Privacy Policy

Our Services

The Web Holding Services, LLC d/b/a The Spider Services and its subsidiaries Spider Computing Services, LLC, Spider Consulting Services, LLC, and Spider Security Services, LLC (collectively, “The Spider Services” or “Services”) provides security focused services for small and medium sized businesses and individuals. Our goal is to provide services to clients while minimizing the amount of personally identifiable information (“PII”) we collect and store about our clients. When possible, collected data is anonymized and consolidated with information from other clients to reduce the ability to identify individual clients or users.

What data we collect

Each of our Services collects information to provide and improve the service. This data includes, but is not limited to:

  • Customer names
  • IP addresses
  • Email addresses
  • Network activity
  • Application usage
  • Security camera footage

While we do accept online payments, we DO NOT collect or store credit card or banking data. Online payments are handled by our online payment providers Invoice Ninja, who provides the payment interface, and Stripe, who processes the payments. The Spider Services only receives a reference number and does not know your financial information.

How we protect data

Each of our Services depends on some level of access to private or confidential client data. While in our possession, we commit to the following:

  • All: Restricting access to client data to those with a business need,
  • All: Utilizing SSL/TLS encryption to access any website containing client data,
  • All: Utilizing full disk encryption or file level encryption anywhere client data is stored,
  • All: Restricting file transfers to approved file transfer services where data is encrypted in transit and at rest,
  • All: Requiring non-disclosure agreements with any employee or contractor that may have access to client data or environments,
  • Spider Computing Services: Enabling encryption anytime client data leaves a managed server,
  • Spider Security Services: Sanitizing and correlating logs containing identifiable information,
  • Spider Security Services: Expiring and removing unsanitized logs within 24 hours of correlation. Some unsanitized logs may continue to exist in encrypted backups until the backup is replaced.
  • Spider Security Services: Restricting access to security camera feeds to those required to perform installation, management, tuning, and repair of cameras while necessary to perform those tasks and logging access each time such access is utilized.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

We attempt to minimize those we share your personal information with outside of The Spider Services. In some cases, we utilize services to improve and supplement the services we provide. In these cases we attempt to sanitize information to prevent it from being associated with clients. We do not share specific network activity or application usage that can be attributed to a specific individual or client, except when required by law.

How long we retain your data

We store and utilize sanitized information for as long as necessary to improve the services we provide. Unsanitized information is deleted within 24 hours of being sanitized.

We may continue to store sanitized and unsanitized personal information and client data beyond the expiration date in encrypted backups. Encrypted backups are periodically replaced and deleted.

What rights you have over your data

Due to the nature of our services we are unable to provide access to data we have collected, except:

  • Spider Computing Services: Managed server backups containing encrypted and unencrypted data,
  • Spider Security Services: Security camera recordings that have not expired.

Updates

We will periodically update this policy to account for changes to our services. The last update was on February 18th at 4:28pm CST.