Last Updated: September 8, 2026 Effective Date: September 8, 2026
This Privacy Policy replaces and supersedes all prior versions, including the version dated January 1, 2023.
1. Scope of This Policy
Stratos K9, (“Stratos K9,” “we,” “us,” “our”) provides canine detection, screening, and related security consulting services. This Privacy Policy describes how we collect, use, disclose, and retain personal information in connection with www.stratosk9.com and any related media form, media channel, mobile website, or mobile application (collectively, the “Site”), and in connection with our marketing, sales, and business development activities.
This Policy covers:
- information collected through the Site, including through contact and inquiry forms;
- information collected automatically through cookies, analytics, and website-visitor identification technologies;
- business contact information we obtain from third-party data providers, public sources, and referrals, and our use of that information to contact you about our services;
- information collected when you communicate with us by email, telephone, or text message.
This Policy does not cover:
- personal information we process on behalf of a client under a written services agreement or data processing agreement. When we perform services for a client, the client generally determines the purposes and means of that processing, the client’s own privacy notice governs, and we act as a service provider or processor. Direct such requests to the client;
- information about our employees, contractors, and job applicants, which is addressed in a separate notice available on request;
- third-party websites, platforms, or services, which have their own privacy practices.
By using the Site, you acknowledge this Policy. Where applicable law requires consent for a specific processing activity, we rely on consent obtained in accordance with that law rather than on your use of the Site.
2. Who Is Responsible for Your Information
Stratos K9, is the entity responsible for the personal information described in this Policy.
Stratos K9 operates alongside affiliated brands, which may include Stratoscope Holdings, Ingressotek, and Stratos Executive Protection. Each entity is separately organized and separately contracts for its own services. Each entity is separately responsible for the personal information it controls. We may share information among these entities as described in Section 9 to respond to inquiries, coordinate services, and administer shared business systems. If you contact one entity, we may route your inquiry to the affiliate best able to respond.
3. Personal Information We Collect
We collect the categories of personal information listed below. We use the category names from the California Consumer Privacy Act, as amended (“CCPA”), so the disclosure is comparable across jurisdictions.
| Category | Specific information | Do we collect it? |
|---|---|---|
| Identifiers | Name, business and personal email address, telephone number, mailing or business address, employer, job title, IP address, unique device or online identifier, cookie identifier | Yes |
| Customer records | Business contact and billing details, signatory information, contract records | Yes, for clients and prospects |
| Commercial information | Services inquired about or purchased, engagement history, proposals, records of communications with us | Yes |
| Internet or network activity | Browsing and interaction data on the Site, pages viewed, time on page, referring and exit URLs, search terms used to reach the Site, clicks, scroll depth, browser type and version, operating system, device type, screen size, language, session date and time | Yes |
| Geolocation data | Approximate location (city, region, country) inferred from IP address. We do not collect precise geolocation from the Site. | Yes, approximate only |
| Audio and electronic information | Recordings or notes of telephone calls with us; email and message content you send us | Yes, where applicable |
| Professional or employment information | Employer, industry, role, seniority, department, company size, revenue band, technologies used, and similar business attributes obtained from data providers | Yes |
| Inferences | Lead scores, likely interest in specific services, seniority or buying-role inferences drawn from the above | Yes |
| Sensitive personal information | Government identifiers, financial account numbers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health information, genetic or biometric data, sexual orientation, contents of private communications | We do not seek or intentionally collect sensitive personal information through the Site. See Section 8. |
| Education information | Records subject to FERPA | No, except as described in Section 11 where applicable |
We do not use or disclose sensitive personal information for any purpose requiring a “limit the use of my sensitive personal information” mechanism under the CCPA. If sensitive information reaches us unsolicited, we delete it or restrict it to the purpose of responding to your communication.
4. Where the Information Comes From
a. Directly from you. When you complete a contact, inquiry, quote-request, subscription, or download form; email, call, or text us; meet with us; or provide information during an engagement or at an event or trade show.
b. Automatically from your device. Through cookies, pixels, tags, software development kits, server logs, and similar technologies, as described in Section 6.
c. From third-party data providers and website-visitor identification services. We use business-to-business sales intelligence, contact enrichment, and website-visitor identification services — including services of the type provided by Apollo.io and Leadfeeder/Dealfront, and similar vendors — which:
- identify the company associated with a visitor’s IP address and report the pages that visitor viewed;
- supply business contact records, including names, work email addresses, direct-dial and mobile telephone numbers, job titles, and employer information, drawn from those vendors’ own databases;
- enrich or verify information you have already given us.
