17 free courses, no signup wall
Architect-led enterprise cloud, security & AI
Fixed-price engagements, scoped on a discovery call
Skip to content

Privacy policy

Last updated: August 1, 2026

Citadel Cloud Management operates this website (the "Services") to provide enterprise cloud, security, and AI consulting, together with free learning material and open-source resources. This Privacy Policy describes how personal information is collected, used, and disclosed when you visit, use, or communicate with the Services. If there is a conflict between the Terms of Service and this Privacy Policy, this Privacy Policy controls regarding personal information collection and processing.

By using the Services, customers acknowledge reading this Privacy Policy and understanding the collection, use, and disclosure of information.

Personal Information We Collect or Process

"Personal information" refers to information that identifies or can reasonably be linked to a person. Information collected anonymously or de-identified is excluded. Categories of personal information collected may include:

  • Contact details including name, address, billing address, shipping address, phone number, and email address
  • Financial information including credit card, debit card, financial account numbers, payment card information, transaction details, and payment confirmation
  • Account information including username, password, security questions, preferences and settings
  • Transaction information including items viewed, added to cart or wishlist, purchased, returned, exchanged or cancelled, and past transactions
  • Communications with us including information in customer support inquiries
  • Device information including device, browser, network connection information, IP address, and unique identifiers
  • Usage information including interaction with the Services, including how and when customers navigate the Services

Personal Information Sources

Personal information may be collected from:

  • Directly from customers when creating an account, visiting or using the Services, communicating with the company, or otherwise providing personal information
  • Automatically through the Services from devices when using products or services or visiting websites, and through cookies and similar technologies
  • From service providers engaged to enable technology and who collect or process personal information on behalf of the company
  • From partners or other third parties

How We Use Your Personal Information

Depending on how customers interact with the company, personal information may be used for:

  • Provide, Tailor, and Improve the Services. Personal information provides Services, performs contracts, processes payments, fulfills orders, remembers preferences, sends account-related notifications, processes purchases and transactions, creates and manages accounts, arranges shipping, facilitates returns and exchanges, enables reviews, and creates customized shopping experiences and product recommendations.

  • Marketing and Advertising. Personal information is used for marketing and promotional communications via email, text message or postal mail, and to display online advertisements for products or services on the Services or other websites, including based on previous purchases, cart additions, and Services activity.

  • Security and Fraud Prevention. Personal information authenticates accounts, provides secure payment and shopping experiences, detects and investigates fraudulent, illegal, unsafe, or malicious activity, protects public safety, and secures services. Customers are responsible for keeping account credentials safe and should not share username, password, or access details.

  • Communicating with You. Personal information provides customer support, maintains responsiveness, provides effective services, and maintains business relationships.

  • Legal Reasons. Personal information complies with applicable law or responds to valid legal process including law enforcement or government agency requests, investigates or participates in civil discovery or litigation, and enforces or investigates potential policy violations.

How We Disclose Personal Information

Personal information may be disclosed to third parties in certain circumstances:

  • With vendors and other third parties providing services (hosting, analytics, scheduling, email delivery, customer support). Each is named, with its purpose and data category, at Security and subprocessors
  • With business and marketing partners providing marketing services. Partners use information according to their own privacy notices. You may opt out of marketing based on your activity by contacting us
  • When customers direct, request, or consent to disclosure to third parties, such as for product shipping or through social media widgets or login integrations
  • With affiliates or within the corporate group
  • In connection with business transactions such as mergers or bankruptcy, to comply with legal obligations (including subpoenas and search warrants), to enforce terms of service or policies, and to protect or defend the Services, the company's rights, or users' rights

Hosting and Service Providers

The Services are hosted by Render. Analytics are provided by Google Analytics 4, scheduling for discovery calls by Google Calendar appointment scheduling, and transactional email by Resend. Information you submit may be transmitted to and stored by these providers, which may be located outside your country.

The authoritative list of every third party this website routes data through, with the purpose and data category for each, is published and kept current at Security and subprocessors. That page is the single source; this section summarises it.

Citadel Cloud Management is the controller responsible for the processing of your personal information, including for responding to requests to exercise your rights. Contact details are below.

