Privacy Policy

Effective date: September 30, 2026

This Privacy Policy explains how Mariventus Technology (“Mariventus,” “we,” “us” or “our”) collects, uses, discloses and protects information in connection with this website and any page that links to this policy (the “Site”). By using the Site you acknowledge the practices described here. Use of the Site is also governed by our Terms of Use.

1. Scope

This policy covers information collected through the Site and through correspondence that begins on the Site. It does not cover information we process on behalf of our clients while delivering services. That information is governed exclusively by the Master Services Agreement, Statement of Work, nondisclosure agreement and, where applicable, Business Associate Agreement in place with that client. Where one of those agreements conflicts with this policy, the agreement controls.

2. Protected health information

We work with healthcare and healthcare technology organizations, and we advise clients on HIPAA readiness. For that reason we want to be precise about what this Site is and is not.

• The Site is not designed or intended to receive protected health information (“PHI”) as defined under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”). Please do not submit PHI, patient names or identifiers, medical record numbers, or any other individually identifiable health information through any form on the Site or in reply to any email you receive from the Site.
• Submitting information through the Site does not create a business associate relationship. Mariventus acts as a business associate only under a Business Associate Agreement signed by both parties before any PHI is made available to us.
• If PHI reaches us through the Site anyway, we will not use it for any purpose, will delete it from our systems once we become aware of it, and will let the sender know we have done so.

The same caution applies to other sensitive data. Please do not send passwords, access keys, API tokens, connection strings, payment card data, government identifiers or production data exports. If you share a cloud cost export or billing screenshot to support a question, remove names and account identifiers first. We only need the shape of the spend.

3. Information we collect

Information you give us

• The Second Opinion form: your question, your work email address and, if you choose to give it, your company name.
• Contact requests: your name, work email address, company name, company size, cloud platform, area of interest and any message you write.
• Email correspondence: the contents of messages you send us and any attachments you choose to include.

Information collected automatically

• Campaign and referral information. When you first arrive on the Site, your browser records the campaign parameters in the link you followed (for example utm_source and utm_campaign), the name and path of the external site that referred you, the page you landed on and the time. This is held in your browser’s session storage, which is cleared when you close the tab. If you submit a form, this information is sent with your submission so we can understand which marketing reached you. If you do not submit a form, it never leaves your browser.
• The page you submitted from. Recorded with each form submission.
• Aggregate analytics. We use Vercel Web Analytics to count page views and understand traffic in aggregate, such as which pages are visited, referring sites, and general country, device and browser type. When a form is submitted, we also record that a submission happened and on which page, without any of its contents. Vercel Web Analytics does not use cookies and does not build a profile of you across websites.
• Server and security logs. Our hosting provider processes technical data needed to deliver the Site and protect it from abuse, including IP address, browser user agent, requested URL and time of request.

Cookies and tracking technologies

The Site does not set cookies, does not use advertising pixels or third-party advertising trackers, and does not use session replay or keystroke recording tools. Our web fonts are served from our own domain, so loading a page does not send your IP address to a font provider. If this changes we will update this policy before the change takes effect.

4. How we use information

We use the information described above to:

• read and respond to your question or request;
• send you a single confirmation that your submission arrived;
• keep a record of the organizations we have corresponded with, including where that contact originated;
• understand which pages and campaigns are useful, and improve the Site;
• prepare anonymized versions of questions and answers for publication, as described in Section 5;
• protect the Site, our systems and our users against spam, fraud and abuse; and
• comply with law, enforce our Terms of Use and establish or defend legal claims.

We do not add you to a newsletter or automated email sequence because you submitted a form. We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not use it to train machine learning models.

5. Published answers

Some questions and answers are useful to other readers, and we may publish them on the Site. Before anything is published we remove your name, your company’s name and any other detail that could reasonably identify you or your organization, and we ask your permission. We do not publish a question without it.

6. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose information only as follows:

• Service providers that process information on our behalf and under contractual obligations to protect it: Vercel, Inc. (website hosting and aggregate analytics), Resend (delivery of form notifications and confirmation emails), and Microsoft Corporation (Microsoft 365 business email, where submissions and correspondence are stored).
• Professional advisers such as lawyers and accountants, under duties of confidentiality, where reasonably necessary.
• Legal requirements. Where required by law, subpoena or court order, or where we believe in good faith that disclosure is necessary to protect the rights, property or safety of Mariventus, our clients or others.
• Business transfers. In connection with a merger, acquisition, financing or sale of all or part of our business, subject to this policy continuing to apply to the information transferred.
• With your consent or at your direction.

7. How we protect information

We maintain administrative, technical and physical safeguards appropriate to the nature of the information the Site collects. These include encryption of all traffic to and from the Site using TLS, input validation and length limits on every form, spam controls, and restricting access to submissions to the Mariventus personnel who need it to respond to you. Our service providers maintain their own independently audited security programs.

No method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting personal information you provided through the Site, we will notify you and any authorities as and when required by applicable law.

A note on SOC 2 and HIPAA. References on this Site to SOC 2, HIPAA, ISO 27001 and similar frameworks describe the advisory and readiness services we provide to our clients. They are not a representation that Mariventus holds any certification or attestation report. A SOC 2 report can be issued only by an independent licensed CPA firm, and neither the U.S. Department of Health and Human Services nor any other government body certifies organizations as HIPAA compliant.

8. How long we keep information

• Form submissions and related correspondence are kept as business records for as long as needed to respond, maintain our relationship with you, and meet our legal, accounting and contractual obligations. If no business relationship results, we delete them within three years of our last contact with you, or sooner on request.
• Campaign and referral information stored in your browser is cleared when you close the tab. Where it was sent with a submission, it is kept with that submission.
• Aggregate analytics are retained by Vercel according to its standard retention periods and do not identify you.
• Information sent in error, including PHI or credentials, is deleted once we become aware of it.

9. Your rights and choices

Wherever you live, you may ask us to tell you what personal information we hold about you, to correct it, to delete it, or to stop contacting you. We will honor these requests unless we are required by law to keep the information. Depending on where you live, including California, Colorado, Connecticut, Virginia and other U.S. states with consumer privacy laws, the European Economic Area, the United Kingdom and Switzerland, you may have additional rights, including the right to data portability, the right to object to or restrict processing, and the right to appeal a decision we make about your request.

To make a request, email webcampaign@mariventustechnology.com with the subject line “Privacy Request.” We will verify your request by confirming it from the email address associated with your information, and we will respond within 30 days, or within any shorter period required by applicable law. You may use an authorized agent where the law allows. We will not discriminate against you for exercising any of these rights.

Because we do not sell or share personal information for advertising, there is nothing to opt out of in that respect. We nonetheless treat Global Privacy Control signals as a valid opt-out request. The Site does not respond differently to Do Not Track signals because it does not track you across websites.

10. Visitors outside the United States

Mariventus is based in Florida, and the Site and our service providers operate in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, we process your personal information on the basis of our legitimate interests in responding to your inquiry and operating our business, on the basis of steps you have asked us to take before entering into a contract, or on the basis of your consent where we ask for it. Transfers to the United States rely on appropriate safeguards, such as Standard Contractual Clauses, adopted by our service providers. You may lodge a complaint with your local data protection authority, and we would welcome the chance to address your concern first.

11. Children

The Site is intended for business professionals and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Third-party websites

The Site links to third-party sites such as LinkedIn. Their privacy practices are governed by their own policies, and we are not responsible for them.

13. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The effective date at the top of the page shows when it last changed. If we make a material change to how we use personal information we have already collected, we will notify affected individuals by email before the change applies to them.

14. Contact us

Questions, requests and complaints about this policy or our privacy practices can be sent to webcampaign@mariventustechnology.com. We read every message.

Mariventus Technology
Tampa, FL, United States