Privacy-Policy | Granite Defense

GRANITE DEFENSE & TECHNOLOGIES

Website Privacy Policy

Last Updated: October 18, 2026 Effective Date: October 18, 2026

At Granite Defense & Technologies LLC ("GDT," "we," "us," or "our"), we are committed to protecting your privacy and personal data. This Privacy Policy ("Policy") explains how we collect, use, disclose, and protect personal data when you visit our website, www.granitedefense.com (the "Website"), contact us, register for training or events, or otherwise interact with us in connection with our products and services.

GDT is based in Texas and primarily serves public safety, emergency response, and government agencies in the United States. We handle personal data in accordance with applicable privacy laws, which may include, where they apply to us:

Texas Data Privacy and Security Act (TDPSA) (Texas, US)
California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) (California, US)
Other applicable US state privacy laws
General Data Protection Regulation (GDPR) and the UK GDPR, for visitors located in the EU, EEA, or UK

By using our Website, you acknowledge the collection and use of personal data as described in this Policy.

1. Introduction and Scope

This Policy applies to personal data processed by Granite Defense & Technologies LLC in connection with our Website, our sales and support communications, and our training and event programs.

This Policy does not cover operational data (such as drone imagery, video, flight logs, or mission data) that our agency customers collect using the systems we sell or support. That data belongs to the customer agency and is handled under our contracts with that agency and the policies of the applicable platform providers.

Our Contact Details:

Granite Defense & Technologies LLC

1610 County Road 115, Burnet, Texas 78611

Email: tom@granitedefense.com

Phone: (281) 935-8972

Privacy Contact: Tom Prentice, CEO, tom@granitedefense.com

We encourage you to read this Policy carefully to understand our practices regarding your data and how we will treat it.

2. Information We Collect

We collect information to respond to you, provide our products and services, and operate our Website. We only collect data that is necessary for the purposes described in this Policy.

2.1. Personal Data You Provide

Identifiers and contact information: Name, email address, phone number, and mailing address.
Professional information: Agency or company name, job title, department, and role, since we primarily interact with people in a professional or government capacity.
Communications: Information you provide when you submit our contact form, email or call us, request a quote, or ask for support.
Commercial information: Records of products, services, quotes, purchase orders, and contracts you request, consider, or obtain from us, including purchases through cooperative contracts such as Texas DIR.
Training and event information: Information you provide when you register for training courses, certifications, demonstrations, or events at Reveille Peak Ranch or elsewhere, such as attendance records and certification status.
Marketing preferences: Your choices about receiving email updates and newsletters from us.

We do not sell products directly through the Website and do not collect payment card information through it.

2.2. Usage Data

When you visit our Website, certain information is collected automatically, including:

Device information: IP address, browser type and version, operating system, and device type.
Usage patterns: Pages visited, time spent on pages, referring website, and navigation paths.
Location data: General location (such as city or region) derived from your IP address. We do not collect precise geolocation through the Website.
Cookies and similar technologies: Information collected through cookies and similar technologies, as described in Section 2.4.

2.3. Sensitive Personal Information

We do not collect sensitive personal information (for example, health data, racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic data, biometric data, sexual orientation, or government-issued identification numbers) through our Website. If, for a specific service, we need to collect such data, we will clearly inform you, explain the purpose, and obtain your consent or rely on another lawful basis as required by applicable law.

2.4. Cookies and Tracking Technologies

Our Website is hosted on the Wix platform. We, Wix, and our third-party partners may use the following technologies to collect information about your interactions with the Website:

Cookies: Small text files stored on your device that enable core Website functionality, remember your preferences, maintain security, and help us understand how the Website is used. These include cookies set by our Website and by Wix (first-party cookies) and by third-party services (third-party cookies).
Analytics tools: Wix site analytics and similar tools (which may include Google Analytics) that collect information about how visitors use the Website, such as pages viewed and traffic sources.
Web beacons and pixels: Small images or scripts embedded in web pages or in our marketing emails that indicate whether you have viewed a page or opened an email.
Embedded content and social media links: Features such as links to our LinkedIn, Instagram, and Facebook pages, or embedded videos and maps, which may allow those platforms to collect information about your visit under their own privacy policies.
Log files: Information automatically recorded by our hosting provider about each visit, used for security and performance.

