Privacy Policy

Polar Nite respects the privacy and confidentiality of the individuals and organizations whose information we collect, receive, access, process, or maintain.

This Privacy Policy explains how Polar Nite handles information obtained through our website, business operations, technical services, support activities, employment activities, and private business facilities.

Polar Nite currently provides services within the United States.

This Privacy Policy applies to information Polar Nite collects, receives, accesses, maintains, or processes through:

Client-specific contracts, Business Associate Agreements, statements of work, data-processing agreements, and other signed agreements may impose additional or more restrictive privacy, security, retention, or notification requirements.

When a signed agreement imposes stricter requirements than this Privacy Policy, the applicable written agreement will control.

The information Polar Nite handles depends on the person or organization involved and the services being provided.

The Polar Nite website does not currently provide user accounts, accept payments, sell products, or collect personal information through website forms.

Our hosting, security, spam-prevention, and website-service providers may automatically process limited technical information, including:

This information is used to operate, maintain, secure, and troubleshoot the website.

Polar Nite may collect information provided through email, telephone, scheduling services, support communications, meetings, referrals, or business relationships, including:

To provide technical, security, consulting, and administrative services, Polar Nite may receive privileged or administrative access to client systems and information.

Depending on the client and scope of work, this may include access to:

Polar Nite collects or accesses this information only as necessary to provide authorized technical, consulting, administrative, cybersecurity, hosting, monitoring, compliance, recovery, or support services for the applicable client.

Client information is not sold, rented, or used for unrelated purposes.

Systems used to provide managed IT, security, remote administration, and backup services may automatically collect technical information such as:

Polar Nite uses this information to maintain systems, resolve technical issues, detect and investigate security events, administer client environments, support compliance, and protect client operations.

Polar Nite does not use its management tools to collect location data from client vehicles, personal mobile devices, or employees for tracking purposes.

Polar Nite may retain:

Support calls and meetings are not routinely recorded.

Screenshots may be captured as part of normal support, troubleshooting, documentation, security, compliance, or service-continuity activities.

Clients are generally asked to save and close unrelated or sensitive work before remote support begins. Polar Nite makes reasonable efforts to avoid capturing unnecessary sensitive information and may redact or securely remove it when practical.

Individual client employees may access their own support records. Designated managers and approved points of contact may be granted access to broader organizational support records.

Polar Nite does not store complete payment-card or bank-account information.

Payments may be completed through checks, online payment providers, direct ACH transfers, wire transfers, or financial institutions.

The applicable payment provider or financial institution processes the underlying payment information under its own privacy and security practices.

Polar Nite may collect employment and applicant information through email, job platforms, direct communication, screening providers, and employment documentation, including:

Background checks may be performed through an authorized third-party provider when appropriate and subject to applicable authorization and legal requirements.

Sensitive applicant and employee information is maintained separately from general client and operational information. Access is restricted to Polar Nite’s owner or another specifically authorized person when legally or operationally required.

Polar Nite operates a private business facility rather than a public retail location.

Visitors, contractors, delivery personnel, and service providers are admitted only by appointment or authorization and remain accompanied by authorized personnel while inside.

Polar Nite uses physical access-control and security-monitoring systems to protect personnel, equipment, infrastructure, confidential records, and regulated information.

These systems may collect or generate:

Facility monitoring is used only when there is a legitimate security, safety, legal, compliance, investigation, or incident-related reason. It is not used for routine employee performance, attendance, or productivity monitoring.

Access to facility-security information is restricted to authorized personnel. Visitors who do not agree to facility monitoring may decline entry and request an alternative meeting method, such as a telephone or video meeting.

Because Georgia law distinguishes security surveillance from clandestine recording of private conversations, Polar Nite should maintain separate written employee and visitor notices addressing audio and AI-assisted monitoring.

Polar Nite may use information to:

Current communications are limited to necessary technical, consulting, scheduling, billing, security, legal, and service-related purposes.

Polar Nite does not currently conduct routine marketing-email campaigns. Any future marketing email will include an appropriate method for opting out of nonessential marketing communications.

Polar Nite may use artificial-intelligence tools to support planning, infrastructure design, calculations, general research, drafting, analysis, and operational efficiency.

Polar Nite does not knowingly submit confidential client information, credentials, regulated information, financial information, electronic protected health information, or other protected client content to public artificial-intelligence systems.

Generalized or de-identified experience may be used for internal technology, cybersecurity, or compliance training when the underlying client information is not exposed or disclosed.

AI-assisted analytics may also be used within authorized security and monitoring systems for threat detection, identity protection, physical security, and incident investigation.

Polar Nite maintains documented client owners, approved managers, points of contact, and assigned authority levels.

Sensitive actions must be authorized by a documented client owner or approved manager. Such actions may include:

Polar Nite generally requires both:

This process is designed to reduce the risk of phishing, impersonation, fraudulent requests, unauthorized access, and account compromise.

Access to client information is limited to authorized Polar Nite employees who need the information to perform their assigned duties.

Polar Nite maintains safeguards that may include:

Employees receive confidentiality, cybersecurity, and privacy training before being granted access to client systems or information.

Employees are also required to sign confidentiality or nondisclosure agreements.

