This Cookie Policy (the “Policy”) describes the cookies and similar tracking technologies deployed on www.kieri.com (the “Site”) by Kieri Solutions LLC (“Kieri Solutions”, “we”, “us”, or “our”), the purposes for which such technologies are used, their duration, and the means by which you may exercise the choices available to you.
1.1 The Site and the services offered through it are directed to businesses and individuals located in the United States. This Policy supplements the Kieri Solutions Privacy Policy, which addresses our handling of personal information more generally. In the event both documents address the same subject matter, they are to be read together.
1.2 References in this Policy to “cookies” shall be construed to include cookies, local storage, session storage, tracking pixels, tags, software development kits, and embedded third-party content, including video players and scheduling widgets. The loading of content hosted on a third party’s servers transmits your IP address and basic browser information to that party irrespective of whether a cookie is set.
1.3 We review this Policy upon any addition, removal, or reconfiguration of a tracking technology deployed on the Site, and in any event not less than annually.
2.1 Consistent with the opt-out framework generally applicable under United States privacy law, technologies in the strictly necessary, functional, and analytics categories are deployed upon your access to the Site. Technologies in the advertising and marketing category described in Section 3.4 are likewise deployed, and may be disabled by you at any time by any of the methods set forth below.
2.2 METHODS OF OPT-OUT
(a) Cookie Settings
Access the Cookie Settings control presented in the notice displayed on the Site and disable the advertising and marketing category described in Section 3.4. Your election is recorded in a first-party cookie so that it need not be re-entered on each page.
(b) Global Privacy Control
Where your browser or a browser extension transmits the Global Privacy Control (“GPC”) signal, we
treat that signal as a valid opt-out request with respect to that browser and device, and no further action is required of you.
(c) Written Request
Submit a request to privacy@kieri.com and we will process your opt-out.
2.3 An opt-out is prospective in effect. It does not require the deletion of data previously collected, and it does not disable strictly necessary technologies, which are required for the secure operation of the Site. We do not deny goods or services, charge different prices, or provide a different level of quality on account of your exercise of any right described in this Policy.
2.4 Controls Available Independently of the Site
The foregoing controls are browser-specific and device-specific. A change of browser or device, or the clearing of cookies, will require that such controls be set again.
3.1 STRICTLY NECESSARY
The following technologies are required for the operation and security of the Site, for the protection of our forms against automated abuse, and for the recording of your privacy elections. They are not used for marketing purposes and cannot be disabled.
Cookie or key | Set by | Type | Purpose | Retention |
__cf_bm | Cloudflare | Third party | Distinguishes human users from automated traffic upon submission of a form. | 30 minutes |
cf_clearance | Cloudflare | Third party | Records successful completion of a bot challenge to prevent repeat challenges. | Up to 1 year |
wfwaf-authcookie-* | Wordfence | First party | Operates the application firewall protecting the Site against attack. | 12 hours |
wordpress_logged_in_*, wordpress_sec_* | WordPress | First party | Maintains authenticated sessions for the client portal. | Session to 14 days |
wp-settings-*, wp-settings-time-* | WordPress | First party | Retains display preferences for authenticated users. | Up to 1 year |
Privacy choice preference | Kieri Solutions | First party | Records the election made through Cookie Settings pursuant to Section 2.2(a). | Up to 12 months |
3.2 FUNCTIONAL
The following technologies enable features you elect to use, including appointment scheduling, and deliver the typefaces and icons used in the presentation of the Site.
Cookie or key | Set by | Type | Purpose | Retention |
Google Fonts request | Google LLC | Third-party request | Delivers the typefaces used across the Site. Your IP address is transmitted to Google. | No cookie set |
Font Awesome request | Fonticons, Inc. | Third-party request | Delivers the icon set used across the Site. Your IP address is transmitted to Fonticons. | No cookie set |
Microsoft Bookings session cookies | Microsoft | Third party | Operates the scheduler embedded on our consultation and demonstration pages. Information you enter is processed by Microsoft on our behalf for the purpose of reserving the appointment. | Session to 12 months |
3.3 ANALYTICS
The following technologies enable us to measure use of the Site, including which pages are viewed, the sources from which visitors arrive, and the points at which they exit. Analytics data is not used to construct advertising profiles, and Google Signals has not been enabled on our Analytics property.
Cookie or key | Set by | Type | Purpose | Retention |
_ga | Google Analytics 4 | First party | Assigns a pseudonymous identifier permitting returning visits to be counted as a single visitor. | 2 years |
_ga_1LSS2LC25G | Google Analytics 4 | First party | Maintains session state for our Analytics property. | 2 years |
3.4 ADVERTISING AND MARKETING
The following technologies measure the performance of our advertising, permit the display of our advertisements to prior visitors of the Site, and identify organizations that may have an interest in our services. Certain of these technologies construct a profile of your interests capable of use across other websites. This category is subject to the opt-out described in Section 2.
Cookie or key | Set by | Type | Purpose | Retention |
_gcl_au, _gcl_aw, _gcl_gs, _gcl_dc | Google Ads | First party | Preserve advertisement click information so that a subsequent inquiry may be attributed to the campaign that generated it. | 90 days |
zc_gad | Zoho CRM | First party | Stores the Google click identifier and transmits it to our customer relationship management system upon submission of a form. | Persistent |
IDE, test_cookie, NID | Google, doubleclick.net | Third party | Measure advertisement performance, enable remarketing to visitors of the Site, and store advertising preferences. | 15 minutes to 13 months |
Apollo visitor identifiers | Apollo.io | First and third party | Identify returning visitors and associate activity on the Site with a company or business contact record. | Up to 2 years |
VISITOR_INFO1_LIVE, YSC, VISITOR_PRIVACY_METADATA | YouTube | Third party | Measure video views and personalize the player. The player is loaded only upon user activation, and where you have opted out of advertising we load it in no-cookie mode where such mode is available. | Session to 6 months |
3.5 BROWSER STORAGE OTHER THAN COOKIES
Campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content, and gclid) are written to your browser’s session storage rather than to a cookie, for the purpose of carrying the originating campaign through to the form you submit. Such data is cleared upon closure of the browser tab.