This website previously operated a Shopify storefront. That store is closed and the Services are no longer hosted by or transacted through Shopify. Shopify continues to retain data from that period under its own retention schedule; to learn about its use of personal information and the rights available to you for that data, see the Shopify Consumer Privacy Policy and, depending on your location, the Shopify Privacy Portal.

Third Party Websites and Links

The Services may provide links to websites or platforms operated by third parties. Customers should review privacy and security policies and terms of conditions of such sites. The company does not guarantee and is not responsible for the privacy or security of such sites, including information accuracy, completeness, or reliability. Information provided on public or semi-public venues, including third-party social networking platforms, may be viewable by other Services users and/or third-party platform users without limitation. The company's inclusion of such links does not imply endorsement of content, owners, or operators, except as disclosed on the Services.

Children's Data

The Services are not intended for children and the company does not knowingly collect personal information about children under the age of majority in their jurisdiction. Parents or guardians of children who have provided personal information may contact the company using contact details below to request deletion.

As of the Effective Date, the company does not have actual knowledge that it "shares" or "sells" personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and perfect security cannot be guaranteed. Information sent may not be secure in transit. Customers should not use unsecure channels for sensitive or confidential communication.

Personal information retention depends on factors such as whether information is needed to maintain accounts, provide Services, comply with legal obligations, resolve disputes, or enforce contracts and policies.

Your Rights and Choices

Depending on location, customers may have some or all of the following rights regarding personal information. These rights are not absolute, may apply only in certain circumstances, and the company may decline requests as permitted by law.

  • Right to Access / Know. Customers may request access to personal information held about them.
  • Right to Delete. Customers may request deletion of personal information maintained about them.
  • Right to Correct. Customers may request correction of inaccurate personal information maintained about them.
  • Right of Portability. Customers may receive a copy of personal information held and request transfer to third parties in certain circumstances and with certain exceptions.
  • Right to Opt out of Sale or Sharing for Targeted Advertising. Depending on location, customers may opt out of "sale" or "share" of personal information or opt out of processing for "targeted advertising" purposes. Customers can exercise opt-out rights by contacting us. If a website is visited with Global Privacy Control opt-out preference signal enabled, depending on location, the company will automatically treat this as an opt-out request for the device and browser. If the device can be associated with a Shopify account, the opt-out applies to the account. To learn more, visit https://globalprivacycontrol.org/. The company does not recognize other "Do Not Track" signals from browsers or devices.
  • Managing Communication Preferences. The company may send promotional emails and customers may opt out at any time using unsubscribe options in emails. Non-promotional emails about accounts or orders may still be sent.

If you reside in the UK or European Economic Area, subject to exceptions and limitations provided by local law, customers may exercise the following rights in addition to rights outlined above:

  • Objection to Processing and Restriction of Processing: Customers may ask the company to stop or restrict processing of personal information for certain purposes.
  • Withdrawal of Consent: Where consent is relied upon to process personal information, customers have the right to withdraw this consent. Withdrawal does not affect processing lawfulness before withdrawal.

Customers may exercise these rights where indicated on the Services or by contacting the company using contact details provided below. To learn more about Shopify's use of personal information and available rights, visit https://privacy.shopify.com/en.

The company will not discriminate against customers for exercising these rights. Identity verification may be required before processing requests. Customers may designate authorized agents to make requests on their behalf. Before accepting agent requests, the company will require proof of authorization and may verify identity directly. Requests will be answered within timeframes required by applicable law.

Complaints

Customers with complaints about personal information processing should contact the company using details provided below. Depending on location, customers may appeal the company's decision by contacting the company or lodging complaints with local data protection authorities. For the EEA, a list of responsible data protection supervisory authorities is available here.

International Transfers

Personal information may be transferred, stored and processed outside the country where customers live.

If personal information is transferred out of the European Economic Area or the United Kingdom, the company will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or equivalent contracts issued by relevant UK competent authorities, unless the data transfer is to a country determined to provide adequate protection levels.

Changes to This Privacy Policy

The Privacy Policy may be updated to reflect changes to practices or for operational, legal, or regulatory reasons. Revised versions will be posted on the website, the "Last updated" date will be updated, and notice will be provided as required by applicable law.

Contact

Questions about privacy practices, this Privacy Policy, or to exercise available rights should be directed to:

Phone: 3477578099
Email: info@citadelcloudmanagement.com

For applicable data protection laws purposes, the company is the data controller of personal information.