Privacy Policy

Scope of this policy

This policy is effective October 1, 2026. It states the categories of personal information GeoTek collects from visitors to geotekusa.com, from persons who submit the contact form, and from persons who submit a job application. It also states the purposes of that collection, the parties to whom the information is disclosed, the period for which it is retained, and the technical controls applied to it.

Categories and sources

GeoTek collects the following categories of personal information.

• Identifiers, including name, email address, telephone number, and Internet Protocol address.
• Professional and employment information, including company name, a resume or other file, and the answers on a job application.
• Internet activity, including the page requested, the user-agent string, a careers referral source code, and page-view timing.
• Sensitive personal information, limited to voluntary demographic information and disability information when a job posting requests it. GeoTek uses that information only to evaluate the application.

GeoTek collects this information from the person who submits a form, from the browser through the HTTP request and the analytics script, and from the questions published on a job posting.

Information collected with each request

Each HTTP request to the site transmits the client Internet Protocol address, the user-agent string, the URL requested, and the date and time of the request. GeoTek uses those values to deliver the requested page, to apply rate limits to public forms, and to investigate errors written to server logs. The public site is served over HTTPS.

A public page that does not present a form may be served without creating a session. GeoTek creates a server-side session when a visitor opens the contact form or a job application, because those pages require a cross-site request forgery token, and when a visitor follows a careers link that carries a referral source code. Where that code is present, GeoTek stores it in the session so that it remains available after the query string is removed from the address.

Website analytics

GeoTek uses Cloudflare Web Analytics to measure page views on the public site and the load timing of those pages. A script executed in the browser reads timing entries from the browser Performance API for the current page view and transmits those entries to Cloudflare. The script does not set a cookie, does not write to browser storage, and does not retain data on the device. Cloudflare receives the client Internet Protocol address as part of that HTTP request and discards the address at the data center that receives it. Cloudflare does not use the measurements to identify a visitor across other websites.

Cloudflare retains the unsampled measurements for 7 days. After that period, Cloudflare retains an aggregated subset. The aggregated figures remain available for six months.

Cloudflare also terminates and caches requests to the public site. For each request it serves, Cloudflare records the URL, the user-agent, and the time of the request.

No third party collects personal information about a visitor's activity over time and across other websites or online services when the visitor uses this site. GeoTek does not track visitors across other companies' websites.

Contact form

The contact form collects the sender's name, email address, telephone number, company name, the GeoTek office selected as the recipient, the service requested, the project location where the inquiry concerns a project, and the text of the message.

GeoTek transmits the submission by email to the office the sender selected. Where acknowledgement mail is enabled, GeoTek also transmits a confirmation to the email address the sender supplied. The website does not write the submission to its database. The receiving mailbox retains the message.

Before GeoTek accepts a submission, the browser completes a Cloudflare Turnstile challenge, and the server verifies the resulting token with Cloudflare. Cloudflare receives the technical data required for that verification. The form includes a field that is not displayed to a person, and a submission that populates that field is rejected. Submissions are also subject to a rate limit applied to the source Internet Protocol address.

Job applications

A job application collects the fields published on that posting. Those fields ordinarily include legal name, preferred name, email address, telephone number, a resume or other uploaded file, and the applicant's answers to the posting's questions. Where the posting requests it, the application also collects voluntary demographic information and disability information. That information is sensitive personal information. GeoTek uses it only to evaluate the application and does not use it for any other purpose.

GeoTek transmits the application, together with the applicant's Internet Protocol address, to the Greenhouse Job Board API. Greenhouse stores the application. The website does not retain a copy in its database. After transmission, the privacy terms of Greenhouse govern the application record. The application form is subject to the same Cloudflare Turnstile verification as the contact form.

Cookies

The contact form and the job application set cookies that are required before a submission can be accepted. A separate cookie records whether the visitor accepted or denied optional cookies for the current browser session. GeoTek does not set advertising cookies and does not load social media pixels. Cloudflare Web Analytics does not set a cookie.

Session

This cookie is essential and remains until the session expires. It holds an identifier for a server-side session record. GeoTek encrypts the session payload with the application encryption key before that record is written to storage. The record contains the cross-site request forgery token and, where the visitor arrived by a careers link that included one, the referral source code. The cookie is marked HTTP-only, so that page scripts cannot read it, and it is transmitted with SameSite set to Lax. Public pages that do not require a session do not set this cookie.

XSRF-TOKEN

This cookie is essential and remains until the session expires. It holds the cross-site request forgery token used to reject a form submission that did not originate on this site.

cookie_consent

This cookie remains for the browser session. It stores the value accepted or denied, so that the consent banner is not presented again during that session.

Purposes of collection

GeoTek uses the personal information described in this policy for the following purposes.

• To respond to a contact submission.
• To receive a job application and route it to recruiting.
• To operate and secure the public website.
• To measure page views and page-load timing on the public site.
• To detect and limit automated or excessive submissions to the contact form and the job application.

Disclosure

In the preceding 12 months, GeoTek has not sold personal information and has not shared it for cross-context behavioral advertising. GeoTek does not sell personal information, and GeoTek does not share it for that purpose.

A contact submission is disclosed by email to the GeoTek office the sender selected. A job application is disclosed to Greenhouse for review by recruiting.

GeoTek also discloses information to the following service providers, which process it only for the purposes stated.

• Greenhouse, which receives and stores job applications submitted through the Job Board API.
• Cloudflare, which verifies Turnstile tokens on the contact form and the job application, caches and delivers public pages, and processes website analytics.
• The email system GeoTek uses to deliver contact submissions and acknowledgement messages.

Retention

A contact submission is retained in the mailbox that received it, for so long as that mailbox retains the message.

A job application is retained by Greenhouse. This website does not store a copy.

Where a session has been created, the associated record, including the client Internet Protocol address and user-agent, is retained until the session expires. The payload of that record is encrypted. The consent cookie expires when the browser session ends. Server logs are retained for the period GeoTek uses them to operate and secure the site. Cloudflare retains detailed analytics measurements for 7 days and thereafter retains a smaller aggregated set for six months.

Security

GeoTek encrypts each session payload with the application encryption key before the record is written to storage. The session cookie is HTTP-only and is transmitted with SameSite set to Lax. The contact form and the job application require a valid cross-site request forgery token. A submission is not accepted unless Cloudflare Turnstile verifies it.

Requests concerning personal information

A visitor may accept or deny optional cookies in the banner. That choice applies for the current browser session. The contact form and the job application continue to set the session cookie and the cross-site request forgery cookie, because a submission cannot be accepted without them.

A person may request access to personal information GeoTek holds from a contact submission, correction of that information, or deletion of it. GeoTek will not deny service, charge a different price, or provide a different level of service because a person made a request. Submit a request by email to [email protected] or by telephone at 702-897-1424. GeoTek will deny a request where the law requires the information to be retained. A job application is held by Greenhouse, and a request concerning that record is governed by Greenhouse after GeoTek transmits it.

A California resident may use either method above to submit a request to know, to delete, or to correct personal information.

Changes to this policy

GeoTek notifies visitors of a material change by posting the revised policy on this page and updating the effective date stated in this policy. Where a revision changes the use of personal information already collected, GeoTek will take any additional step the applicable law requires.

Contact