Except where you have opted out of the advertising and marketing category, those values are appended to any inquiry, quote request, or booking you submit, with the result that the record created in our customer relationship management system contains both the information you provide and the campaign through which you arrived. Such information is used to measure which campaigns generate qualified inquiries. We do not sell that record for monetary consideration. Where you have opted out, your inquiry is recorded without campaign attribution and form functionality is unaffected.
The following parties receive data from your browser when the corresponding category is active. Each such party acts pursuant to its own privacy notice. Certain of these parties act as our service providers or processors and are contractually restricted to processing the data solely on our behalf. The advertising and sales-intelligence providers additionally process data for their own purposes.
Provider | Function performed on the Site | Category | Privacy notice |
Google LLC | Tag Manager, Analytics 4, Google Ads, YouTube, Google Fonts | Analytics, advertising, functional | policies.google.com/privacy |
Apollo.io | Visitor identification and buying-intent signals | Advertising | apollo.io/privacy-policy |
Zoho Corporation | Customer relationship management and campaign attribution for web forms | Advertising | zoho.com/privacy.html |
Microsoft Corporation | Bookings appointment scheduler | Functional | privacy.microsoft.com |
Cloudflare, Inc. | Turnstile bot protection on forms | Strictly necessary | cloudflare.com/privacypolicy |
Fonticons, Inc. | Font Awesome icon delivery | Functional | fontawesome.com/privacy |
Defiant, Inc. | Wordfence website firewall | Strictly necessary | wordfence.com/privacy-policy |
5.1 Certain states confer upon their residents rights with respect to personal information collected online, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. The rights available to you depend upon your state of residence. We apply the practices described in this Section to all United States visitors without regard to whether their state has enacted such a law.
5.2 Sale, Sharing, and Targeted Advertising
The technologies described in Section 3.4 disclose identifiers and browsing activity to advertising and sales-intelligence providers. Under California law such disclosure may constitute a “sale” or “sharing” of personal information for cross-context behavioral advertising. Under the laws of the other states identified in Section 5.1 it constitutes targeted advertising and, in certain instances, profiling. We do not exchange personal information for monetary consideration. No technology in the strictly necessary, functional, or analytics categories is used for such purposes.
5.3 Method of Opt-Out
You may exercise your opt-out by any method set forth in Section 2.2. We process the Global Privacy Control signal automatically and in a frictionless manner, and accordingly honor universal opt-out mechanism requirements in each state recognizing such a mechanism. No account is required, we do not require verification of your identity as a condition of honoring an opt-out request, and we will not deny goods or services, charge a different price, or provide a different level of quality on account of your exercise of this right. An authorized agent may submit an opt-out request on your behalf, and we may require proof of the agent’s authorization.
5.4 Categories of Personal Information Collected
The foregoing information is used to operate and secure the Site, to measure its use, to measure and target our advertising, and to respond to inquiries, and is disclosed to the parties identified in Section 4 for such purposes.
5.5 Sensitive Personal Information
We do not collect sensitive personal information through the technologies described in this Policy, including Social Security or other government identification numbers, precise geolocation, account credentials, health information, biometric information, racial or ethnic origin, religious belief, union membership, sexual orientation, immigration status, or the contents of your communications. Accordingly, we do not offer a separate mechanism to limit the use of sensitive personal information, as no such information is collected. We do not use these technologies for any decision producing a legal or similarly significant effect concerning you.
5.6 Retention, Additional Rights, and Appeals
Each cookie is retained for the period stated in Section 3. Data reported to analytics and advertising providers is retained pursuant to the retention schedules of those providers, and inquiry records held in our customer relationship management system are retained in accordance with the schedule described in our Privacy Policy. Depending upon your state of residence, you may also have the right to know what personal information we have collected, to obtain a copy of it, to correct it, to delete it, and to appeal a decision we make with respect to a request. As those rights extend beyond the subject matter of this Policy, they and the procedure for submitting a request are described in our Privacy Policy. If we deny a request, you may appeal by replying to our decision. If we deny an appeal, you may contact the attorney general of your state.
5.7 Children, Do Not Track, and Nevada
The Site is not directed to children, and we do not knowingly collect personal information from children or knowingly sell or share the personal information of consumers we know to be under sixteen years of age. Browsers may transmit a “Do Not Track” signal. As no common industry standard governs the interpretation of that signal, the Site does not respond to it. The Site does respond to the Global Privacy Control signal as described in Section 5.3. Nevada residents may submit a request that we not sell certain covered information as defined under Nevada law by writing to us at the address set forth in Section 7.
We amend this Policy as the technologies deployed on the Site change. The effective date stated at the head of this Policy reflects the date of the most recent revision. Where an amendment materially expands the categories of information collected or the parties to whom such information is disclosed, we will post notice on the Site prior to the amendment taking effect.
Inquiries regarding this Policy, and requests to exercise the rights described herein, may be directed to the following.
Kieri Solutions LLC
Woodbine, MD, United States
privacy@kieri.com
+1 (301) 253-5150
CMSS consulting
Know where you stand
NIST SP 800-171
Official CMMC certification
CMMC 2.0
Official CMMC certification
Our Ethical Standards
Know where you stand
Free Gap Assessment
Your compliance status