Privacy Policy

Last Updated: May 13, 2026

Introduction

CHAOS Industries, Inc. (“CHAOS,” “we,” “us,” or “our”) is committed to respecting the privacy of visitors to our public-facing websites and to complying with all applicable federal, state, and international privacy laws and regulations. This Website Privacy Notice (“Notice”) describes how we collect, use, disclose, and protect personal information obtained through our public websites, and explains your rights and choices with respect to that information.

CHAOS is a business-to-government (“B2G”) and business-to-business (“B2B”) provider of products and services to government agencies, defense industrial base participants, and other organizational customers. We do not direct our websites or services to individual consumers for personal, family, or household purposes.

Please read this Notice carefully. By continuing to use our websites after this Notice has been posted or updated, you acknowledge that you have read and understood it. For EU/UK visitors, where applicable law requires a different legal basis for processing, we rely on the bases identified in Section 5 rather than on deemed acceptance.

1. Scope of This Notice

This Notice applies to personal information we collect through:

Our public websites linking to this Notice, including chaosinc.com and related subdomains (the “Sites”);
Online forms, contact pages, resource download pages, and event registration pages hosted by us; and
Email and other electronic communications you initiate with us in connection with the Sites.

This Notice does not apply to:

Information we process strictly as a service provider or data processor within deployed operational environments on behalf of a government agency or other customer — such processing is governed by the applicable customer contract and any privacy notices the customer provides;
Third-party websites, applications, or services that may be linked to or from the Sites, even if accessed directly from our Sites;
Internal CHAOS networks, systems, or services not linked to this Notice; and
Employment-related information, which is covered by separate notices provided to applicants and employees.

Where CHAOS acts as a data processor or service provider on behalf of a customer (such as a government agency or defense contractor), we process personal information only as directed by that customer and in accordance with our contractual obligations. For information about how such customer data is handled, please refer to the relevant customer’s privacy notice.

2. Personal Information We Collect

We may collect the following categories of personal information:

Category	Examples
Contact and Professional Information	Name, business email address, business telephone number, company or agency name, job title or role, and professional affiliation.
Communications and Inquiry Content	Information you provide when contacting us through web forms or email, including the subject and content of your message, the nature of your inquiry, and any attachments you choose to include.
Usage and Technical Information	IP address, browser type and version, operating system, device type and identifiers, referring URLs, pages viewed, links clicked, time and duration of visits, and other information about how you navigate and interact with the Sites (see Section 4).
Business Relationship Information	Information about your organization's interest in or engagement with our capabilities and programs, such as the mission areas, programs, or contract vehicles you inquire about, and related correspondence.
Sensitive Personal Information	We do not seek or intentionally collect sensitive categories of personal information (such as government identification numbers, financial account information, health data, or information about security clearances) from visitors to the public Sites. If you choose to include such information in a free-text field, we will handle it in accordance with this Notice and applicable law, but we strongly encourage you not to submit sensitive personal information through public-facing web forms.

3. How We Collect Personal Information

Information You Provide Directly

We collect personal information that you voluntarily provide when you fill out contact or inquiry forms; register for events, briefings, webinars, or to download materials; subscribe to updates or communications; or send us emails or other correspondence.

Information Collected Automatically

When you visit the Sites, we automatically collect certain usage and technical information through cookies, server logs, web beacons, and similar technologies. See Section 4 for more detail.

4. Cookies, Analytics, and Advertising Technologies

Cookies and Automated Collection

We use cookies, web beacons, and server log files on the Sites. Cookies are small text files placed on your device that allow us to recognize your browser and retain certain information about your visit. Web beacons are small image files embedded in web pages that help us understand how visitors interact with our content. Server logs capture technical data about each request made to our servers.

Strictly Necessary Cookies

Certain cookies are essential for the Sites to function and cannot be switched off. They are set in response to actions you take, such as navigating between pages, accessing a secure area, or submitting a form. The Sites may not function correctly if these cookies are disabled.

