Privacy Policy

Who we are

Information Requirements ("we", "us") is a Colorado limited liability company based in the United States. Our principal address is 6422 S. Quebec Street, Suite 307, Centennial, CO 80111, US. The person responsible for this website and for questions about personal information is Kariel Bennett, reachable at [email protected] or +1 (212) 555-0137 during Monday to Friday, 9:00 am to 5:00 pm Mountain Time.

We operate https://informationrequirements.us. This policy explains what we collect on this website, why we collect it, who we share it with, how long we keep it, and the choices available to you.

Information we collect

Information you give us. When you email us, telephone us or send the contact form on this site, we receive your name, your email address, any telephone number you include, and the content of your message, including the details of the records you are asking about.

Information collected automatically. As with most websites, our server logs record the IP address a request arrives from, the browser and operating system in use, the pages requested, the date and time of each request and the referring site. Your cookie choice is stored on your own device so that the cookie banner does not repeat itself on every visit.

Information from embedded third-party content. The map on our contact page loads only after you press its button. When you load it, Google receives that request and applies its own privacy policy; we do not receive additional personal information from Google.

Information we do not collect

This website does not take payments, so we never collect card numbers, bank details or billing information. We do not ask you to upload government-issued identification, and we do not collect information revealing racial or ethnic origin, health data, religious or philosophical beliefs, sexual orientation, immigration status or any other sensitive category. If you send us such information uninvited, we delete it when the enquiry closes.

How we use information

• To answer your enquiry and to carry out any records research you ask us for (Records inventory, Custodian identification, Request requirements, Deadline and appeal mapping, Delivery specification).
• To keep an accurate record of what was requested, from which custodian, and what was delivered.
• To improve the structure, wording and accessibility of this website.
• To protect the website against abuse, fraud and unlawful activity.
• To comply with legal and regulatory obligations that apply to us.

Lawful bases for processing

Where you contact us, we rely on your consent and on our legitimate interest in responding to enquiries about our work. Where we carry out research for you, we process the information needed to perform that service for you. Where the law requires us to keep or disclose something, we rely on legal obligation.

Our legitimate interests are running a small research business and keeping this website secure. We have considered your rights and do not believe these interests override them; you may object at any time and we will stop, unless we have a compelling reason to continue.

Cookies and similar technologies

This site stores one strictly necessary item on your device to remember your cookie choice, and nothing further unless you consent. The Cookie Policy lists every cookie and storage key, its purpose and its lifetime, and explains how to change or withdraw your choice.

How we share information

We do not sell personal information and we do not share it for targeted or cross-context behavioural advertising. We share information only with: hosting and email providers who act on our instructions; the public agencies and records custodians that hold the records you ask about, to the extent needed to make or follow up a request on your behalf; and professional advisers or public authorities where disclosure is required by law.

How long we keep information

Enquiry correspondence and research files are kept for 24 months from the last contact between us. Server logs and security data are kept for 12 months. The record of your cookie choice is kept for as long as that choice stands, up to 12 months. At the end of these periods we delete or irreversibly anonymise the data, unless a longer retention is required by law.

Security

Access to enquiry files is limited to the people who need it to do the work. Connections to this website are encrypted, and the hosting environment is kept current with security updates. No method of transmission or storage is completely secure; we apply reasonable administrative, technical and physical measures and review them as our practice changes.

Your privacy rights

Depending on where you live, you may have the right to know what personal information we hold about you, to access it in a portable format, to correct inaccuracies, to delete it, to restrict or object to certain processing, and to opt out of any sale or sharing for targeted advertising (we do neither).

Residents of Colorado hold these rights under the Colorado Privacy Act; residents of California under the CCPA as amended by the CPRA; residents of other US states under their state privacy laws; and residents of the EEA and the United Kingdom under the GDPR. We do not discriminate against anyone who exercises these rights.

How to exercise your rights

Email [email protected] with the subject line "Privacy request", or write to Information Requirements, 6422 S. Quebec Street, Suite 307, Centennial, CO 80111, US, for the attention of Kariel Bennett. We verify your identity using information we already hold before acting on a request, and we respond within 45 days, with one 45-day extension where a request is complex.

If we refuse a request in whole or in part, we explain why and how to appeal. Colorado residents may appeal a refusal to the Colorado Attorney General; EEA and UK residents may complain to their supervisory authority.

Do Not Track and Global Privacy Control

We do not track visitors across websites, so a Do Not Track header does not change how this site behaves. If your browser sends a Global Privacy Control signal, we honour it as a valid opt-out of sale and sharing, of which we do none.

Children

This website is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

Third-party websites and embedded content

The contact page embeds a Google Map only after you choose to load it; this policy does not cover Google's services, and Google's own privacy policy applies to the map. Links to other websites, including government websites, are provided for reference and are governed by their own policies.

International transfers

Our systems are located in the United States. If you contact us from outside the United States, your enquiry information is transferred to and processed in the United States for the purpose of answering you and, where applicable, carrying out the research you requested.

Changes to this policy

We update this policy when our practices change. The date at the top of this page shows the version in force. Material changes are described on this page before they take effect, and earlier versions are kept on file and available on request.

Contact us

For cookie questions see the Cookie Policy; for questions about advertising on this site see the Advertising Policy.