Privacy Policy | TEK Brains

Age Restriction: This Site is intended solely for use by individuals who are at least 18 years of age. By accessing, browsing, registering for an account on, or using this Site in any way, you represent and warrant that you are 18 years of age or older. This Site is not directed to, and we do not knowingly collect personal information from, anyone under the age of 18. If you are under 18, you must not access or use this Site or create an account. If we learn that an account was created by a person under 18, we will close the account and delete the associated personal information.

SRv6 TEK Innovations, LLC (“SRv6 TEK Innovations,” “we,” “our,” or “us”), headquartered in Montgomery County, Maryland, provides IT network engineering consulting, technical publications, and related professional services (the “Services”). This Privacy Policy explains what personal information we collect through our website at srv6tek-innovations.com, blog, user accounts, client portal, and training subscription platform (collectively, the “Site”), why we collect it, how we use and protect it, and the choices and rights available to you. Because the Site offers user accounts that are secured by an email address and password, this Policy also explains in detail how we handle and protect those account credentials (see Section 3). By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Site.

1. Information We Collect

We collect information you provide directly to us, information collected automatically through your use of the Site, and information from third parties. Specifically:

1.1 Information You Provide Directly

Contact and Business Inquiry Forms: Name, email address, phone number, company name, job title, and project or engagement details submitted when you request information about our network engineering services.
User Account Registration: Your email address (which serves as your unique login identifier), the password you choose, and, where requested, your name or display name, company name, and job title. Your password is never stored in readable form; we store only a salted, one-way cryptographic hash of it, as described in Section 3.2.
Account Profile and Preferences: Optional profile details, communication preferences (including whether you have opted in to marketing email), and display or notification settings that you choose to save.
Blog and Comments: Name or display name, email address, optional website URL, and the content of any comment you post. Your email address is never displayed publicly with a comment.
Training Subscriptions: Billing name and address, payment method details (collected and processed by our third-party payment processor or merchant of record — we do not receive or store full payment card numbers), course enrollment, progress, quiz or exam results, and subscription status.
Communications: Records of correspondence if you contact us directly by email or phone, including the content of your message and our response.

1.2 Information Collected Automatically

Technical and Device Data: IP address, approximate geolocation derived from IP address, browser type and version, operating system, device identifiers, referring and exit pages, and timestamps.
Account Security and Authentication Data: Account creation date, email verification status, date and time of sign-ins, the IP address and browser or device used to sign in, failed sign-in attempts, temporary account lockouts, password change and password reset events, email address changes, and active session identifiers. We collect this information to secure your account and to detect unauthorized access.
Usage Data: Pages viewed, links clicked, time spent on pages, scroll behavior, and general navigation patterns, collected via server logs and analytics tools.
Cookies and Similar Technologies: As described in Section 4 below. 1.3 Information From Third Parties We may receive limited information about you from third-party services you use to interact with us (for example, if you sign in using a third-party authentication provider where that option is offered, in which case we receive your name, email address, and a provider account identifier, but never your password for that provider; or if a payment processor confirms a completed transaction).

2. How We Use Your Information

To respond to business inquiries and provide quotes, proposals, and IT network engineering services.
To create and administer your user account, verify that you own and can receive email at the address you registered, and authenticate you each time you sign in.
To send account and security communications to your registered email address, including email verification links, password reset links, and notices when your password, email address, or other security settings change, or when unusual sign-in activity is detected.
To protect your account and the Site, including rate-limiting sign-in attempts, temporarily locking accounts after repeated failed attempts, detecting credential-stuffing and automated attacks, and investigating suspected unauthorized access.
To publish and moderate blog comments, including removing content that violates our comment guidelines.
To process training subscription payments, deliver course content, track progress, and issue receipts or renewal notices.
To send administrative communications, such as policy updates and service-related notices.
To send marketing communications only where you have separately opted in, and to manage your communication preferences.
To monitor, analyze, and improve the performance, security, and usability of the Site.
To detect, investigate, and prevent fraud, abuse, unauthorized access, and other illegal or prohibited activity.
To comply with applicable legal obligations, enforce our terms, and protect our rights and the rights of others.

3. User Accounts and Credential Security

Your account is protected by two pieces of information: the email address you register and the password you choose. Because these credentials together permit access to your account, we treat them as sensitive personal information and protect them as follows.