Analytics Technologies

We use third-party web analytics services to help us understand how visitors interact with the Sites. These services use cookies and similar technologies to collect information such as pages viewed, time spent on pages, referring URLs, approximate geographic location, device type, and browser type. Full IP addresses are not retained. The information collected is used to evaluate site usage, improve content and performance, and measure the effectiveness of our communications.

Analytics providers we use operate as independent data controllers with respect to certain data they collect and are subject to their own privacy policies. A current list of the analytics providers active on the Sites, along with links to their privacy policies and applicable opt-out mechanisms, is maintained at chaosinc.com/cookie-policy.

You may also opt out of analytics data collection by configuring your browser to block or delete cookies, or by using any opt-out tool referenced in our Cookie Policy. Our Sites are not designed to respond to “Do Not Track” (DNT) browser signals.

Advertising and Measurement Technologies

We may use third-party advertising and measurement technologies on the Sites, including conversion tracking pixels, retargeting tags, and similar tools provided by digital advertising platforms. These technologies may collect information about your visits to the Sites such as pages viewed, referring URLs, anonymized IP address, and browser characteristics; and use that information to measure the effectiveness of our advertising, enable us to reach prior visitors on third-party platforms, and provide aggregated audience insights. No personally identifiable information is shared with advertising platforms through these technologies.

Each advertising platform we use operates under its own privacy policy and data practices. A current list of the advertising technologies active on the Sites, along with links to each provider’s privacy policy and opt-out mechanism, is maintained at chaosinc.com/cookie-policy.

To opt out of interest-based advertising generally, you may also visit the Digital Advertising Alliance opt-out tool at https://optout.aboutads.info or the Network Advertising Initiative opt-out tool at https://optout.networkadvertising.org.

Your Cookie Choices

Most web browsers allow you to control cookies through your browser settings, including blocking all cookies, blocking cookies from specific sites, or deleting existing cookies. Please note that disabling certain cookies may affect the functionality of the Sites. You may also manage your preferences at any time using the "Cookie Preferences" tool in the website footer.

Because we do not sell or share personal information for cross-context behavioral advertising, we do not offer a “Do Not Sell or Share My Personal Information” link on the Sites.

5. How We Use Personal Information

We use personal information collected through the Sites for the following purposes:

To operate, maintain, and improve the Sites, including analyzing usage patterns to improve content, usability, and performance;
To respond to your inquiries, fulfill your requests, and provide information about our capabilities;
To manage registrations for events, briefings, demonstrations, and webinars;
To develop and manage business relationships with customers and partners;
To communicate with you about matters relevant to our business relationship, including updates to programs or capabilities in which you have expressed interest, where permitted by applicable law;
To monitor, detect, investigate, and respond to security threats, unauthorized access, fraud, and other misuse of the Sites;
To comply with applicable laws, regulations, legal processes, and enforceable governmental requests;
To establish, exercise, or defend legal claims;
For any other purpose for which we provide specific notice at the time of collection, or for which you have given your consent.

For individuals in the EEA and UK, we process personal information: (a) where it is in our legitimate interests to operate, secure, and improve our Sites and manage our business relationships; (b) where it is necessary to comply with our legal obligations or to handle legal claims; and (c) where you have given us your consent, for example for non‑essential cookies, certain analytics, or other optional communications. We do not use personal information collected through the Sites to make automated decisions that produce legal or similarly significant effects concerning individuals without appropriate safeguards.

You can withdraw your consent at any time, without affecting processing that has already taken place.

6. How We Share Personal Information

We do not sell, rent, or otherwise disclose personal information collected through the Sites for monetary consideration, and we do not share such information for cross-context behavioral advertising. We may share personal information in the following circumstances:

Service Providers

We engage trusted third-party service providers to perform services on our behalf, including website hosting and infrastructure, analytics, email delivery, customer relationship management, and event management. These providers may access personal information only as necessary to perform their contractual functions and are required to protect it appropriately and not use it for any other purpose.

