Privacy Policy

Effective date: September 19, 2026
Last updated: September 19, 2026

This Privacy Policy explains how DataVaultAlliance Holdings LLC (“DataVaultAlliance,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information through the Defensible Analytics Control Specification website at dacs.datavaultalliance.com (the “DACS Site”).

1. Who we are and how to contact us

DACS is an initiative of DataVaultAlliance Holdings LLC. For purposes of applicable data-protection law, DataVaultAlliance Holdings LLC is the organization responsible for the personal information described in this policy.

DataVaultAlliance Holdings LLC
26 Prospect Street
St. Albans, Vermont 05478
United States
Email: danL@datavaultalliance.com

2. Scope of this policy

This policy applies to the DACS Site and to personal information collected through DACS contact forms, update-subscription forms, resource-access forms, and related DACS communications.

The DACS Site may link to DataVaultAlliance.com, DVAUniversity.com, DVAUnited.com, Authorized Training Organizations, event platforms, YouTube, and other third-party sites. Those sites operate under their own privacy notices and terms. DACS does not process course purchases, payments, or public member registrations on this site.

3. Information we collect

Information you provide

Depending on how you interact with the DACS Site, we may collect:

  • your first and last name;
  • your business or personal email address;
  • your organization, job title, or other professional information, when requested;
  • the content of an inquiry or message you send us;
  • your selections and consent choices, including whether you asked to receive DACS updates;
  • the resource or event in which you expressed interest; and
  • other information you choose to include in a form or communication.

Please do not submit sensitive personal information or confidential information through a general website form unless we specifically ask for it and explain why it is needed.

Resource-access and verification information

When a DACS resource is offered through a light access gate, we may collect your name, email address, the requested resource, and records needed to verify and fulfill the request. The resource-access process is separate from marketing consent. Requesting a document does not, by itself, subscribe you to DACS announcements.

Our planned resource-delivery system uses a time-limited verification link and may place a strictly necessary browser cookie after successful verification so that the same browser can access eligible resources again without immediately repeating the form. Related system records may include a request identifier, document identifier, verification and expiration timestamps, and a one-way representation of an email address. Operational download logs are designed not to contain names, email addresses, raw access tokens, IP addresses, user-agent strings, or server file paths.

Information collected automatically

When you visit the DACS Site, our website, hosting, content-delivery, security, and email systems may process limited technical information such as:

  • IP address and approximate location derived from it;
  • browser, device, operating-system, and language information;
  • date and time of access;
  • requested pages, referring page, and technical request information; and
  • security, error, and delivery-log information.

We use Burst Statistics in a cookieless configuration for aggregate website measurement. We do not currently use Google Analytics on the DACS Site. Rank Math supports search-engine optimization and site metadata; it is not used by us to build advertising profiles.

Information from other sources

We may receive information from DataVaultAlliance-operated systems or service providers when needed to complete an action you requested—for example, confirmation that a DACS update subscription is pending, confirmed, or unsubscribed. We may also receive information from a co-host or partner when you have been clearly told about that collection and the applicable notice or consent has been provided.

4. How and why we use personal information

We use personal information to:

  • answer inquiries and continue conversations you initiate;
  • provide, verify, and support access to requested DACS resources;
  • administer webinar or event interest and attendance when offered;
  • send DACS document updates, guidance, event notices, news, or occasional announcements when you have expressly requested them;
  • record and honor consent, unsubscribe, and suppression choices;
  • validate email addresses, reduce abuse, and protect form and email systems;
  • operate, secure, troubleshoot, measure, and improve the DACS Site;
  • maintain records reasonably needed for compliance, dispute resolution, and protection of legal rights; and
  • comply with applicable law and lawful requests.

Where a law requires us to identify a legal basis, our bases may include:

  • Consent: for optional marketing communications and nonessential cookies or similar technologies where consent is required.
  • Your request or steps before a contract: to respond to an inquiry, provide a requested resource, or take an action you ask us to take.
  • Legitimate interests: to operate and secure the DACS Site, prevent abuse, understand aggregate site performance, answer professional inquiries, and improve DACS materials, provided those interests are not overridden by your rights.
  • Legal obligations and legal claims: to comply with law, maintain necessary records, and establish, exercise, or defend legal rights.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

5. Contact inquiries and marketing are separate

If you submit the Contact Us form, you authorize us to use the information you provide to respond to that inquiry and to conduct reasonable follow-up about it. That does not enroll you in newsletters, announcements, or general DACS marketing.

If you separately choose Stay Informed, your request is sent through our workflow to the DACS Updates list in FluentCRM, hosted on DVAUniversity.com. A new subscription generally remains pending until the email address is confirmed through the double-opt-in process. Each marketing email provides an unsubscribe method. We may retain a limited suppression record after an unsubscribe so that we can honor the request and avoid accidentally adding the address back to marketing.

6. How we disclose information

We do not sell personal information. We do not rent or trade contact lists. We do not use personal information for cross-context behavioral advertising.