These technologies are used to operate the Website, remember your preferences, provide analytics, measure the effectiveness of our communications, and keep the Website secure. We do not use them to sell your personal data.

You can manage cookies through the cookie banner on our Website (where available) and through your browser settings. You can block or delete cookies in your browser, though some features of the Website may not function properly without them.

3. How We Use Your Information

We use personal data for the following purposes. For visitors in the EU, EEA, or UK, we also list the legal basis for each purpose.

To respond to inquiries and provide our products and services: Including answering contact form submissions, preparing quotes, processing orders and contracts, coordinating deliveries, and providing post-sale support and sustainment services.

Legal Basis: Performance of a contract, or steps taken at your request before entering into a contract.

To deliver training and events: Including registration, scheduling, attendance tracking, certification records, and event logistics.

Legal Basis: Performance of a contract and legitimate interests (operating our training programs).

To send marketing and informational communications: Such as newsletters, product updates, and event invitations, where you have opted in or where otherwise permitted by law. You can unsubscribe at any time using the link in any email or by contacting us.

Legal Basis: Consent, or legitimate interests where permitted for business-to-business communications.

To operate, analyze, and improve our Website: To understand how visitors use the Website and improve its content and performance.

Legal Basis: Legitimate interests (improving our Website) and/or consent for non-essential cookies.

For security and fraud prevention: To protect the Website, our systems, and our customers, and to detect and address technical issues, spam, or illegal activity.

Legal Basis: Legitimate interests (protecting our business and users) and legal obligation.

To comply with legal obligations: Including government contracting, procurement, tax, accounting, and recordkeeping requirements.

Legal Basis: Legal obligation.

4. How We Share Your Information

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We share personal data only in the circumstances described below.

4.1. Service Providers: We use trusted third-party service providers to operate our business and Website, including website hosting and form processing (Wix), email and productivity tools (Google Workspace), customer relationship management and quoting (Salesforce), and email marketing (Mailchimp). These providers may access personal data only to perform services on our behalf and are obligated to protect it.

4.2. Manufacturers and Partners: When you request a quote, purchase, warranty service, or training for a manufacturer's product (for example, Skydio), we may share necessary contact and order information with that manufacturer to fulfill your request, register products, or provide support.

4.3. Government and Contract Administrators: Where you purchase through a cooperative or government contract (such as Texas DIR contract DIR-CPO-6131), we may share order and contact information with the contract administrator as required for reporting and compliance.

4.4. Business Transfers: If Granite Defense & Technologies LLC is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction. We will take reasonable steps to ensure the information remains protected and will provide notice where required by law.

4.5. Legal Requirements: We may disclose personal data in the good faith belief that doing so is necessary to:

Comply with a legal obligation, such as a subpoena, court order, or public information request.
Protect and defend the rights or property of Granite Defense & Technologies LLC.
Prevent or investigate possible wrongdoing in connection with our services.
Protect the personal safety of users of our services or the public.
Protect against legal liability.

4.6. With Your Consent: We may disclose personal data for any other purpose with your consent.

4.7. Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. International Data Transfers

GDT is located in the United States, and the personal data we collect is stored and processed in the United States by us and our service providers. If you access the Website from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction.

Where personal data from the EU, EEA, UK, or Switzerland is transferred to the United States, we rely on appropriate safeguards made available by our service providers, such as Standard Contractual Clauses approved by the European Commission or participation in the EU-U.S. Data Privacy Framework, as applicable.