Your Organization

If you interact with us as a representative of a government agency, prime contractor, subcontractor, or other organizational customer, we may share information about those interactions with that organization, for example to coordinate responses, manage the business relationship, or fulfill contractual obligations.

Business Transactions

In connection with a proposed or completed merger, acquisition, asset sale, joint venture, reorganization, financing, or similar transaction involving CHAOS or its assets, personal information may be disclosed to the parties involved and their advisors, subject to appropriate confidentiality obligations. If a transaction is completed and your personal information is transferred as part of it, the successor entity will be required to handle your personal information in accordance with this Notice or provide you with notice of any material changes.

Legal, Safety, and Compliance Disclosures

We may disclose personal information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request; to enforce our agreements, terms, or policies; to investigate suspected fraud, security incidents, or violations of law; or to protect the rights, property, or safety of CHAOS, our customers, employees, or others.

Affiliates

We may share personal information with CHAOS corporate affiliates and subsidiaries for the purposes described in this Notice, subject to appropriate confidentiality protections.

With Your Consent

We may share personal information with other third parties when you have requested or consented to such sharing. We may share aggregated, de-identified, or anonymized data that does not reasonably identify you with third parties for any purpose permitted by applicable law.

7. Cross-Border Data Transfers

CHAOS is headquartered in the United States. Personal information we collect may be processed and stored in the United States or in other countries where we or our service providers operate. If you access the Sites from outside the United States, your personal information may be transferred to and processed in a country whose data protection laws differ from those in your country of residence. CHAOS will transfer personal information in a manner adequately protecting such information, in accordance with applicable law. We may rely on safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or other lawful transfer mechanisms, to help ensure an equivalent level of protection for your personal information.

8. Third-Party Links and Content

The Sites may contain links to third-party websites, partner portals, or resources not operated by CHAOS. These links are provided for your convenience and do not constitute an endorsement of those sites or their content. We are not responsible for the privacy practices or content of third-party sites. We strongly encourage you to review the privacy notices of any websites you visit, particularly before submitting any personal information.

9. Security of Personal Information

We implement and maintain administrative, technical, and physical safeguards designed to protect personal information against accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, or access.

No method of data transmission over the Internet or method of electronic storage is completely secure. While we strive to apply protections consistent with the sensitivity of the information and the nature of our operations, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials and for using appropriate protective measures when communicating with us electronically.

10. Retention of Personal Information

We retain personal information collected through the Sites for as long as reasonably necessary to fulfill the purposes described in this Notice.

Retention periods vary depending on the nature and context of the information. The criteria we use to determine how long to retain personal information include: the purpose for which the data was collected and whether that purpose has been fulfilled; our contractual and regulatory obligations; applicable statutes of limitations and legal claim periods; and whether the data is needed to establish, exercise, or defend legal claims. When personal information is no longer needed for a legitimate purpose, we delete it, de-identify it, or otherwise dispose of it in a secure manner.

11. Your Rights and Choices

General Rights

Because the Sites are directed primarily to professionals acting on behalf of government agencies, contractors, and other organizations, many privacy rights relating to operational data will be exercised through your organization under its own policies and the applicable contract. To the extent that applicable law grants individual rights directly to you as a website visitor or direct business contact, those rights may include the right to know and access personal information we hold about you; the right to request correction or deletion of certain personal information; the right to object to or restrict certain processing; the right to data portability where provided by law; the right to withdraw consent; and the right to lodge a complaint with a competent data protection authority.