3.1 Your Email Address

Your email address is your unique sign-in identifier and the primary channel we use for account and security communications. Each email address may be associated with only one account.
When you register, we send a one-time verification link to confirm that you control the address. Certain features may be unavailable until your address is verified.
If you change your email address, we may ask you to re-enter your password, and we send a notice to your previous address and a verification link to the new address so that an unauthorized change can be detected and reversed.
We do not display your email address publicly, sell it, or share it with third parties for their own marketing purposes. 3.2 How We Protect Your Password
We never store your password in plain text or in any reversible (decryptable) form. When you create or change your password, it is immediately processed with an industry-standard, salted, adaptive one-way hashing algorithm (such as Argon2id or bcrypt), and only the resulting hash is stored.
Because only a hash is stored, no one at SRv6 TEK Innovations — including our employees, contractors, and hosting providers — can view or retrieve your password. If you forget it, it can only be reset, never recovered or sent to you.
Your password is transmitted only over encrypted connections (TLS/HTTPS) and is never written to logs, included in error reports, or sent by email.
We require passwords to meet minimum length and complexity requirements displayed at registration, and we may reject passwords known to have appeared in public data breaches.

3.3 Password Resets and Account Recovery

When you request a password reset, we email a single-use reset link to your registered, verified email address. The link expires after a short period (typically no more than 60 minutes) and becomes invalid once used. Reset tokens are stored only in hashed form. After a successful reset, we sign out your other active sessions and send a confirmation email so that you will be alerted if you did not make the change. To prevent account enumeration, the Site responds in the same way whether or not an account exists for the email address entered.

To protect against password-guessing and credential-stuffing attacks, we may rate-limit sign-in attempts, require additional verification (such as a CAPTCHA challenge), and temporarily lock an account after repeated failed attempts.

3.5 Sessions

After you sign in, we issue a session cookie that keeps you signed in. Session cookies are marked Secure, HttpOnly, and SameSite to reduce the risk of interception and cross-site attacks, expire after a period of inactivity, and are invalidated when you sign out, change your password, or reset your password. If you select a “remember me” option where offered, your session will last longer on that device; do not use this option on a shared or public device.

3.6 We Will Never Ask for Your Password

SRv6 TEK Innovations will never ask you for your password by email, phone, text message, or social media. Any message requesting your password, or directing you to a sign-in page at a domain other than srv6tek-innovations.com, should be treated as a phishing attempt and reported to us at privacy@srv6tek-innovations.com.

3.7 Your Responsibilities

You are responsible for choosing a strong password that you do not use on any other website or service, keeping it confidential, and signing out of shared devices. Please notify us immediately at privacy@srv6tek-innovations.com if you suspect that your account or password has been compromised.

3.8 Closing Your Account

You may close your account at any time through your account settings (where available) or by emailing privacy@srv6tek-innovations.com from your registered email address. We may ask you to confirm the request or re-enter your password. Account closure is handled as described in Section 7.

4. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to operate the Site and understand how it is used. Cookies are small text files stored on your device.

Category Purpose Can You Opt Out?

Strictly Necessary Account sign-in and session authentication, protection against cross-site request forgery (CSRF), sign-in rate-limiting and other security functions, and load balancing.

Analytics Understanding aggregate traffic and usage patterns (e.g., pages visited, time on page) to improve the Site.

No — required for the Site and your account to function.

Yes, via our cookie banner or browser settings.

Functional Remembering preferences such as language or display settings, Yes, via browser settings or our and an optional “remember me” sign-in where offered. cookie banner.

Marketing Measuring the effectiveness of marketing campaigns for training Yes, via our cookie banner or subscriptions. browser settings.

You can control or disable cookies through your browser settings. If you block strictly necessary cookies, you will not be able to sign in to your account. Where required by law (including under the EU/UK cookie rules implementing the ePrivacy Directive), we will request your consent via a cookie banner before setting non-essential cookies.

5. Legal Bases for Processing (EEA/UK Visitors)

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR require us to identify the legal basis on which we process your personal data. We rely on the following bases:

Contract: Processing necessary to create and maintain your account, authenticate you, respond to your inquiry, provide services you request, or administer a paid subscription.
Legitimate Interests: Processing necessary for account and Site security (including sign-in monitoring, rate-limiting, and fraud prevention), analytics, and improving our Services, provided such interests are not overridden by your rights.
Consent: Processing based on your consent, such as non-essential cookies or opted-in marketing emails, which you may withdraw at any time.
Legal Obligation: Processing necessary to comply with applicable law, such as tax or accounting record-keeping requirements or breach notification obligations.

