Privacy policy
CAST SYSTEMS PRIVACY POLICY
Effective Date: September 20, 2026
Last Updated: September 20, 2026
CAST Systems ("CAST," "we," "our," or "us") respects the privacy of our customers and website visitors.
This Privacy Policy explains how CAST may collect, use, protect, and share information when you visit our website, purchase CAST products or services, contact us, or use CAST monitoring and support services.
Our goal is simple: collect only the information we reasonably need to operate our business, support our customers, and protect CAST-managed systems.
1. INFORMATION WE MAY COLLECT
Depending on how you interact with CAST, we may collect information including:
Contact Information
This may include your name, business name, email address, telephone number, billing or service address, and other information you voluntarily provide.
Order and Service Information
When you purchase a CAST system or service, we may collect information necessary to process the transaction, deliver equipment, schedule installation, provide training, manage your account, and provide support.
Payment Information
Payments may be processed through third-party payment providers or ecommerce platforms. CAST may receive transaction information associated with a purchase but does not necessarily receive or retain complete payment-card information processed directly by those providers.
Website Information
When you visit our website, certain information may be collected automatically by our website platform and associated service providers, such as:
- IP address
- Browser and device information
- Pages visited
- Referring website
- Date and time of visits
- Website interaction information
- Cookies and similar technologies
This information may be used for website operation, security, analytics, troubleshooting, and improving our services.
2. NETWORK MONITORING AND SUPPORT INFORMATION
Customers who subscribe to CAST monitoring, support, or managed services authorize CAST to access certain technical information necessary to provide those services.
Depending on the service, this may include:
- Firewall and security events
- Network availability and health
- Internet/WAN status
- Switch and wireless access-point status
- Connected-device information
- IP and MAC addresses
- Network utilization
- Authentication events
- Security alerts
- Blocked threats
- Firmware and software information
- Configuration information
- Administrative events
- System and diagnostic logs
CAST uses this information to provide monitoring, troubleshooting, security, maintenance, and support for CAST-managed systems.
3. CAST MONITORS YOUR NETWORK — NOT YOUR EMPLOYEES
CAST monitoring services are designed to monitor the health, security, availability, and performance of your CAST-managed network.
Our standard monitoring service is not an employee-surveillance service.
CAST does not intentionally monitor the contents of employee communications or personal activity as part of normal network monitoring.
Unless separately required for legitimate troubleshooting or security purposes and appropriately authorized, CAST does not intentionally:
- Read employee emails or messages
- Record private conversations
- Capture passwords
- Inspect personal files
- Continuously capture network packets
- Decrypt encrypted communications
- Monitor employees for productivity or behavioral purposes
Network and security logs may nevertheless contain technical information concerning devices, users, applications, network destinations, domains, timestamps, addresses, and network activity.
CAST accesses this information only as reasonably necessary to provide authorized services, troubleshoot problems, maintain security, investigate security events, or comply with applicable law.
4. HOW WE USE INFORMATION
CAST may use information we collect to:
- Provide products and services
- Process and fulfill orders
- Schedule installation and training
- Provide customer support
- Monitor CAST-managed systems
- Maintain network security
- Troubleshoot technical issues
- Detect potential security events
- Communicate with customers
- Maintain customer accounts
- Improve CAST products and services
- Maintain and protect our website
- Prevent fraud, abuse, or unauthorized access
- Maintain appropriate business records
- Comply with applicable legal obligations
CAST does not use customer network monitoring information for unrelated advertising or employee profiling.
5. WE DO NOT SELL CUSTOMER NETWORK DATA
CAST does not sell customer network logs, security information, configurations, monitoring information, or other confidential information obtained while providing CAST monitoring and support services.
CAST does not use customer monitoring information as a commercial data product.
6. WHEN INFORMATION MAY BE SHARED
CAST may share limited information with third-party service providers when reasonably necessary to operate our business or provide customer services.
These providers may include companies that provide:
- Website hosting and ecommerce services
- Payment processing
- Shipping and fulfillment
- Email or communications
- Cloud services
- Network and security platforms
- Business administration
- Professional legal, accounting, or insurance services
CAST seeks to limit information shared with service providers to information reasonably necessary for the applicable service.
Information may also be disclosed when CAST reasonably believes disclosure is required by applicable law, subpoena, court order, legal process, or lawful governmental request.
Information may also be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to applicable law.