We will respond to verifiable requests consistent with applicable law and our contractual obligations. To submit a request, please contact us as described in Section 14 below. We may need to verify your identity and, in some cases, your organizational affiliation before fulfilling a request. We will not discriminate against you for exercising any rights available under applicable law.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, “California Privacy Law”). Because our public Sites are directed to organizational and government audiences and we do not sell or share personal information for cross-context behavioral advertising, many CCPA/CPRA provisions applicable to consumer-facing businesses do not apply to the information we collect through the Sites. However, to the extent California Privacy Law applies to information we collect about you as a California resident, you may have the right to request access to, deletion of, or correction of your personal information, and the right to know the categories of personal information we collect and with whom we share it. To submit a California Privacy Law request, contact us as described in Section 14.

UK and EU/EEA Residents

If you are located in the United Kingdom or the European Economic Area, you have the following rights under UK GDPR and EU GDPR in respect of personal data we may hold about you as a controller:

Right of access: you may request confirmation of whether we process your personal data and, where applicable, a copy of that data and related information about how it is processed.
Right to rectification: you may request correction of inaccurate personal data and completion of incomplete data.
Right to erasure: you may request deletion of your personal data in certain circumstances, such as where it is no longer necessary for the purpose for which it was collected or where you have withdrawn consent.
Right to restriction of processing: you may request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a copy of the personal data you provided in a structured, commonly used, machine-readable format and, where technically feasible, the transfer of that data to another controller.
Right to object: you may object to processing based on legitimate interests as our legal basis; we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.
Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Right to lodge a complaint: you may lodge a complaint with the supervisory authority in your country of residence, place of work, or the place of the alleged infringement. In the United Kingdom, this is the Information Commissioner’s Office (ico.org.uk); in the EU, the authority in your Member State. We encourage you to contact us first using the details in Section 14 so we may address your concern directly.

To exercise any of these rights, please contact us as described in Section 14. We will respond to verifiable requests within the timeframes required by applicable law.

Communications Preferences

If you have subscribed to communications from us (such as updates, newsletters, or event announcements), you may unsubscribe or update your preferences by following the instructions in the relevant communication or by contacting us as described in Section 14.

12. Children’s Privacy

The Sites are directed to adults acting in a professional or governmental capacity and are not intended for use by children. We do not knowingly collect personal information from individuals under 16 years of age through the Sites. If we become aware that we have inadvertently collected personal information from a child under 16, we will take prompt steps to delete that information. If you believe we may have collected personal information from a child under 16 through the Sites, please contact us as described in Section 14. We do not anticipate collecting personal information from minors in any jurisdiction.

13. Updates to This Notice

We may update this Notice periodically to reflect changes in our privacy practices, legal requirements, or business operations. When we update this Notice, we will revise the “Last Updated” date at the top and post the updated version on this page. We will not make the updated Notice apply retroactively to previously collected personal information in a way that materially reduces your rights without providing appropriate notice.

If we make material changes to how we collect or use personal information through the Sites, we may provide additional notice, such as a prominent disclosure on the Sites for a reasonable period. Your continued use of the Sites following the posting of updates constitutes your acceptance of the updated Notice.

Note that changes to our active analytics and advertising vendors are reflected in our Cookie Policy at chaosinc.com/cookie-policy and do not constitute a material change to this Notice requiring separate notification.

14. How to Contact Us

If you have questions about this Notice or our privacy practices, wish to exercise a privacy-related right, or want to submit a complaint, please contact us:

CHAOS Industries, Inc. Privacy Team

Email: privacy@chaosinc.com

Mail:

CHAOS Industries, Inc.
Attn: Privacy Team
12831 Weber Way
Hawthorne, CA 90250

We will investigate and endeavor to respond to all privacy inquiries and complaints promptly and in accordance with applicable law. Where you are located in a jurisdiction with a supervisory authority or data protection regulator, you also have the right to lodge a complaint with that authority if you are not satisfied with our response.

If you are a user or contact associated with a CHAOS customer organization (for example, a government agency or defense contractor), you may also wish to raise privacy-related concerns directly with your organization’s designated privacy, legal, or security representative.