Relevant administrative and security activity is reviewed regularly, including periodic monthly review where appropriate.

Polar Nite uses approved technology, hosting, security, cloud, documentation, credential-management, monitoring, support, payment, employment, and infrastructure providers to operate its business and deliver services.

These providers may store or process information only as necessary to provide authorized services to Polar Nite or its clients.

Polar Nite evaluates providers based on applicable:

Use of a service provider does not authorize that provider to use Polar Nite or client information for unrelated purposes.

Polar Nite does not provide client information to subcontractors, vendors, or outside parties without the client’s written authorization, except where disclosure is legally required.

When a client authorizes outside access, Polar Nite may require the approved party to complete appropriate:

Polar Nite may limit, delay, or refuse access when the requested arrangement does not satisfy applicable security, authorization, contractual, or compliance requirements.

When Polar Nite provides services involving electronic protected health information and acts as a business associate, Polar Nite enters into a Business Associate Agreement when required.

The applicable Business Associate Agreement governs the permitted uses, disclosures, safeguards, reporting obligations, retention requirements, and disposition of protected health information.

HHS provides model Business Associate Agreement provisions addressing authorized uses, safeguards, breach reporting, subcontractor obligations, and handling of protected health information.

Polar Nite maintains administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, loss, destruction, or disclosure.

These safeguards may include:

The FTC advises businesses that collect sensitive information to maintain appropriate security, restrict access, keep privacy promises accurate, and dispose of information securely when required.

No storage, transmission, monitoring, or security method can guarantee absolute protection. Polar Nite therefore uses layered safeguards based on the type, sensitivity, location, and purpose of the information involved.

References to HIPAA, the FTC Safeguards Rule, NIST guidance, or other frameworks describe requirements or practices that may inform Polar Nite’s security program. They do not represent third-party certification unless expressly stated in writing.

Polar Nite generally retains business, client, technical, support, compliance, applicant, and employment records for a minimum of seven years.

Information may be retained longer when reasonably necessary for:

Polar Nite does not routinely delete information solely because a client relationship has ended.

Active passwords and administrative credentials are treated differently from general business and technical records.

Credentials are retained only while needed to provide authorized services. They should be changed, transferred, disabled, or removed when:

Facility security recordings and related security-event information are generally retained for approximately four to six months.

They may be retained longer when needed for:

Applicant information is generally retained for at least seven years and may be retained longer because Polar Nite reviews previous applicants when future positions become available.

Former applicants may request deletion, subject to applicable legal, compliance, litigation-hold, retention, or active hiring requirements.

Polar Nite may retain anonymized or aggregated information indefinitely when it no longer identifies a specific person or client.

Polar Nite does not routinely delete records that remain subject to retention, legal, contractual, operational, security, or compliance requirements.

When deletion or destruction is required by law, contract, approved request, retention expiration, or documented operational need, Polar Nite uses methods appropriate to the media type and sensitivity of the information.

These methods may include:

Media that cannot be reliably sanitized may be physically destroyed.

Polar Nite documents completed media destruction, including the applicable device or media, date, method, and person who performed or verified the destruction.

Current NIST guidance recommends maintaining a media-sanitization program and selecting sanitization or destruction methods according to the media type and sensitivity of the information.

Polar Nite may prepare client-specific technical, security, compliance, infrastructure, or service reports.

Client-specific reports are provided only to an authorized client owner, manager, or approved point of contact.

Polar Nite may also create anonymized or aggregated internal reports regarding service trends, device status, security events, technical patterns, or compliance findings, provided the information does not identify a specific client or individual.

Generalized and de-identified service experience may be used for internal technology, cybersecurity, compliance, and employee training without exposing the underlying client data.

Polar Nite maintains an incident-response and breach-notification process.

When required, Polar Nite will notify affected clients according to applicable:

Polar Nite follows any notification timeframe imposed by the applicable obligation.

Relevant records may be preserved beyond normal retention periods when needed for an investigation, legal hold, audit, insurance matter, security incident, or litigation.

Polar Nite does not voluntarily disclose client information or facility-security records to outside parties without authorization.

Information may be disclosed when Polar Nite is legally required to respond to:

Polar Nite will seek to limit any disclosure to the information legally required.

Individuals and authorized client representatives may request access to, correction of, or deletion of applicable information by contacting:

Polar Nite may require verification of the requester’s identity and authority before acting on a request.

Polar Nite may deny or limit a request when retaining, restricting, or protecting the information is necessary for:

Polar Nite’s website and services are intended for businesses and adults.

Polar Nite does not knowingly direct its website or business services to children under 13 or knowingly collect personal information from children through its website.

The Polar Nite website may contain links to external scheduling, mapping, social-media, and other third-party services.

Those services are governed by their own privacy policies and terms.

Polar Nite is not responsible for the content, security, availability, data handling, or privacy practices of third-party websites and services.

Polar Nite reviews this Privacy Policy at least annually and may update it sooner when its business practices, technology, services, risks, or legal requirements change.

Revised versions will be posted with an updated effective date.

Questions, privacy requests, or concerns may be submitted to:

Polar Nite
8744 Main St., Suite 401
Woodstock, GA 30188

Email: support@polarnite.com