Privacy Policy

Effective date: October 29, 2025

Applies to: glt website(s), portals, forms, events, and communications operated by GLT, LLC (“GLT,” “we,” “us,” “our”).

GLT is committed to protecting personal data while operating in highly regulated, mission-critical environments. This Policy explains what we collect, how we use and share it, the choices you have, and the rights available to you under applicable laws.

Who We Are

GLT, LLC is the controller of personal data collected through our websites and online properties unless stated otherwise. For certain federal engagements GLT may act as a processor/service provider to our government or enterprise customers and will process personal data strictly under contract instructions.

Contact: [email protected] • GLT Privacy Office, 4906 Randy Court Suite 100, Riverdale, MD 20737-1787 USA

Scope

This Policy covers information collected via GLT sites, forms, events, portals, and communications. It does not cover third-party sites or services that link to/from GLT; their practices are governed by their own policies.

Information We Collect

Information you provide to us

• Identifiers and contact details (name, email, phone, address, employer, role).
• Professional background (education, certifications, resume/CV, clearance status where voluntarily provided).
• Account & portal data (usernames, preferences, support requests, uploads).
• Commercial info (purchases, transactions, contracting and invoicing data).
• Communications and submissions (forms, chat, surveys, events, forums).
• Payment details processed by our PCI-compliant providers (we do not store full card numbers).

Information we collect automatically

• Device and usage data (IP address, device identifiers, browser/OS, pages viewed, timestamps, referring URLs, approximate geolocation).
• Security telemetry (logs, audit trails, anomaly and threat signals, access attempts).
• Cookies, pixels, and similar technologies (see Cookie Policy).

Information from third parties

• Lead/marketing partners, event hosts, recruiters, background or identity verification vendors (where permitted).
• Public sources and social networks (consistent with your settings and the platform’s terms).

How We Use Personal Data

• Provide services & operate sites: enable access, accounts, transactions, support, and features.
• Security & integrity: authenticate users; prevent, detect, investigate, and respond to fraud, abuse, threats, and incidents.
• Communications: send administrative notices, service messages, and—where permitted—marketing or event updates (you can opt out anytime).
• Compliance & enforcement: meet legal, regulatory, and audit obligations; establish, exercise, or defend legal claims.
• Improvement & analytics: measure performance; develop new features; quality assurance.
• Recruiting: process applications, schedule interviews, and assess qualifications.

Legal bases (EEA/UK/Switzerland)

We process personal data when one or more of the following applies: (i) you consent, (ii) to perform or enter into a contract with you, (iii) for our legitimate interests (e.g., site security, service improvement) not overridden by your interests, (iv) to comply with legal obligations, or (v) to protect vital interests or the public interest.

How We Share Information

• Service providers/contractors: cloud hosting, security, analytics, communications, payments, recruiting—bound by confidentiality and processing terms.
• Customers & partners: where you engage with GLT on a joint program or portal.
• Corporate transactions: mergers, acquisitions, or asset transfers (subject to continued protections).
• Legal & safety: government authorities or third parties as required by law or to protect rights, safety, systems, or property.

We do not sell or share personal information for cross-context behavioral advertising as those terms are defined by the California Consumer Privacy Act (as amended by CPRA) and similar U.S. state laws. If our practices change, we will provide required notices and opt-out mechanisms.

Cookies, Analytics, and Tracking

We use cookies and similar technologies to operate the site, remember preferences, measure performance, and secure our systems. Some third-party embeds (e.g., video, maps, social sharing) may set their own cookies. Manage choices via our Cookie Policy and your browser settings. We do not respond to “Do Not Track” signals at this time.

Your Choices

• Marketing: opt out via links in our emails or by contacting us.
• Account data: view, update, or delete certain information in your account/portal where available.
• Cookies: use browser controls and our cookie banner/settings.

Your Privacy Rights

Depending on where you live, you may have the right to request access, correction, deletion, portability, or restriction of your personal data, and to object to certain processing.

• EEA/UK/Swiss data subjects: you may withdraw consent where processing is based on consent and lodge a complaint with a supervisory authority.
• U.S. state laws (e.g., CA, CO, CT, VA, UT): you may request to know, access, correct, delete, and obtain a copy of your data; and to opt out of sales, targeted advertising, or certain profiling (where applicable). Authorized agents may submit requests subject to verification.

Submit requests at [email protected]. We will verify your identity and respond within the time required by law. We will not discriminate against you for exercising your rights.

Data Security

We apply administrative, technical, and physical safeguards aligned to industry practices (including least-privilege access, encryption in transit and at rest where appropriate, logging and monitoring, vulnerability management, and employee training). No method of transmission or storage is 100% secure; we cannot guarantee absolute security. If we believe the security of your personal data has been compromised, we will take steps required by law to notify you and remediate.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, to comply with legal, regulatory, or contractual obligations, to resolve disputes, and to enforce agreements, then delete or de-identify it according to our retention schedules.

International Transfers

Your data may be transferred to and processed in countries other than where you reside (including the United States). Where required, we use appropriate safeguards such as Standard Contractual Clauses and supplementary measures.

Children’s Privacy

GLT sites are not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If we learn we have done so, we will delete it.

Third-Party Links & Embeds

Our sites may link to or embed content from third parties (e.g., videos, social platforms, slides). Those providers may collect data subject to their own policies. We are not responsible for their practices.

Changes to This Policy

We may update this Policy from time to time. Material changes will be posted here with a revised effective date and, where required, additional notice.

Contact Us

Questions or requests can be sent to [email protected]. You may also write to: GLT Privacy Office, 4906 Randy Court Suite 100, Riverdale, MD 20737-1787 USA.

Definitions

• “Personal data” / “personal information” means information that identifies or can reasonably be linked to an individual.
• “Process(ing)” means any operation performed on personal data, such as collection, use, storage, disclosure, or deletion.
• “Sell”/“share” have the meanings in applicable state laws (e.g., CPRA).
• “Cookie” means a small text file placed on a device to store information.

Last updated: October 29, 2025