We may disclose information to service providers and systems that help us operate DACS, subject to appropriate purpose limitations. Depending on the interaction, these may include:

  • Rocket.net, our hosting infrastructure, Cloudflare, and website-security providers;
  • WSForm for DACS forms and form-entry storage;
  • ZeroBounce for email-address validation;
  • Make.com for authorized workflow automation;
  • FluentCRM, hosted on DVAUniversity.com, for DACS update subscriptions, consent status, and campaign records;
  • Mailgun and WP Mail SMTP Pro for email transmission and operational delivery records;
  • Google Workspace for human handling of inquiries and business correspondence;
  • CookieYes for consent-preference management;
  • Burst Statistics for cookieless aggregate site measurement; and
  • professional advisers, regulators, law enforcement, courts, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, and security.

Service providers may process information only to provide their services to us or as otherwise permitted by their agreements and applicable law.

Joint events and partners

We do not provide DACS registrant or lead information to a vendor, consultancy, speaker, or event partner merely because that party participates in a webinar or event. If an event involves sharing attendee information with a named partner for that partner’s own use, we will present a separate, conspicuous disclosure and obtain any consent required before the information is shared. A partner may also collect information directly under its own privacy notice when you choose to register on the partner’s site.

Business and legal events

Information may be disclosed as part of a merger, acquisition, financing, reorganization, sale of assets, or similar business event, subject to applicable confidentiality and notice requirements. We may also disclose information to comply with law or protect the rights, property, or safety of DataVaultAlliance, our users, or others.

7. Cookies and similar technologies

The DACS Site uses cookies and similar technologies that are necessary for site operation, security, consent management, and user-requested functionality. Where optional technologies are used, CookieYes provides controls for applicable preferences.

The planned resource-access system may set a strictly necessary cookie named dacs_verified_access after successful email verification. It is intended to be secure under HTTPS, inaccessible to JavaScript, limited to same-site use, and retained for approximately 30 days. It supports verified resource access and is not used for advertising.

For current details about cookies, their purposes, and available controls, please review our Cookie Policy and use the Consent Preferences control available on the site. Browser settings may also allow you to delete or block cookies, although blocking necessary cookies may prevent some features from working.

8. Retention

We keep personal information only as long as reasonably necessary for the purpose for which it was collected, including legal, security, and recordkeeping needs. Our intended operational periods are:

  • Ordinary contact inquiries: generally up to 90 days in the DACS form system, unless the inquiry becomes part of an active business, support, contractual, compliance, or legal record.
  • DACS update subscriptions: while the subscription remains active. Consent evidence and limited unsubscribe or suppression records may be retained longer as needed to demonstrate and honor the communication choice.
  • Resource-access requests: generally up to 90 days after the request.
  • Operational resource-download logs: generally up to 30 days.
  • Verification cookies: approximately 30 days, unless cleared earlier in the browser.
  • Technical, security, workflow, and email-delivery records: according to configured operational retention periods and for no longer than reasonably necessary for delivery, troubleshooting, security, compliance, or legal claims.

Information may remain temporarily in encrypted or access-controlled backups until those backups rotate out under our backup schedule. We may retain information longer when required by law, when a dispute is pending, or when reasonably necessary to establish, exercise, or defend legal rights.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include access controls, secure transport where supported, limited administrative access, validation and abuse-prevention measures, and purpose-limited system records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International processing

DataVaultAlliance is based in the United States, and our service providers may process information in the United States and other countries. Those countries may have privacy laws different from the laws where you live. Where required, we use appropriate contractual or other recognized safeguards for cross-border transfers.

11. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to:

  • request access to or a copy of personal information we hold about you;
  • request correction of inaccurate information;
  • request deletion of information;
  • object to or restrict certain processing;
  • receive certain information in a portable format;
  • withdraw consent;
  • opt out of marketing communications;
  • opt out of sale, targeted advertising, or certain sharing where applicable; and
  • appeal a decision on a privacy request or complain to an applicable data-protection authority.

We do not sell personal information or use it for targeted advertising as those terms are commonly defined in U.S. state privacy laws. We will not discriminate or retaliate against you for exercising an applicable privacy right.

To make a request, email danL@datavaultalliance.com with the subject line Privacy Request. Please describe the request and the DACS interaction involved. We may need to verify your identity before acting. An authorized agent may submit a request where applicable, but we may require evidence of the agent’s authority and identity verification from the individual. If we deny a request, you may appeal by replying to our decision and stating that you wish to appeal.

You may unsubscribe from DACS marketing using the link included in each marketing email. You may also contact us at the address above. An unsubscribe does not prevent service or transactional messages needed to fulfill a separate request you make.

12. Children

The DACS Site is intended for professionals, organizations, and adult audiences. It is not directed to children, and we do not knowingly collect personal information from children under 16 through the DACS Site. If you believe a child has provided personal information, please contact us so that we can investigate and delete it where appropriate.

13. Changes to this policy

We may update this policy to reflect changes in the DACS Site, our practices, technology, or applicable law. We will post the revised policy here and update the date at the top. If a change materially affects how we use information already collected, we will provide any additional notice or choice required by law.

14. Contact us

Questions, privacy requests, and concerns may be directed to:

DataVaultAlliance Holdings LLC
Attn: DACS Privacy
26 Prospect Street
St. Albans, Vermont 05478
United States
Email: danL@datavaultalliance.com