We do not sell or rent your personal information, and we do not sell, rent, or disclose your account credentials to anyone. We may share information in the following circumstances:

Service Providers: With vendors who perform services on our behalf, such as website and database hosting, transactional email delivery (which receives your email address in order to send verification, password reset, and security messages), payment processing, analytics, and customer support tools. These providers are contractually obligated to protect your data and to use it only for the purposes we specify. Password hashes reside only within our secured hosting and database infrastructure and are not provided to any other third party.
Professional Advisors: With attorneys, accountants, auditors, and insurers as needed to operate our business.
Business Transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of our assets, in which case personal information may be transferred as a business asset, subject to standard confidentiality arrangements and to protections at least equivalent to this Policy.
Legal Compliance and Safety: Where required by law, subpoena, or court order, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
With Your Consent: In any other circumstances where you have given explicit consent.

7. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. As general guidance:

Information Retention Period Account data (email address, password hash, profile, preferences)

Email verification and password reset tokens Business inquiry and contact form data

Billing and subscription records

For as long as your account remains open. When you close your account, we delete or anonymize this information within 30 days, except where retention is required by law. Residual copies in encrypted backups are overwritten in the ordinary course within 90 days.

Expire after a short period (typically no more than 60 minutes) or upon first use, and are then deleted.

Up to 3 years from your last interaction with us, unless a longer period is required to service an active engagement.

As required by applicable tax and financial recordkeeping laws.

Inactive accounts If an account has no sign-in activity for 24 consecutive months and has no active paid subscription, we may close it after sending at least 30 days’ advance notice to the registered email address.

Account security and sign-in logs Typically 12–24 months, for security, fraud prevention, and troubleshooting.

Blog comments Retained as part of the public discussion record unless you request removal. When an account is closed, associated comments are removed or de-identified on request.

When personal information is no longer needed, we securely delete, destroy, or anonymize it.

8. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of all data in transit using TLS/HTTPS, including every page on which credentials are entered.
Storage of account passwords only as salted, adaptive one-way hashes, together with the credential protections described in Section 3.
Encryption of stored data and backups where supported by our hosting infrastructure, and database access restricted to the application and to authorized administrators.
Access controls limiting employee and contractor access to personal information on a need-to-know basis, with administrative access protected by strong authentication.
Use of reputable, security-vetted hosting and payment-processing infrastructure.
Regular review and testing of our security practices as the Site and its features evolve.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorized use of your account.

9. International Data Transfers

SRv6 TEK Innovations is based in the United States, and information we collect, including account data, is generally processed and stored in the United States. If you access the Site from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States or other countries whose data protection laws may differ from those of your home jurisdiction. Where required, we rely on appropriate safeguards — such as Standard Contractual Clauses or equivalent mechanisms — for transfers of personal data originating in the EEA, UK, or Switzerland.

10. Your Privacy Rights

Depending on your location, you may have some or all of the following rights regarding your personal information:

Access: Request confirmation of whether we process your personal information and obtain a copy of it.
Correction: Request that we correct inaccurate or incomplete personal information.
Deletion: Request that we delete your personal information, including closing your account, subject to certain legal exceptions.
Restriction / Objection: Request that we restrict or object to certain processing, including processing based on legitimate interests or for direct marketing.
Portability: Request a copy of personal information you provided to us in a structured, commonly used, machine-readable format.
Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Account holders can also update their profile, change their email address or password, manage email preferences, and close their account directly through account settings where those features are available. To exercise any of these rights, contact us at privacy@srv6tek-innovations.com. To protect your account, we will verify your identity before acting on a request — for example, by asking you to sign in or to confirm the request from your registered email address. We will never ask you to send us your password. We will respond within the timeframe required by applicable law. If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), gives you the following additional rights with respect to your personal information:

The right to know what personal information we collect, use, disclose, and (if applicable) sell or share.
The right to delete personal information we have collected from you, subject to certain exceptions.
The right to correct inaccurate personal information.
The right to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.
The right to limit the use of sensitive personal information. Account sign-in credentials are sensitive personal information under the CCPA/CPRA; we use them only to provide account access and secure the Site, and for no other purpose.
The right to non-discrimination for exercising any of your CCPA/CPRA rights.