6. Data Security and Retention

6.1. Data Security: We use reasonable technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption in transit: SSL/TLS encryption (HTTPS) for the Website.
Access controls: Restricting access to personal data to authorized personnel who need it for their work, with multi-factor authentication on key business systems.
Data minimization: Collecting only the data we need.
Vendor selection: Using reputable service providers that maintain their own security programs.
Periodic review: Reviewing our security practices and staff awareness on a regular basis.

While we use commercially reasonable means to protect personal data, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6.2. Data Retention: We retain personal data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law, including government contract, procurement, tax, and accounting recordkeeping requirements. Training and certification records may be retained so that we can verify completion for you or your agency. When we no longer need personal data, we securely delete or anonymize it.

7. Your Privacy Rights

Depending on where you live and the laws that apply, you may have some or all of the following rights regarding your personal data:

7.1. General Rights

Right to be informed: To know what personal data we collect, why we collect it, and how we use it. This Policy is intended to fulfill this right.
Right of access: To request confirmation of whether we process your personal data and to obtain a copy of it.
Right to correction: To request that we correct inaccurate or incomplete personal data.
Right to deletion: To request that we delete your personal data, subject to certain exceptions (for example, records we must keep by law).
Right to data portability: To receive your personal data in a portable, commonly used format, where technically feasible.
Right to opt out: To opt out of marketing communications, and, where applicable, to opt out of the sale of personal data, targeted advertising, or profiling. GDT does not sell personal data or use it for targeted advertising.
Right to restrict or object: For EU, EEA, and UK residents, to restrict processing or object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent: Where we rely on consent, to withdraw it at any time, without affecting processing that occurred before withdrawal.
Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

7.2. Specific Rights by Region

Texas residents (TDPSA): You may exercise the rights above. If we decline to take action on your request, you may appeal our decision by replying to our response or emailing us with the subject line "Privacy Appeal." We will respond to appeals within the time required by law. If your appeal is denied, you may contact the Texas Attorney General at www.texasattorneygeneral.gov.
California residents (CCPA/CPRA): You have the right to know the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties to whom we disclose it, along with the rights to delete, correct, and opt out. GDT does not sell or share personal information as those terms are defined under California law, and does not use or disclose sensitive personal information for purposes that would require a right to limit.
EU, EEA, and UK residents: You have the right to lodge a complaint with your local data protection authority. For the UK: https://ico.org.uk/. For the EU: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

7.3. How to Exercise Your Rights

To exercise any of these rights, contact us at tom@granitedefense.com or (281) 935-8972, or write to us at 1610 County Road 115, Burnet, Texas 78611. Please include your name, the email address you used with us, and the nature of your request.

We will respond within the time required by applicable law (for example, 45 days under the TDPSA and CCPA, or one month under the GDPR). We may need to verify your identity before fulfilling your request. You may exercise your rights free of charge, unless requests are manifestly unfounded or excessive. You may also use an authorized agent to submit a request on your behalf where permitted by law.

8. Children's Privacy

Our Website and services are intended for professionals and agencies and are not directed to children. We do not knowingly collect personal data from children under the age of 13 (or under 16 for visitors in the EU, EEA, or UK). If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will take steps to delete that information.

9. Links to Other Websites

Our Website contains links to websites and social media pages that are not operated by us, including manufacturer, partner, and social media sites. If you click a third-party link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites or services, and we encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We may update this Policy from time to time and review it at least annually. We will post any changes on this page and update the "Last Updated" date at the top of this Policy. If we make material changes, we will provide a prominent notice on our Website before the change becomes effective. Changes are effective when posted unless otherwise stated.

11. Questions and Complaints

If you have questions or concerns about our privacy practices, please contact us using the details in Section 1. You also have the right to lodge a complaint with the relevant authority in your jurisdiction, including:

Texas residents: Office of the Texas Attorney General.
California residents: California Attorney General or the California Privacy Protection Agency (CPPA).
EU/EEA residents: The data protection authority in your Member State (listed by the European Data Protection Board).
UK residents: Information Commissioner's Office (ICO).