Tempest Privacy Policy

1. Scope

This Privacy Policy applies to personal information we collect when you:

• Visit our websites or portals that link to this Privacy Policy
• Create an account or place an order
• Use our infrastructure services (including dedicated servers, colocation, networking, and related offerings)
• Contact support, sales, or otherwise communicate with Tempest

This Privacy Policy does not cover third-party websites, services, or applications that may be linked from our Services.

2. Information we collect

We collect information in three main ways: (a) information you provide, (b) information collected automatically, and (c) information generated in connection with delivering and securing the Services.

A. Information you provide

• Account information: name, company name, email address, phone number, username, and authentication details.
• Billing information: billing address, tax/VAT details (where applicable), and payment-related identifiers. Payment card details are typically processed by our payment processors rather than stored directly by Tempest.
• Order and service details: products purchased, service configurations, resource identifiers, and related provisioning information.
• Support and communications: messages you send to support, sales, abuse, or other Tempest channels, including attachments you provide.

B. Information collected automatically

• Device and usage information: IP address, browser type, device identifiers, operating system, pages viewed, timestamps, referring/exit pages, and interaction data.
• Cookies and similar technologies: cookies, pixels, local storage, and similar tools used for core site functionality, security, analytics, and preferences.

C. Service, network, and security data

• Operational logs: service health and performance logs required to deliver and maintain Services.
• Network and abuse telemetry: traffic metadata and security logs used to detect, prevent, and respond to fraud, abuse, attacks, or violations of our terms.
• Access logs: authentication events, administrative actions, and other events associated with account and service access.

3. How we use information

We use personal information for the following purposes:

• Provide and operate Services: provisioning, authentication, service delivery, account administration, and customer support.
• Billing and transactions: processing payments, invoicing, collections, and fraud prevention.
• Security and integrity: monitoring, detecting, preventing, and investigating suspicious activity, abuse, policy violations, and threats to our network.
• Service improvement: debugging, analytics, product development, and improving performance and user experience.
• Communications: sending transactional messages, service notices, security alerts, administrative updates, and responding to inquiries.
• Legal and compliance: meeting legal obligations, enforcing our agreements, protecting rights and property, and addressing disputes.

4. Legal bases for processing

Where required by applicable data protection laws, we rely on one or more of the following legal bases:

• Contractual necessity: to provide Services you request and administer your account.
• Legitimate interests: to secure, maintain, and improve our Services; prevent fraud and abuse; and protect our network and customers.
• Consent: where required for certain cookies or marketing communications; you may withdraw consent at any time.
• Legal obligations: to comply with applicable laws, regulations, and lawful requests.

5. Cookies and tracking

We use cookies and similar technologies to:

• Enable core site functions (login sessions, security protections, account access)
• Remember preferences and settings
• Understand site performance and improve usability
• Help detect fraud and prevent abuse

You can control cookie behavior through your browser settings. Some cookies are necessary for the Services to function properly; disabling them may impact functionality.

6. How we share information

We may share personal information in the following circumstances:

A. Service providers and processors

We share information with vendors that help us operate the Services, such as payment processors, cloud/infrastructure providers, support platforms, analytics providers, and security tooling. These providers are authorized to process information only as needed to provide services to Tempest and must protect it consistent with contractual obligations.

B. Network, datacenter, and connectivity partners

Where necessary to deliver Services (including colocation and connectivity), we may share limited information with datacenters, carriers, or upstream providers, such as service identifiers, routing details, and operational contact information.

C. Legal, compliance, and safety

We may disclose information if we believe, in good faith, that disclosure is necessary to:

• Comply with law, regulation, legal process, or lawful requests
• Protect the rights, property, and safety of Tempest, our customers, or others
• Investigate and address fraud, abuse, security incidents, or policy violations

D. Business transfers

If Tempest is involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

We do not sell personal information in exchange for money. If certain privacy laws define “sale” or “sharing” broadly (for example, in relation to some advertising technologies), you may have rights to opt out as described below.

7. Data retention

We retain personal information for as long as reasonably necessary to:

• Provide the Services and maintain your account
• Meet legal, accounting, and compliance obligations
• Resolve disputes and enforce agreements
• Maintain security records and abuse-prevention logs

Retention periods vary by data type and context. Where feasible, we delete or de-identify information when it is no longer needed.

8. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, alteration, disclosure, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

9. International transfers

Your information may be processed in countries other than where you live, including where Tempest, our affiliates, or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Your rights and choices

Depending on where you live, you may have certain rights, which can include:

• Accessing the personal information we hold about you
• Correcting inaccurate or incomplete information
• Deleting personal information (subject to legal and operational requirements)
• Objecting to or restricting certain processing
• Requesting portability of certain information
• Opting out of certain marketing communications
• Opting out of certain cookie-based tracking (where applicable)

Marketing emails: You can opt out by using the unsubscribe link in marketing emails. Transactional and service notices may still be sent when necessary.

To exercise your rights, contact us using the details below. We may request information to verify your identity before fulfilling certain requests.

11. Children’s privacy

The Services are not directed to children, and we do not knowingly collect personal information from children.

12. Third-party links

Our Services may link to third-party websites or tools. Their privacy practices are governed by their own policies, not this Privacy Policy. Review those policies before providing personal information.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updates will be reflected by the “Last updated” date. If changes are material, we may provide additional notice consistent with applicable law. Continued use of the Services after an update means you accept the revised Privacy Policy.

14. Contact

For privacy questions or requests, contact Tempest using the support or contact methods listed on the Tempest website, or email: privacy@tempest.com.