Effective date: October 6, 2026
This Privacy Policy explains how Atlantic Computer Systems collects, uses, shares and protects personal information when you visit acscyber.net, book a consultation through it, or call the number published on it.
We have tried to write it in plain English. If anything is unclear, call us at 1-650-300-7557.
Who we are
Atlantic Computer Systems (“ACS”, “we”, “us” or “our”) operates acscyber.net (the “site”). ACS Cyber is the managed security services provider (MSSP) and cybersecurity division of Atlantic Computer Systems, with an in-house 24/7 SOC.
We are headquartered in San Jose, California, with an office hub in Boston, and we support organizations nationwide. Atlantic Computer Systems is responsible for the personal information described in this policy.
What this policy covers
This policy covers the site and the analytics, scheduling and communication tools connected to it.
It does not cover information we process while delivering cybersecurity or IT services to a client. That information is governed by the written agreement with that client. Atlantic Computer Systems also operates atlanticcomputersystems.com, which has its own privacy policy.
Information we collect
We collect information in the four ways described below. There are no web forms on this site, so we do not collect information through contact or incident forms.
When you browse the site
When you visit, the site and the analytics tools it uses collect technical and usage information automatically:
- Google Analytics, loaded through the Google tag, records the pages you view, how you arrived (for example, the referring website or campaign), your device and browser type, and your approximate location derived from your IP address. It uses cookies such as
_gaand_ga_*. - HubSpot analytics and marketing cookies (
__hstc,hubspotutk,__hsscand__hssrc) record visits and page views so we can understand which content is useful, unless you opt out. If you later become a contact in our CRM, for example by booking a consultation, HubSpot may associate your earlier visits to this site with your contact record. - Attribution details are kept in your own browser’s local and session storage rather than in cookies. They record the source of your first and most recent visit (such as the referring website, campaign or search engine, and an advertising click identifier if you arrived from an ad), the page you first landed on and when, and a random visitor identifier. If you book a consultation, these details are added to your booking request so we know which page helped you.
We do not send your name, email address, phone number or booking answers to Google Analytics. Your booking details go only to Calendly and the tools described under “When you book a consultation” below.
The site also keeps simple counts of actions, such as opening the scheduler, completing a booking or selecting the phone number, grouped by page, button placement and traffic source. These counts contain no names or contact details. To prevent abuse, a one-way scrambled form of the sending IP address is held briefly while the counts are recorded.
When you book a consultation
Our free 30-minute consultation is booked through Calendly, a scheduling service embedded on our pages. Calendly’s code loads only when you reach for a booking button (point at, focus or tap it) or scroll to the scheduler on our contact page. When you book, Calendly collects the information you enter:
- Your name and email address
- Your company name and company size
- Your phone number
- The main IT or cybersecurity challenge you describe
- Your current IT support
- Any notes you choose to add
- The “How you found us” field, which the site fills in automatically with the page and button you booked from, your first and most recent visit sources and your random visitor identifier
Calendly shares booking details with our CRM (HubSpot) and with our calendar and meeting tools (Microsoft 365 and Microsoft Teams) so we can confirm, hold and follow up on your consultation.
The same scheduler also serves atlanticcomputersystems.com. For that reason, Calendly reports basic scheduling events, such as a completed booking, to the Google Analytics account Atlantic Computer Systems uses for that website. Calendly’s own privacy notice also applies to your use of the scheduler.
When you call us
When you call 1-650-300-7557, our 24/7 incident line, we receive your phone number and the time of the call. We keep notes of what you tell us, and any voicemail you leave, so we can help you and follow up.
Information from other sources
We may receive information about you from the services connected to the site. For example, Calendly passes us your booking details, and HubSpot may link earlier visits to a contact record that already exists. If you have already been in touch with another part of Atlantic Computer Systems, we may combine that information with what we receive through this site.
Security and server logs
Our hosting provider and the security tools that protect the site record technical details about each request. These include the IP address, browser and device details (the user agent), the page requested and timestamps. These logs help keep the site available and protect it from abuse.
Please do not send sensitive information
Please do not include passwords, private keys, protected health information, payment card or bank details, financial records, logs, evidence files or other sensitive information in a booking or a general phone call. If an engagement needs sensitive information, our team will agree a secure way to handle it with you first.
Cookies and browser storage
The table below lists the cookies and browser storage the site uses. Lifetimes for third-party cookies are set by each provider and can change. Where a duration is shown, it is the provider’s typical default.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors so that visits can be counted | Up to 2 years (set by the provider) |
_ga_* | Google Analytics | Keeps the state of a visit for this site’s analytics property | Up to 2 years (set by the provider) |
__hstc | HubSpot | Tracks visits, including the first and most recent visit | Up to 6 months (set by the provider) |
hubspotutk | HubSpot | Recognizes a returning browser so visits can be linked to a CRM contact, where one exists | Up to 6 months (set by the provider) |
__hssc | HubSpot | Counts page views within a visit | About 30 minutes (set by the provider) |
__hssrc | HubSpot | Detects a browser restart so that a new visit can be counted | Session |
acsc_attr_ft | This site (local storage) | First visit source, landing page and date, added to a booking request | Until you clear your browser storage |
acsc_attr_lt | This site (session storage) | Most recent visit source, added to a booking request | Session |
acsc_vid | This site (local storage) | Random visitor identifier that contains no personal details | Until you clear your browser storage |
acsc_privacy | This site (local storage) | Remembers your Privacy choices setting | Until you clear your browser storage |
| Scheduler cookies | Calendly | Operate and secure the scheduler; set by Calendly once the scheduler loads | Set by the provider |
You can delete cookies and browser storage in your browser settings at any time. Blocking them does not stop you from reading the site or calling us.
