California), applicable privacy regulations grant you specific statutory rights regarding your personal information, including access, correction, and deletion.

DATA CONTROLLER

DigiFlight, Inc., operating Camelot Secure, located at 7021 Columbia Gateway Dr., Suite 300, Columbia, MD 21046, United States, is the data controller responsible for your personal information as described in this privacy notice. For certain enterprise engagements or managed cybersecurity services, Camelot Secure may act as a data processor on behalf of its contracting clients, who serve as the data controllers for data submitted under those service agreements.

 

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
  4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
  7. HOW LONG DO WE KEEP YOUR INFORMATION?
  8. HOW DO WE KEEP YOUR INFORMATION SAFE?
  9. WHAT ARE YOUR PRIVACY RIGHTS?
  10. CONTROLS FOR DO-NOT-TRACK FEATURES
  11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
  12. DO WE MAKE UPDATES TO THIS NOTICE?
  13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you submit an inquiry through our contact forms, request cybersecurity demonstrations or assessments, or communicate directly with our technical and management staff.

 

The personal information we collect may include:

 

  • Full names
  • Business email addresses
  • Phone numbers
  • Corporate mailing addresses
  • Job titles and company affiliations
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any material changes to such information.

 

Information Automatically Collected

When you access or navigate our Services, our servers automatically log certain technical information. This data does not reveal your specific personal identity (such as your name) but includes device and usage characteristics essential for cybersecurity, threat monitoring, and network optimization:

 

  • Log and Usage Data: Service-related, diagnostic, and performance information recorded in server logs, including your IP address, browser type, system configuration, referring URLs, and access timestamps.
  • Device Data: Information regarding your computer, tablet, or mobile device, including hardware model, operating system, and browser version.
  • Location Data: Imprecise geolocation data (such as country or region derived from your IP address) used to route compliance requirements and load localized assets.

Information Collected From Other Sources

To maintain accurate business records and support enterprise communications, we may obtain limited professional information from public registries, cybersecurity industry directories, joint marketing partners, and public social networks (such as LinkedIn). This data is strictly limited to corporate contact details, job titles, and professional bios.

 

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for legitimate business purposes depending on how you interact with Camelot Secure, including:

 

  • Responding to inquiries: To evaluate your inquiries, provide technical information regarding our cybersecurity offerings, and deliver requested B2B support.
  • Contractual performance: To take necessary steps prior to entering into a contract or to fulfill existing service level agreements.
  • Administrative notices: To send updates concerning our terms, security advisories, or operational policies.
  • Security and fraud prevention: To monitor network traffic, identify and remediate potential cyber threats, and protect our infrastructure, clients, and website visitors.
  • Legal and regulatory compliance: To comply with federal, state, and international regulatory mandates, including commercial compliance audits.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

We only process your personal information when we have a valid legal basis under applicable data protection laws.

 

If you are located in the EU or UK (GDPR / UK GDPR):

  • Consent: Where you have granted explicit permission for a specific purpose (e.g., opting into non-essential analytics). You may withdraw consent at any time.
  • Performance of a Contract: Where processing is required to enter into or fulfill our contractual commitments to your organization.
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental data protection rights (e.g., maintaining infrastructure security, incident response, and B2B client management).
  • Legal Obligations: Where processing is required to comply with statutory mandates, law enforcement requests, or regulatory audits.

If you are located in Canada:

We process your information based on express or implied consent as recognized under Canadian law. In certain exceptional circumstances (such as investigations, fraud prevention, or legal subpoenas), collection without express consent is permitted by law.

 

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

DigiFlight, Inc., operating Camelot Secure, does not sell personal information to third parties, nor do we disclose personal data to third-party advertising networks for commercial profiling.

 

We share information only with contracted third-party vendors and service providers who support our core operations under strict data processing agreements:

 

  • Cloud Infrastructure & Data Storage Providers
  • Website Hosting & Content Delivery Networks (e.g., Cloudflare)
  • IT Performance, Security, and Monitoring Services (e.g., Wordfence)
  • Web Analytics Providers (e.g., Google Analytics)
  • Corporate Accounting, Legal, and Business Management Platforms
We may also disclose information in connection with corporate restructuring, mergers, asset sales, or where required by valid court orders, subpoenas, or federal compliance authorities.

 

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We use cookies and related technologies to ensure security, route traffic efficiently, and measure aggregate visitor traffic.

 

We do not deploy cross-context behavioral advertising pixels or invasive retargeting beacons. Details on the specific cookies used (including Cloudflare security tokens and Google Analytics storage), expiration timeframes, and interactive consent controls are detailed in our live Cookie Policy.