To submit a verifiable consumer request, contact us at privacy@srv6tek-innovations.com. We may need to verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf, subject to our ability to verify that authorization.

12. Account Emails, Marketing Communications & Do Not Track

Creating an account does not subscribe you to marketing email. Marketing messages are sent only if you separately opt in, using a choice that is not pre-selected.
Account and security emails — such as verification links, password reset links, sign-in and security alerts, subscription receipts, and notices of changes to this Policy — are transactional and are sent for as long as your account remains open, even if you have opted out of marketing.
You may opt out of marketing emails at any time by clicking the “unsubscribe” link included in every marketing message, by updating your account preferences, or by contacting us directly.
Our marketing emails comply with the CAN-SPAM Act, including accurate header information, clear identification as an advertisement where applicable, our physical business location, and a functioning opt-out mechanism honored within 10 business days.
Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, our Site does not currently respond differently to DNT browser signals, though non-essential cookies can still be controlled through our cookie banner and your browser settings.

13. Disclaimers

IT Services Disclaimer: Information published on the Site (including blog posts, technical references, and white papers) is provided for general informational and educational purposes only and does not constitute professional advice or a service commitment. Any engineering, consulting, or advisory services are governed exclusively by a separate, signed statement of work or service agreement between you and SRv6 TEK Innovations.
Training Subscription Disclaimer: Training content is intended to provide educational value related to IT network engineering topics. We do not guarantee any specific certification exam outcome, job placement, promotion, or salary result from use of our training materials.
No Warranty: The Site and its content are provided “as is” and “as available” without warranties of any kind, express or implied, to the fullest extent permitted by law.

14. Third-Party Links

Our blog and Site may contain links to third-party websites, tools, or resources, including RFCs, vendor documentation, and industry publications. We are not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policy of any third-party site you visit.

15. Data Breach Notification

In the event of a security incident that compromises the confidentiality, integrity, or availability of your personal information in a manner that triggers a legal notification obligation, we will notify affected individuals and, where required, applicable regulators without undue delay and in accordance with Maryland’s Personal Information Protection Act and other applicable state, federal, or international breach notification laws. Under Maryland law, a user name or email address in combination with a password or security question and answer that permits access to an email account is protected personal information; we treat account credentials for the Site with the same level of care.

Where an incident involves account credentials, we will, as appropriate: invalidate active sessions; require affected users to reset their passwords at next sign-in; notify affected users at their registered email address with instructions to change their password; and recommend that they change the password on any other service where the same password was used. Where Maryland law applies, we will notify the Maryland Office of the Attorney General before notifying affected Maryland residents, and will notify affected individuals within the period required by law (currently no later than 45 days after discovery of the breach, subject to permitted law-enforcement delays).

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the launch of new features. We will post the revised Policy on this page with an updated Effective Date. For material changes, we will provide additional notice where required by law, such as a prominent notice on the Site or an email to the registered address of each account holder. Your continued use of the Site after a revised Policy becomes effective constitutes your acceptance of the changes.

17. Governing Law and Dispute Resolution

This Privacy Policy and your use of the Site are governed by the laws of the State of Maryland, United States, without regard to its conflict-of-law principles. Subject to any non-waivable consumer protection rights you may have under the mandatory laws of your country or state of residence, any dispute arising out of or relating to this Privacy Policy shall be brought exclusively in the state or federal courts located in Montgomery County, Maryland, and you consent to the personal jurisdiction of such courts.

18. Contact Us

Questions, requests, or concerns about this Privacy Policy, your account, or the security of your credentials may be directed to:

SRv6 TEK Innovations, LLC Montgomery County, Maryland, United States Email: privacy@srv6tek-innovations.com Website: srv6tek-innovations.com

A Note Before You Read On

This document is a general-purpose legal template prepared for SRv6 TEK Innovations, LLC and is not a substitute for advice from a licensed attorney. Laws governing online terms, privacy, data security, consumer protection, and e-commerce vary by jurisdiction and change over time. SRv6 TEK Innovations should have this document reviewed by qualified counsel licensed in Maryland (and any other jurisdiction where it does business) before publishing it, and should revisit it periodically as the Site, services, and applicable law evolve. This document covers the Privacy Policy for the Site only; the terms governing use of the Site are addressed in a separate document published on the Site.