OPENIOC.ORG

PRIVACY POLICY

LAST UPDATED ON NOVEMBER 1, 2011

OpenIOC.org (“OpenIOC”) is a website provided by Mandiant Corporation. This notice describes our privacy policy as it pertains to the web pages located at OpenIOC.org (the “Website”). We may from time-to-time revise this privacy policy, and the date of last revision will be available at the top of this page, so please be sure to check back periodically. By using the Website, you are acknowledging and accepting this Privacy Policy. Your continued use of the Website after changes have been posted to the Privacy Policy will constitute your acceptance of such changes.

What information we collect: We may ask for and collect from you personally identifiable and other information at certain points throughout the Website. Depending on the information and/or services you request, you may be asked to provide your name, email address and other information.

In addition to the information you knowingly provide, we collect the domain names and IP addresses of our visitors, along with usage statistics (e.g., types of web browsers and operating systems used) and browsing history. This data is used to operate more efficiently the Website and administer the Website. We may combine this information with the personally identifiable and other information we collect.

How we use your information: We may use your information:
• To provide you with personalized content.
• To process and respond to inquiries.
• For the purposes for which you provided the information.
• To improve the content and navigability of the Website.
• To alert you about new features, special events and important announcements.
• To enforce the Terms of Use.

Information Sharing with Third Parties: We may disclose your personally identifiable and other information to another entity (i) for purposes of outsourcing one or more of the Website functions or functions described in the previous section; (ii) to confirm or update information provided by you; or (iii) to inform you of important information. We may also share your information in response to a subpoena, legal order or official request, when we believe you have acted in violation of the Terms of Use, or when we believe that doing so may protect your safety or the safety of others.

Sharing and use of de-identified information: We may use information that is de-identified (stripped of any information that could be used to identify you) for any reason and shared freely with third parties.

How we collect information: In addition to the methods described above, we may also collect information using cookies, web beacons or similar technologies. These methods permit us to collect various types of information, including which pages you visit and other information.

How we protect information: Our servers are protected by reasonable physical and electronic security measures.

How you can view or update your personal or financial information: To ensure that you have as much control over your personally identifiable and other information as possible, you may update your information by contacting us using the information under the “Contacts” section below. We will use reasonable efforts to process any change you make; provided, however, that requests to delete information are subject to our internal reporting and retention policies and all applicable legal obligations.

Links: The Website may contain links to third-party websites. We are not responsible for the privacy practices or the content of such websites.

Contact: If you have any questions, concerns, or suggestions regarding this Privacy Policy, please contact us by email at legal @ mandiant.com.