Last Updated: 04/02/2026
1. Introduction
BrownBear IT (“Company,” “we,” “us,” or “our”) operates https://brownbearit.com (the “Website”) and related services (collectively, the “Services”).
This Privacy Policy & Cookies Policy (“Policy”) describes how we collect, use, process, disclose, and protect Personal Data worldwide. While we operate globally, this Policy is governed by the laws of the State of Tennessee, United States.
By using our Services, you consent to this Policy.
2. Scope of Policy
This Policy applies to:
- Website visitors
- Customers and users
- Prospective users
- Any interactions with our Services
This Policy does NOT apply to third-party services not controlled by us.
3. Definitions
- Personal Data: Any information that identifies or can reasonably be linked to an individual
- Sensitive Personal Information: Data such as financial info, precise location, credentials
- Processing: Collection, storage, use, disclosure, or deletion
- Controller: Entity determining purpose of processing
- Processor: Entity processing data on behalf of controller
- Cookies: Small data files stored on user devices
4. Information We Collect
A. Information You Provide
We may collect:
- Name
- Email address
- Account credentials
- Communications and support requests
- Business information (if applicable)
B. Automatically Collected Data
We collect:
- IP address
- Device identifiers
- Browser type
- Pages visited
- Session data
- Referral sources
C. Cookies and Tracking Data
We collect behavioral data through cookies and similar technologies.
D. Sensitive Data
We do not intentionally collect sensitive personal data unless necessary and voluntarily provided.
5. How We Use Your Information
We process data for:
- Service delivery and functionality
- Account management
- Customer support
- Fraud prevention and security
- Analytics and performance optimization
- Legal compliance
- Marketing (where permitted)
We will not process Personal Data for purposes incompatible with those described.
6. Legal Bases for Processing (GDPR)
If you are located in the EEA, we rely on:
- Consent
- Contractual necessity
- Legal obligations
- Legitimate interests, including:
- Fraud prevention
- Business operations
- Service improvement
7. Sharing and Disclosure
We may disclose Personal Data:
A. Service Providers
Hosting providers, analytics tools, payment processors, and support systems.
B. Legal Requirements
Where required by law, subpoena, or government request.
C. Business Transfers
In mergers, acquisitions, or asset sales.
D. Protection of Rights
To enforce our Terms or protect rights, property, or safety.
We do NOT sell personal data for monetary compensation.
8. Cookies & Tracking Technologies
What Are Cookies
Cookies are small files stored on your device to enhance functionality.
Types of Cookies
- Essential: Required for operation
- Performance/Analytics: Measure usage
- Functional: Enhance experience
- Advertising: Track behavior for marketing
Third-Party Tracking
We may use services such as analytics providers.
Consent
Users in certain jurisdictions will be prompted to accept or manage cookies.
Control Options
- Browser settings
- Opt-out tools
- Cookie banner preferences
9. Your Privacy Rights
A. GDPR Rights
You may:
- Access your data
- Request correction
- Request deletion
- Restrict processing
- Request portability
- Withdraw consent
B. California Rights (CCPA/CPRA)
You have the right to:
- Know what data we collect
- Request deletion
- Correct inaccuracies
- Opt-out of sale/share
- Limit use of sensitive data
- Non-discrimination
To exercise rights:
📧 legal@brownbearit.com
10. Data Retention
We retain data only as long as necessary for:
- Business purposes
- Legal obligations
- Dispute resolution
11. Data Security
We implement commercially reasonable safeguards including:
- Encryption
- Secure hosting
- Access controls
However, no system is completely secure.
12. International Data Transfers
Your data may be processed outside your country.
We implement safeguards such as contractual protections where required.
13. Children’s Privacy (COPPA)
We do not knowingly collect data from children under 13.
If discovered, such data will be deleted.
14. Third-Party Links
We are not responsible for third-party privacy practices.
15. Changes to This Policy
We may update this Policy at any time. Continued use constitutes acceptance.
16. Contact Information
17. Governing Law
This Policy is governed by the laws of the State of Tennessee.
18. Dispute Resolution
All disputes shall be resolved in Tennessee through:
- Binding arbitration, OR
- Courts located in Memphis, Tennessee
19. Limitation of Liability
To the fullest extent permitted by law, we are not liable for indirect or consequential damages.