How we handle your information

What the website collects

You can read every page of this website without telling us who you are.

If you use the contact form or the booking form, we collect what you enter:

• your name, work email and organization
• a phone number, if you choose to give one
• the number of employees and what you are interested in
• your message
• on the booking form, when and how you would like to talk, and the days that suit you

When you send a form, we also record the time, your IP address and the approximate city and region it points to. We use these only to spot spam and abuse.

The form is sent to our team by email. It is not stored in a database. We use it to reply to you, to arrange the conversation you asked for and to keep a record of it. We do not add you to a mailing list.

The forms guard against spam with a hidden field that people never see and a minimum time on the page. They do not use a third-party captcha.

The downtime cost calculator, the backup readiness check and the checklists run entirely in your browser. Nothing you enter in them is sent to us.

Analytics without cookies

We use Cloudflare Web Analytics to count visits. It does not use cookies or similar storage on your device, and it does not track you across other websites. It tells us, in aggregate, which pages are read, which sites sent visitors here, the country, the browser and device type, and how quickly pages load.

This website does not set cookies of its own, and it carries no advertising or social media tracking code.

Logs kept by our host

Cloudflare hosts this website and delivers it through its network. Like any web host, it processes technical data about each request, such as your IP address, browser, the page requested and the time, to deliver pages and protect the site from attacks. Cloudflare handles that data under its own privacy policy.

We use this data only to run, secure and fix the website.

We do not sell your data

We do not sell personal information, and we do not share it for advertising. Because of that, there is nothing to opt out of.

We share personal information only:

• with the providers that host this website, carry our email and keep our accounts, so that they can do that work for us
• when the law requires it, such as under a valid court order
• if Ezbre’s business is sold or merged, with the new owner, who would take on the commitments in this notice

How long we keep website data

We keep form emails while we are talking with you. If the conversation does not lead to work, we delete the email within 24 months of our last contact. If you become a client, it becomes part of your account record.

Cloudflare keeps analytics and request data under its own retention rules. We see analytics only in aggregate.

When we handle client data

When a business signs an order with us, we back up data that belongs to that business: files, mail, databases and whole systems. That data can include personal information about the client’s staff, customers or patients.

For that data, the client is in charge. Ezbre acts as a processor, or service provider, following the client’s instructions under the signed order. We use client data only to provide the service: to copy it, watch the copies, test restores, restore it when asked and support the client. We do not use it for anything else, and we do not sell it.

How we protect it:

• Encryption: AES-256 at rest and TLS in transit. On Server Backup and Immutable Offsite Copy, the client may hold its own encryption key.
• Two US regions: a primary copy, and an immutable copy in a second region at least 500 miles away.
• People: engineers in the US who pass a background check and work under a written confidentiality agreement. Access to client data is logged and requires two-factor sign-in.

How long we keep it: by default, 30 daily, 12 monthly and 7 yearly versions for servers; 90 days of versions for workstations; and 1 year for Microsoft 365 and Google Workspace, extendable to 7 years. Immutable copies are locked for 30 days by default. The signed order can set different periods.

When a client leaves, we hand over a full export of its data in standard formats at no charge. We delete our copies 30 days after the client confirms the export, and confirm the deletion in writing.

We use a small number of providers to store backups, carry email and run billing. Clients can ask for the current list at mail@ezbre.com. If we learn of a security incident that affects a client’s data, we tell the client promptly and as the signed order sets out.

For clinics, we sign a business associate agreement on request, and we will complete any client’s security questionnaire. If someone asks us about their personal information inside a client’s backups, we pass the request to that client and help it respond.

We also keep the contact and billing details of the client staff we work with, to run the account and send invoices. We keep these while the account is open, and afterward for as long as tax and accounting rules require.

Where data is stored

Client backups are stored only in the United States, in two regions at least 500 miles apart. Website enquiries and our business records are kept with providers in the United States.

Cloudflare delivers this website through a global network, so a page request may be handled by a server near you, wherever you are.

Your choices and rights

You can ask us what personal information we hold about you, and ask us to correct it, delete it or send you a copy. Some US state laws give residents these rights. We will act on a request from anyone, unless the law requires us to keep the information, such as invoices.

Email mail@ezbre.com from the address you used with us, or tell us how we can confirm who you are. We reply within one business day to confirm we have your request, and we aim to complete it within 30 days. Asking will not change how we treat you.

If your request is about data inside a client’s backups, such as your employer’s, we pass it to that client, because the client decides what happens to its data.

Children’s information

This website and our services are for businesses. They are not directed at children under 13, and we do not knowingly collect personal information from children through this website. If you think a child has sent us information, email mail@ezbre.com and we will delete it.

Client backups may contain information about children, for example at a clinic. We handle it as the client’s processor, as described above.

Changes to this notice

If we change this notice, we will post the new version on this page with a new effective date. If a change affects how we handle client data, we will email our clients at least 30 days before it takes effect.

How to reach us

Questions about privacy: mail@ezbre.com. Clients with an urgent restore: support@ezbre.com.

By post: Ezbre LLC, 1217 South Greeley Highway, Suite B, Cheyenne, WY 82007.