ADR Data Recovery
Privacy Policy
Effective and last updated: October 5, 2026
This policy explains how ADR Data Recovery (“ADR,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information through adrdatarecovery.com, our emergency-intake process, and related communications. It does not replace any confidentiality, custody, security, or data-processing terms agreed for a specific recovery engagement.
Information we collect
Information you provide
When you call, submit an emergency intake, communicate with ADR, or engage our services, we may collect:
- name, company, telephone number, email address, and preferred contact method;
- system, server, controller, storage, platform, RAID-level, drive-count, and capacity information;
- failure symptoms, actions already taken, operational impact, urgency, and custody or remote-access requirements;
- service context, requested work, authorization, delivery instructions, and communications about the matter;
- billing, payment, shipping, and transaction records when required for an engagement; and
- other information you choose to provide.
Information collected through the website
Our web server, security tools, WordPress installation, and service providers may process technical information such as IP address, browser and device information, request time, pages requested, referring page, error information, and security events. Emergency-intake submissions may also include the landing page, referring URL, campaign parameters, form version, and service context associated with the submission.
ADR’s internal conversion measurement records limited events such as a telephone-link click, triage start, submission attempt, or completed intake together with the internal page path and link placement. That measurement is designed not to include contact details, failure symptoms, referrers, IP addresses, user-agent strings, or persistent visitor identifiers.
How we use information
We use information to:
- respond to inquiries and contact authorized representatives about a recovery request;
- evaluate the reported failure, identify appropriate technical and custody requirements, and plan or provide requested services;
- create and administer case records, communications, work authorizations, billing, delivery, and support;
- protect source media, systems, accounts, the website, and our operations from misuse, fraud, or security threats;
- maintain, troubleshoot, measure, and improve the website and intake process;
- comply with law, enforce agreements, and establish, exercise, or defend legal claims; and
- carry out another purpose disclosed when the information is collected or authorized by you.
Emergency-intake records
A submitted emergency intake is stored as a restricted case record within ADR’s WordPress administration system and is sent by email to the configured ADR intake recipient. The record may include the contact, system, failure, business-impact, custody, referrer, and campaign information described above. Access should be limited to people who need the information to review, administer, secure, or provide the requested service.
The form uses a short-lived, one-way value derived from the submitting IP address to limit repeated submissions. The conversion-reporting feature is intentionally designed not to store the submitter’s IP address or a persistent visitor identifier.
Cookies and similar technologies
The public site may use cookies or similar browser storage when needed for WordPress administration, logged-in sessions, security, form operation, preferences, or other essential site functions. Third-party content or services, if added or enabled, may use their own technologies under their respective policies.
At the time of this policy update, our review of anonymous public pages found no Google Analytics, Meta Pixel, Microsoft Clarity, Hotjar, or Matomo tracking code and no cookie set in the initial anonymous response. Site configuration can change; this policy will be updated if ADR begins using materially different analytics or advertising technology.
When we disclose information
ADR may disclose information only as reasonably necessary to:
- hosting, email, communications, security, payment, shipping, accounting, IT, and other service providers that support our operations;
- qualified recovery, physical-media, firmware, electronics, cleanroom, or other specialists when a case requires that work and the disclosure is authorized or otherwise permitted by the engagement;
- authorized contacts designated by the client;
- government authorities, courts, or other parties when required by law or reasonably necessary to protect rights, safety, systems, or evidence; and
- a successor or prospective successor in a merger, acquisition, financing, reorganization, or transfer of all or part of the business, subject to appropriate safeguards.
ADR does not sell personal information and does not disclose personal information for cross-context behavioral advertising.
Recovery media and recovered data
Source media, protected images, recovered files, database contents, credentials supplied through an approved channel, and other case data may contain personal or confidential information belonging to the client or third parties. Their handling depends on the engagement, client instructions, technical requirements, custody arrangements, applicable law, and any written service terms. Website forms are not an approved channel for transmitting recovered files or confidential file contents.
Retention
ADR retains personal information only for as long as reasonably necessary for the inquiry or engagement, operational and security needs, contractual and accounting records, dispute resolution, legal obligations, and the establishment or defense of claims. Retention may differ for intake records, correspondence, transaction records, technical logs, source media, working images, and recovered data. When information is no longer required, ADR may delete, anonymize, or securely dispose of it, subject to technical and legal limitations.
Security
ADR uses administrative, technical, and physical safeguards appropriate to the nature of the information and the service. These may include encrypted web transport, access controls, restricted case administration, source-preservation procedures, and case-specific handling requirements. No internet transmission, email system, storage system, or security measure can be guaranteed completely secure. Contact ADR before sending sensitive information so the appropriate method can be selected.
Your choices and privacy requests
Subject to applicable law and appropriate identity verification, you may ask ADR to provide information about personal information associated with you, correct inaccurate information, or delete information that is no longer required. Legal, contractual, security, evidentiary, and operational exceptions may apply.
To make a privacy request, call 1-800-228-8800 and state that the call concerns a privacy request. ADR may request information necessary to verify your identity and locate the relevant records. We will use verification information only for processing and documenting the request.
ADR will not discriminate against a person for exercising a privacy right provided by applicable law.
Children
This website and ADR’s recovery services are directed to businesses, organizations, IT professionals, and adults seeking technical services. They are not directed to children, and ADR does not knowingly collect personal information from children through the website.
External services and links
The site may link to external websites, downloads, or services that ADR does not control. Their privacy and security practices are governed by their own terms and policies.
Changes to this policy
ADR may update this policy to reflect changes in site functionality, service practices, vendors, or law. The effective date above identifies the current version. Material changes will be posted on this page.
Contact ADR
For questions about this policy or ADR’s handling of personal information, call 1-800-228-8800. For an active recovery matter, identify the case number if one has been assigned, but do not disclose passwords, encryption keys, or confidential file contents during an initial privacy inquiry.