This means we may hold your name, work email address, and telephone number even if you never gave them to us. Those vendors collect that information from sources including public web pages, professional networking profiles, corporate websites, business registries, public records, event and conference materials, permission-based contributor networks, and commercially available data files. Their collection practices are governed by their own privacy notices, not this one. Section 15 explains how to ask us to delete your information or to stop contacting you.
d. From public and commercial sources. Company websites, press releases, regulatory filings, licensing and registration databases, court and property records, news reports, and professional directories.
e. From referrals and shared contacts. From existing clients, business partners, brokers, insurers, counsel, and industry contacts who refer you or provide your contact information. If you would prefer we not retain a referral, tell us and we will delete it.
f. From our clients. Where a client provides information about its personnel, tenants, guests, vendors, or others in connection with an engagement. See Section 1 regarding processing on behalf of clients.
5. How and Why We Use Personal Information
We use personal information for the following purposes. We do not use your personal information for any purpose materially different from those listed here without first providing notice and, where required, obtaining consent.
| Purpose | Examples |
|---|---|
| Respond to inquiries | Reviewing and answering form submissions, emails, and calls; scoping a possible engagement; sending requested materials |
| Provide and administer services | Delivering contracted services, project communications, scheduling, reporting, invoicing, and collections |
| Marketing, sales, and business development | Sending newsletters, service updates, capability information, event invitations, and offers; outbound sales contact by email, telephone, and text; developing and prioritizing leads; measuring campaign performance |
| Site operation, analytics, and improvement | Understanding traffic and content performance; diagnosing errors; testing and improving pages, forms, and navigation |
| Personalization | Tailoring content, follow-up, and proposals to your apparent industry, role, and interests |
| Market and industry research | Aggregate analysis of demand, sector trends, and buyer roles; surveys, where you choose to participate |
| Security and fraud prevention | Detecting and preventing abuse, scraping, spam, credential misuse, intrusion, and misuse of the Site; protecting our personnel, clients, and systems |
| Legal, licensing, and compliance | Meeting recordkeeping, licensing, insurance, tax, export control, sanctions screening, and other legal obligations; responding to lawful requests; establishing, exercising, or defending legal claims |
| Corporate transactions | Evaluating or completing a merger, financing, acquisition, reorganization, or sale of assets |
Legal bases (where the EU or UK GDPR applies). Where the GDPR applies to our processing, we rely on: our legitimate interests in operating and marketing a business-to-business services firm and in securing our systems; the necessity of processing to enter into or perform a contract with you; compliance with a legal obligation; and, where required for marketing or non-essential cookies, your consent, which you may withdraw at any time.
Automated decision-making. We do not make decisions producing legal or similarly significant effects about you by solely automated means. Lead scoring is used only to prioritize human outreach.
6. Cookies, Analytics, and Tracking Technologies
We and our service providers use cookies, pixels, tags, web beacons, local storage, and server logs on the Site. Categories in use:
- Strictly necessary. Required for the Site to function, including security, load balancing, form submission, and preserving your cookie choices. These cannot be disabled through our consent tool.
- Analytics and performance. Measure traffic volume, page performance, content engagement, and form completion. Includes Google Analytics 4.
- Website-visitor identification and lead generation. Identify the organization associated with a visitor and record the pages viewed, for business development purposes. Includes Leadfeeder/Dealfront tracking script, Apollo website visitor tracking.
- Advertising and retargeting. We use advertising and retargeting technologies from time to time, including the Meta Pixel (Facebook and Instagram) and Google Ads conversion and remarketing tags. These technologies set cookies or similar identifiers and transmit information about your visit — including your IP address, the pages you viewed, actions such as form submissions, and identifiers the platform may match to an existing account — to the advertising platform, so that we can measure campaign performance and show our advertising to you or to similar audiences on that platform and elsewhere. These technologies are not active at all times. We enable them during specific advertising campaigns and disable them between campaigns. When they are active, the resulting disclosures constitute a “sale” or “sharing for cross-context behavioral advertising” as described in Section 9, and you may opt out at any time using the methods in that section. Information already transmitted to an advertising platform is subject to that platform’s own privacy policy and controls, which we do not control. Meta’s practices are described at facebook.com/privacy/policy, and you can adjust ad settings in your Meta account.
- Session recording or replay. We do not use session recording, session replay, or keystroke capture.
Managing cookies. You can set your browser to refuse some or all cookies or to alert you when a cookie is set. Some parts of the Site may not work if you block cookies. Use the ‘Cookie Preferences’ link in the Site footer at any time.
