Effective April 18, 2026
Colossus Technologies Group, LLC ("Colossus," "we," "us") respects the privacy of visitors to our website and the individuals whose information we handle. This Privacy Policy explains what information we collect through colossustg.com (the "Site"), how we use it, who we share it with, and the choices you have.
This Policy covers data collected through the Site only. Information we handle inside active client engagements is governed by the applicable engagement contract, not by this Policy.
When you fill out a form on the Site, email us, or submit a résumé, you share information with us. That may include:
Our hosting provider (Netlify) collects standard server-log information including IP address, user-agent, referring URL, and access timestamp. If we later add web analytics, we will update this Policy to describe what is collected.
Cookies.The Site does not currently set advertising or third-party tracking cookies. Netlify may set essential functional cookies required to deliver the Site. We will update this Policy before adding any additional tracking technology.
We use the information you provide to:
We do not sell personal information. We do not use information submitted through the Site for unsolicited marketing outside the scope of the conversation you initiated.
We use third-party services including Netlify (hosting and form processing) and Google Workspace (email and storage). These providers process information on our behalf under contractual obligations and are not permitted to use it for their own purposes.
Clients — candidate résumés only.For candidate résumés, we share your information with a prospective employer only with your explicit approval of that specific opportunity. Your résumé will never be submitted to a client without your authorization.
Legal requirements.We may disclose information when legally required — for example, in response to a valid subpoena, court order, or regulatory inquiry.
Business transfers.In the event of a merger, acquisition, or sale of assets, information may be transferred as part of the transaction. You will be notified of any material change to how information is handled.
We retain contact-form submissions for as long as commercially reasonable to support ongoing business development and client service, and thereafter as required by applicable law.
Candidate résumés are retained for up to 24 months from the date of submission unless you request earlier deletion. We retain a record of candidate-communication history for reference-check and relationship-continuity purposes.
We apply commercially reasonable administrative, technical, and physical safeguards to protect the information we hold. No system is perfectly secure — if we become aware of a breach that requires notification under applicable law, we will notify affected individuals and regulators consistent with those requirements.
You may request access to the personal information we hold about you, correction of inaccurate information, or deletion of your information. Contact us at privacy@colossustg.com. We will respond within 30 days.
California residents.Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA.
EU / UK residents.If the GDPR or UK GDPR applies to the processing of your personal information, you have additional rights including data portability and the right to object to certain processing. You may also lodge a complaint with your supervisory authority.
Massachusetts residents.We maintain a written information security program consistent with the requirements of Massachusetts 201 CMR 17.00.
The Site is not directed at children under 16. We do not knowingly collect personal information from children.
Colossus is a United States–based company. Information you submit through the Site is processed and stored in the United States. Where transfers from the EU, UK, or other jurisdictions occur, we rely on appropriate legal mechanisms such as Standard Contractual Clauses.
We may update this Policy from time to time. The "Effective" date at the top will reflect the most recent revision. Material changes will be highlighted on the Site.
For privacy questions or to exercise your rights:
Colossus Technologies Group, LLC
75 Arlington Street, Suite 500
Boston, MA 02116
privacy@colossustg.com
Privacy is a practice we're paid to build for clients. We apply it to ourselves, too.
Email the privacy team