What we collect, and what we don't.

This Privacy Policy covers personal information Avalon Web Services handles through awservices.org and its resource downloads, through the contact and inquiry forms, and through the communications we exchange while scoping or delivering an engagement.

During an active engagement, the customer's Master Services Agreement, Statement of Work, and Data Processing terms govern how we handle data inside that engagement. Where those documents conflict with this policy for engagement data, they control.

Information you give us. When you use the contact form we receive the name, email address, optional company, and the message you send. When you download a resource (such as the M365 Security Hardening Workbook) we receive the email address you provide so we can deliver it. When we work together, we hold the business contact details and correspondence needed to run the engagement.

Information collected automatically. If analytics are enabled, we use a privacy-friendly, cookie-less analytics tool that counts page views in aggregate. It does not set advertising cookies, does not track you across other websites, and does not build a personal profile of you. Our hosting provider keeps standard server logs (such as IP address and request metadata) for security and reliability.

We do not use advertising or cross-site tracking cookies, and we do not buy, sell, or rent personal information.

• To respond to your inquiry and scope potential work.
• To deliver the resource or information you requested.
• To send occasional, related follow-ups — which you can opt out of at any time, with no effect on anything else.
• To operate, secure, and improve awservices.org.
• To meet our legal, tax, and contractual obligations.

We rely on a small, vetted set of service providers to run the site and communicate with you — for example, email delivery, hosting, and analytics. They process data on our behalf, under contract, only for those purposes. The current list is published in our Trust Center.

We may also disclose information where the law requires it, or to protect the rights, safety, and security of Avalon, our customers, or the public. We do not sell personal information.

We keep inquiry and contact information only as long as needed to respond and to maintain a record of the relationship, plus any period required by law. Resource-download and mailing-list details are kept until you unsubscribe or ask us to remove them. Engagement data is retained per the terms of the relevant Statement of Work.

You can ask us to access, correct, export, or delete the personal information we hold about you, and you can unsubscribe from follow-ups at any time. Email sales@awservices.org and we will action verified requests promptly. Depending on where you live, you may have additional rights under your local privacy law; tell us and we will honor them.

We apply reasonable technical and organizational measures to protect personal information, and we hold ourselves to the same posture we help customers reach. You can read more on our Security page. If you believe any data has been exposed, contact security@awservices.org.

Avalon Web Services is based in the United States. If you contact us from outside the US, your information will be processed in the US, which may have different data-protection rules than your home country.

awservices.org and our services are intended for businesses and professionals. The site is not directed to children, and we do not knowingly collect information from anyone under 18.

We may update this policy as our practices or the law evolve. The “last reviewed” date above always reflects the current version, and we will note material changes here.

Questions about this policy or your data? Email sales@awservices.org. For security-specific concerns, use security@awservices.org.