Opt-out preference signals. We honor the Global Privacy Control and similar browser- or device-level opt-out preference signals as a request to opt out of the sale or sharing of personal information for the browser or device transmitting the signal, to the extent required by applicable law. Because such signals are browser- and device-specific, you will need to enable them on each browser and device you use.
Do Not Track. Browsers may offer a “Do Not Track” setting. There is no common industry standard for responding to it, and we do not currently respond to Do Not Track signals. We do respond to opt-out preference signals as described above.
Third-party analytics providers. Analytics providers may set their own cookies and may use the information they collect for their own purposes as permitted by their agreements with us and their own notices.
7. Email, Text, and Call Communications
a. Email tracking. Our marketing and sales emails may contain tracking pixels or coded links that tell us whether a message was opened, when, from what approximate location and device, and which links were clicked. We use this to gauge interest and to time follow-up. To prevent it, configure your email client to block remote images, or unsubscribe.
b. Marketing email. You may unsubscribe at any time using the link in any marketing message or by emailing privacy@stratosk9.com. We honor opt-outs within the period required by the CAN-SPAM Act and will act promptly in any event. We may continue to send transactional and relationship messages about an active engagement, a proposal you requested, or a legal or contractual matter.
c. Telephone calls and text messages. If you provide a telephone number, you consent to be contacted at that number about your inquiry and our services, including by autodialed or prerecorded call and by SMS at a mobile number, as described in our Terms & Conditions. Consent to marketing calls or texts is not a condition of receiving any service. Reply STOP to any text to stop texts; tell any caller to place you on our internal do-not-call list, or email privacy@stratosk9.com with “DO NOT CALL” in the subject line. Message and data rates may apply; message frequency varies.
d. Call recording and monitoring. Calls with us may be monitored or recorded for quality, training, accuracy, security, and recordkeeping. Because several states, including Florida, require the consent of all parties to a recording, we will notify you at the start of a recorded call. If you do not consent, say so and we will stop recording or end the call.
e. Mobile carrier data. We do not sell or share your telephone number, or your consent to be contacted, with third parties for their own marketing purposes.
8. Do Not Send Us Sensitive or Confidential Information
Site forms and ordinary email are not secure or confidential channels. Do not submit through them:
- Social Security numbers, driver’s license, passport, or other government identifiers;
- payment card, bank account, or other financial account numbers;
- health, medical, disability, genetic, or biometric information;
- security plans, vulnerability or threat assessments, protective details, travel itineraries, or residence information;
- export-controlled, classified, or otherwise restricted technical data;
- login credentials or passwords;
- information about identifiable third parties who have not authorized the disclosure;
- anything covered by legal privilege or an existing confidentiality obligation.
Information submitted through the Site is not protected by any privilege or duty of confidentiality unless a signed confidentiality or non-disclosure agreement is already in effect and expressly covers it. If you need to send sensitive material, contact us first at 754.247.6824 and we will arrange a secure method. Unsolicited sensitive information may be deleted without review.
9. When We Disclose Personal Information
We disclose personal information in the following circumstances. We disclose it only for the business purposes described in Section 5.
a. Service providers and processors, which act on our behalf under contract and are prohibited from using the information for their own purposes: website hosting and content delivery; email, calendaring, and file storage; customer relationship management and marketing automation; sales intelligence, contact enrichment, and visitor identification; analytics; telephony, call recording, and text messaging; e-signature; accounting, billing, and payment processing; IT support and security services; insurance and claims administration.
b. Affiliated entities, as described in Section 2.
c. Professional advisers, including our attorneys, accountants, auditors, insurers, and insurance brokers, where reasonably necessary.
d. Subcontractors and partner firms engaged to perform or support services, subject to confidentiality obligations.
e. Clients, where the information relates to services we perform for that client.
f. Legal and safety disclosures. To comply with applicable law, subpoena, warrant, court order, licensing or regulatory requirement, or other lawful request; to establish, exercise, or defend legal claims; to enforce our Terms & Conditions; to detect, prevent, or address fraud, security, or technical issues; or where we reasonably believe disclosure is necessary to prevent imminent physical harm or serious injury to any person.
g. Corporate transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, information may be disclosed to counterparties and their advisers under confidentiality obligations, and may be transferred to a successor.
h. With your direction or consent, including when you ask us to introduce you to a partner or vendor.
Sale and sharing. We do not sell personal information for money. However, when the advertising and retargeting technologies described in Section 6 are active, our disclosure of identifiers, internet activity, and inferences to advertising platforms meets the broad definitions of a “sale” and of “sharing for cross-context behavioral advertising” under the CCPA, and of “targeted advertising” under other state privacy laws. We treat those disclosures accordingly.