7. THIRD-PARTY PLATFORMS
CAST products and services may use technology or cloud services provided by third-party manufacturers and service providers.
Those providers may process information according to their own privacy policies, terms, and security practices.
CAST does not control the privacy practices of independent third-party websites or services.
Our website may also contain links to external websites. Visiting those websites is subject to the privacy practices of those organizations.
8. COOKIES AND WEBSITE ANALYTICS
The CAST website may use cookies and similar technologies necessary to operate the website, remember preferences, maintain security, understand website usage, and improve visitor experience.
Third-party services integrated into our website may also collect information about website interactions according to their respective privacy practices.
Where required by applicable law, visitors may be provided choices concerning certain cookies or tracking technologies.
9. ONLINE ACTIVITY AND THIRD-PARTY TRACKING
Third-party website, ecommerce, analytics, advertising, social-media, or other integrated services may collect information about visitors' online activities over time and across different websites or online services when those technologies are enabled on the CAST website.
Such collection is governed by the applicable third party's privacy practices and the choices made available through CAST's website or the third-party service.
CAST will update this Privacy Policy as appropriate when material changes are made to the technologies used on our website.
10. DATA SECURITY
CAST takes reasonable administrative, technical, and organizational measures designed to protect information under our control against unauthorized access, disclosure, alteration, loss, or misuse.
Where appropriate, these measures may include:
- Access controls
- Strong authentication
- Multi-factor authentication
- Least-privilege administrative access
- Secure remote-management practices
- Administrative logging
- Network security controls
- Data minimization
- Limiting access to personnel who require it
No network, computer system, website, cloud service, or method of electronic storage can be guaranteed to be completely secure.
Accordingly, CAST cannot guarantee absolute security.
The FTC recommends that businesses understand what sensitive information they possess, retain only what they need, protect what they keep, securely dispose of information no longer required, and prepare for security incidents.
11. DATA RETENTION
CAST retains personal and business information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining appropriate business records, resolving disputes, maintaining security, and satisfying legal or contractual obligations.
Network and security logs may have different retention periods depending on the service, platform, security requirements, and customer agreement.
Information that is no longer reasonably required may be deleted, anonymized, or otherwise disposed of as appropriate.
12. CUSTOMER ACCESS AND CORRECTIONS
Customers may contact CAST to request access to or correction of certain personal information maintained directly by CAST.
CAST may take reasonable steps to verify the identity and authority of the person making the request before providing or changing information.
Some information may need to be retained for legal, security, transactional, contractual, or legitimate business purposes.
Requests may be submitted through the contact information provided below.
13. NEVADA PRIVACY REQUESTS
Nevada residents may have rights concerning certain covered information under Nevada law.
Where applicable, a Nevada consumer may submit a verified privacy request to CAST using the contact information provided in this Privacy Policy.
CAST will review and respond to qualifying requests in accordance with applicable Nevada law.
14. HEALTHCARE AND REGULATED INFORMATION
CAST's general website and standard services are not intended as a method for submitting protected health information, financial account credentials, Social Security numbers, passwords, or other highly sensitive information unless CAST has specifically requested the information through an appropriate method.
Healthcare customers whose services require CAST to create, receive, maintain, or transmit Protected Health Information ("PHI") or electronic Protected Health Information ("ePHI") may require a separate Business Associate Agreement (BAA).
Other regulated businesses may require additional contractual or security provisions depending on their legal and regulatory requirements.
15. CHILDREN'S PRIVACY
CAST provides business technology products and services and does not knowingly market its services to children under 13.
Our website and services are not intended to collect personal information from children under 13.
16. BUSINESS CUSTOMER RESPONSIBILITIES
CAST customers are responsible for ensuring that their own use of their network, employee systems, customer information, monitoring technologies, and CAST services complies with laws and regulations applicable to their business.
Customers are also responsible for informing their employees, users, customers, or other individuals about monitoring or data-processing activities when required by applicable law.
17. CHANGES TO THIS PRIVACY POLICY
CAST may update this Privacy Policy periodically to reflect changes in our services, technology, business practices, or legal requirements.
When material changes are made, CAST will update the "Last Updated" date displayed at the top of this policy and may provide additional notice when appropriate.
We encourage visitors and customers to periodically review this Privacy Policy.
18. EFFECTIVE DATE
This Privacy Policy is effective as of:
September 20, 2026