How we use information
- To schedule, prepare for and hold the consultations you book, and to follow up afterwards
- To respond when you call, including on our 24/7 incident line
- To understand which pages, topics and buttons help visitors, so we can improve the site
- To operate, maintain and secure the site, and to detect and prevent abuse, fraud and security incidents
- To send messages about your consultation or our relationship and, where permitted, occasional updates that you can opt out of at any time
- To comply with legal obligations and enforce our agreements
We may also create de-identified or aggregated information that does not identify you, and use it for any lawful purpose.
Legal bases for processing
If you are in a region whose laws require a legal basis for processing personal information, such as the European Economic Area, the United Kingdom or Switzerland, we rely on the following:
- Consent, where the law requires it for cookies and similar technologies. You can withdraw consent at any time through Privacy choices.
- Steps you ask us to take before entering into a contract, such as scheduling and holding a consultation you booked.
- Legitimate interests, such as understanding how the site is used, following up on inquiries and keeping the site secure. We balance these interests against your rights.
- Legal obligations, where the law requires us to keep or disclose information.
For visitors in those regions, Google Analytics storage is turned off by default.
How we share information
We do not sell personal information for money. We share it only as described here:
- Service providers. Companies that work on our behalf for hosting, analytics, scheduling, CRM, communications and security, subject to confidentiality and limited-use obligations.
- Within Atlantic Computer Systems. ACS Cyber is a division of Atlantic Computer Systems. Our scheduler, CRM and teams are shared across the company, so your information may be used to connect you with the right ACS specialist.
- Legal and safety. When we believe disclosure is required by law or legal process, or is needed to protect the rights, property or safety of ACS, our clients or others.
- Business transfers. In connection with a merger, acquisition, financing or sale of assets, information may transfer as a business asset.
- At your direction. When you ask us to share information, for example with your IT provider, insurer or legal counsel.
Your privacy choices
Some state privacy laws may treat analytics and marketing cookies, such as Google Analytics and HubSpot cookies, as “sharing” personal information or as targeted advertising. You can opt out at any time:
- Use Privacy choices in the site footer. When you opt out, we tell Google Analytics not to use analytics or advertising storage for your visits, and we do not load HubSpot tracking.
- Turn on Global Privacy Control (GPC) in your browser or a browser extension. We honor a GPC signal as a request to opt out of sale and sharing for that browser.
- Delete or block cookies in your browser settings.
There is no common standard for Do Not Track signals, so the site does not respond to them. We do honor GPC.
Your choice applies to the browser and device you are using. If you clear your browser storage, you will need to set it again.
You can opt out of marketing emails at any time by using the unsubscribe link in the message or by calling us. We may still send messages about a consultation you booked or an existing business relationship.
How long we keep information
We keep personal information only as long as we need it for the purposes described in this policy. That includes following up on consultations, keeping business records, meeting legal and contractual obligations, resolving disputes and enforcing agreements.
After that, we delete it or de-identify it. Analytics and cookie data are kept according to each provider’s retention settings.
How we protect information
We use reasonable administrative, technical and physical safeguards designed to protect personal information. No method of transmission or storage is perfectly secure, so we cannot promise absolute security.
Your rights
Depending on where you live, including California and other states with consumer privacy laws, you may have the right to:
- Know or access the personal information we hold about you, and how we use and share it
- Correct inaccurate personal information
- Delete personal information
- Opt out of the sale or sharing of personal information, and of targeted advertising
- Not be discriminated against for exercising any of these rights
California residents may have these rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
Residents of some regions, such as the European Economic Area and the United Kingdom, may also have rights to restrict or object to processing, to data portability, and to lodge a complaint with a data protection authority.
How to make a request
- Call 1-650-300-7557.
- Book a call through our contact page and mention your privacy request in the notes.
- Use the privacy contact listed in the Atlantic Computer Systems privacy policy.
We will verify your request before acting on it, usually by confirming details you have already given us. We will never ask for a password to verify a request.
You may use an authorized agent. If you do, we may ask for proof that the agent is authorized and confirm your identity directly with you. We will respond within the time required by applicable law.
Children’s privacy
This site is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children under 16, and we do not knowingly sell or share their personal information. If you believe a child has given us information, call us and we will take steps to delete it.
International visitors
We are based in the United States, and information collected through this site is processed in the United States. Data protection laws in the United States may differ from those in your country.
Links to other websites
This policy does not cover other websites or services, including those we link to. Their own privacy policies apply.
Changes to this policy
We may update this policy as the site, our tools or our legal obligations change. When we do, we will post the updated version on this page and change the effective date.
Contact us
For questions about this policy or your information, call 1-650-300-7557 or visit our contact page to book a call.
See also our Terms of Use and Accessibility statement.