10. How Long We Keep Information
We keep personal information only as long as necessary for the purposes described in this Policy, or as required by law, and then delete it or de-identify it. Our general practice:
| Information | Retention |
|---|---|
| Contact form and inquiry records | Up to 24 months from last contact, unless an engagement results |
| Marketing contact records and lead data | Until you opt out or ask for deletion, or up to 24 months without engagement, whichever is first |
| Suppression and do-not-contact records | Indefinitely, in minimized form, so we can honor your opt-out |
| Client engagement records, contracts, reports, and deliverables | Term of engagement plus 7 years, or longer where required by licensing, insurance, tax, or statute-of-limitations considerations |
| Call recordings | 12 months, unless retained for a specific legal or contractual reason |
| Web server logs and analytics data | 14 months for analytics; 12 months for raw logs |
| Accounting, tax, and payment records | 7 years, or as required by law |
| Records subject to legal hold | Until the hold is released |
Bracketed periods must be confirmed against your actual systems, licensing obligations, insurance requirements, and record retention schedule before publication.
11. Information Security and Breach Notification
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and loss. These include access controls and least-privilege permissions, multi-factor authentication for business systems, encryption of data in transit and, where applicable, at rest, vendor due diligence and contractual data protection commitments, personnel confidentiality obligations and training, and logging and monitoring.
No method of transmission over the internet or of electronic storage is completely secure. While we use reasonable measures appropriate to the nature of the information we hold, we cannot and do not guarantee the absolute security of personal information. You are responsible for protecting the credentials and devices you use to communicate with us.
If a breach of security affecting personal information occurs, we will investigate and provide notice to affected individuals and to regulators to the extent and within the timeframes required by applicable law, including section 501.171, Florida Statutes, and comparable state breach notification laws.
12. Canine Detection Deployments — Additional Information Practices
a. The client controls deployment data. Where a client engages canine screening of premises, vehicles, containers, lockers, or property, the client — not Stratos K9 — determines who and what is screened, on what legal authority, what notice is given, and how the results are used. The client is the controller of that data. We act as a service provider under a written agreement and process deployment information only to perform and document the engagement.
b. What a deployment record may contain. Deployment records, logs, and reports may include the date, time, and location of the search, the area or items searched, the canine and handler identity, any alert or indication and where it occurred, items located, persons present, the client representative directing the search, and photographs of the search area or located items. Records may name or describe identifiable individuals — for example, the occupant of a searched vehicle, locker, or room.
c. Sensitive context. Because an alert can be interpreted as an accusation, we handle deployment records as confidential, restrict access to personnel with a need to know, disclose them only to the client representatives the client designates or as required by law or legal process, and do not publish, market with, or otherwise reuse them. A canine alert is an investigative indication only and is not a determination that any substance was present or that any person did anything, as our Terms & Conditions explain.
d. School and educational settings. Where we perform work at an educational institution, deployment records may relate to students. Where a record constitutes an education record under the Family Educational Rights and Privacy Act, we handle it as a “school official” or contractor performing an institutional service under the institution’s direct control, use it only for the engagement, do not re-disclose it without authorization, and return or destroy it as the institution directs. Student and parent requests for access should be directed to the institution, which is the responsible party under FERPA. Applicable state student-privacy laws are addressed in our written agreement with the institution.
e. Employment and tenancy settings. Where a deployment occurs in a workplace or residential property, records may relate to employees, applicants, tenants, or guests. The client is responsible for compliance with applicable employment, labor, collective bargaining, and landlord-tenant requirements, including any notice, consent, or bargaining obligation, and for any use it makes of the results in a personnel or tenancy action. We do not make personnel, tenancy, or disciplinary determinations.
f. Do not send us deployment or incident information through the Site. Do not describe suspected individuals, incidents, contraband, or suspected criminal conduct in a Site form or unencrypted email. Such submissions are not confidential and may create risk for you and for the persons described. Call us instead.
g. De-identified and aggregate information. We may use de-identified and aggregated data — such as searches performed, area covered, and alert rates — for training, quality assurance, and general capability materials, where no individual, location, or client is identifiable.
13. Your Privacy Rights
Applicability. Comprehensive state privacy laws apply to businesses that meet specific revenue and data-volume thresholds, and each contains exemptions. Where a law applies, we honor its rights as written. Where it does not, we honor the requests below as a matter of practice, subject to our legal, contractual, licensing, and record keeping obligations.