 

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

DigiFlight, Inc. and Camelot Secure are headquartered in the United States, and our primary servers and databases operate within the United States. If you access our Services from the European Economic Area, United Kingdom, Canada, or other international regions, your information will be transferred to and processed in the United States.

 

To ensure adequate protection for personal data originating from the EEA or UK, we rely on standard data protection contractual clauses approved by the European Commission, alongside technical safeguards implemented across our network infrastructure.

 

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only for as long as necessary to fulfill the business purposes outlined in this notice, unless a longer retention period is mandated by commercial contracting regulations, tax codes, or litigation hold obligations.

 

When personal data is no longer required for legitimate business or regulatory purposes, it is securely deleted, overwritten, or anonymized in accordance with our corporate data handling standards.

 

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement risk-based, industry-standard administrative, physical, and technical safeguards designed to protect personal information against unauthorized disclosure, loss, or alteration. These measures include restricted role-based access controls, transport-layer encryption, and perimeter firewalls.

 

However, no method of transmission over the internet or electronic storage platform is entirely invulnerable. While we employ rigorous controls appropriate for a cybersecurity firm, transmission of information across public networks remains at your own risk.

 

9. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your geographical jurisdiction, you may have specific statutory rights regarding your personal information:

 

  • Right of Access: The right to request confirmation of data processing and obtain copies of your stored personal information.
  • Right to Rectification: The right to request correction of inaccurate or incomplete personal records.
  • Right to Erasure (Right to be Forgotten): The right to request the deletion of your personal information, subject to statutory retention obligations.
  • Right to Restriction or Objection: The right to limit or object to our processing of your personal data under specific conditions.
  • Right to Data Portability: The right to receive your personal data in a structured, machine-readable format.
To exercise any of these rights, please contact our compliance team at tori.oliver@digiflight.com.

 

If you are located in the EEA or UK and believe our data processing violates applicable law, you have the right to lodge a complaint with your local supervisory authority:

 

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Many web browsers include a Do-Not-Track (“DNT”) setting designed to signal privacy preferences to web services. Because no uniform commercial standard has been established for interpreting DNT signals, Camelot Secure does not currently alter its operational logging in response to generic browser DNT headers. However, we honor recognized browser opt-out signals (such as Global Privacy Control) where required by applicable state law.

 

11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

California Civil Code Section 1798.83 (the “Shine the Light” law) permits California residents to request details regarding categories of personal information shared with third parties for direct marketing purposes. Camelot Secure does not disclose personal data to third parties for third-party direct marketing.

 

California Consumer Privacy Act (CCPA / CPRA) Disclosures

In the preceding twelve (12) months, DigiFlight, Inc., operating Camelot Secure, has collected the following categories of personal information for business operational purposes:

 

  • Identifiers: Business names, email addresses, phone numbers, and IP addresses.
  • Internet or Network Activity: Browsing history within our site, operating system data, and aggregate referral links.
  • Geolocation Data: Imprecise regional location derived from IP addresses.
Sale and Sharing of Personal Information:

 

DigiFlight, Inc., operating Camelot Secure, has not sold personal information and has not shared personal information for cross-context behavioral advertising in the preceding twelve (12) months. We utilize strictly necessary, functional, and aggregate analytics technologies as detailed in our Cookie Policy.

 

Your CCPA Rights

California residents have the right to:

 

  1. Request disclosure of the categories and specific pieces of personal information collected.
  2. Request deletion of personal information, subject to legal and contractual exceptions.
  3. Request correction of inaccurate personal data.
  4. Exercise these rights without receiving discriminatory treatment or degraded service.
To exercise these rights, submit your request via our Contact Us form or email tori.oliver@digiflight.com.

 

12. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Notice periodically to reflect changes in our operational practices, technical architecture, or regulatory frameworks. The revised document will be identified by an updated “Revised” date at the top of this page and will become effective immediately upon publication.

 

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions, comments, or regulatory inquiries regarding our privacy practices, contact us at:
 
Camelot Secure
A Division of DigiFlight, Inc.
Attention: Privacy & Compliance
7021 Columbia Gateway Dr., Suite 300
Columbia, MD 21046
United States
Phone: (+1) 410.312.0662

 

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Under applicable federal, state, or international data protection laws, you may review, correct, or request deletion of the personal information we maintain. To submit a verifiable data subject request, please reach out directly through our Contact Us page or email our compliance coordinator at tori.oliver@digiflight.com. We will authenticate and respond to your request within the timeframes mandated by applicable law.