Depending on where you live and which law applies, you may have the right to:
- Know and access — the categories and specific pieces of personal information we hold about you, the sources, our purposes, and the categories of recipients;
- Correct inaccurate personal information;
- Delete personal information we hold about you, subject to exceptions;
- Obtain a portable copy of information you provided to us;
- Opt out of the sale of personal information, of sharing for cross-context behavioral advertising, and of targeted advertising and profiling in furtherance of decisions producing legal or similarly significant effects;
- Limit the use and disclosure of sensitive personal information (see Section 3);
- Withdraw consent where processing is based on consent;
- Not be discriminated or retaliated against for exercising these rights. We will not deny you services, charge you a different price, or provide a different level of quality because you exercised a privacy right;
- Appeal a denial of your request, where the applicable state law provides an appeal right. We will respond to an appeal within the period that law requires and, if the appeal is denied, will tell you how to contact the relevant Attorney General.
How to submit a request. Email privacy@stratosk9.com with the subject line “Privacy Request,” or write to us at the address in Section 19, or call 754.247.6824. Tell us what right you are exercising and which email addresses, telephone numbers, or names we should search.
Verification. We will take reasonable steps to verify your identity before acting, generally by confirming control of the email address or telephone number in our records, and may ask for additional information for a request involving specific pieces of personal information. We use verification information only for that purpose.
Authorized agents. An authorized agent may submit a request on your behalf with written, signed permission or a valid power of attorney. We may contact you to confirm the authorization.
Timing. We will acknowledge a request within 10 business days and respond within 45 days, and may extend by an additional 45 days with notice. Requests to opt out or to stop marketing are honored within 15 business days or sooner.
Fees. We do not charge a fee for a reasonable request. We may charge a reasonable fee, or decline, for a manifestly unfounded, repetitive, or excessive request, and will tell you why first.
If you are in the EEA or UK. Where the GDPR applies, you may also object to processing based on legitimate interests, request restriction of processing, and lodge a complaint with your supervisory authority. Please contact us first so we can try to resolve the matter.
14. Notice to Business Contacts — Why You May Be Hearing From Us
If you received an email, call, or text from us and never contacted us, it is because we obtained your business contact information from one of the sources described in Section 4, most likely a business contact data provider, a referral, a public source, or a visit to our Site that our visitor-identification service associated with your organization.
You may stop it immediately. Email privacy@stratosk9.com with “DO NOT CONTACT” in the subject line and we will add you to our suppression list, delete your record from our marketing systems, and retain only the minimum information needed to make sure we do not contact you again. You do not need to explain why, and doing so has no effect on any business relationship.
If you want to know where a specific record came from, ask and we will tell you which vendor or source supplied it, so you can also contact that vendor directly.
15. Children’s Information
The Site is intended for business users 18 years of age or older. We do not knowingly collect personal information from children, we do not direct the Site or any marketing to children, and we do not sell or share the personal information of any consumer we know to be under 16 years of age. If we learn that we hold personal information from a child under 13 without verifiable parental consent, we will delete it as promptly as reasonably practicable, consistent with the Children’s Online Privacy Protection Act. A parent or guardian who believes we hold information about a child may contact privacy@stratosk9.com.
16. Third-Party Websites and Links
The Site contains links to third-party websites, platforms, and resources. We do not control those sites and are not responsible for their content, security, or privacy practices. This Policy does not apply to them. Review the privacy notice of any site you visit from ours before providing information.
17. International Users and Data Transfers
The Site is operated and hosted in the United States, and our service providers are located primarily in the United States. If you access the Site or communicate with us from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction. Where required, we use appropriate safeguards for such transfers, including standard contractual clauses. By using the Site or contacting us, you understand that this transfer will occur.
The Site and our services are not directed to, and are not offered to, persons in jurisdictions where doing so would be unlawful or would subject us to registration requirements.
18. Changes to This Policy
We may update this Policy from time to time. When we do, we will revise the “Last Updated” date above and post the revised Policy on the Site. If we make a material change — including a change to the categories of personal information we collect, the purposes for which we use it, or the categories of parties to whom we disclose it — we will provide prominent notice on the Site and, where we have your email address and the change materially affects your rights, notify you by email before the change takes effect where practicable. We will obtain your consent for a material change where applicable law requires it. Changes are not applied retroactively to information already collected in a way that conflicts with the notice under which it was collected.
We maintain prior versions of this Policy and will provide a copy on request.
19. Accessibility and How to Reach Us
If you need this Policy in an alternative accessible format, contact us and we will provide one at no charge.
Privacy requests and questions: privacy@stratosk9.com
Mailing address: Stratos K9, Attn: Privacy 515 N Flagler Dr, Suite P-300 West Palm Beach, FL 33401
Telephone: 754.247.6824 General inquiries: info@stratosk9.com Website: https://stratosk9.com