Privacy Policy

UPDATED: NOVEMBER 14 2023

Our Commitment to Privacy

The Information We Collect

This notice applies to all information collected or submitted on the CoreSite website and at our facilities. On some pages, you can contact representatives of CoreSite, order services, make requests, and request to receive materials. CoreSite does not collect information on its website. However, in order to obtain a password to utilize automated service requests, you must register with CoreSite and will be required to provide information including your name, address, email address, phone number, and related information. In addition, when you contact CoreSite and request information, you may be asked to provide your name, address, email address, phone number and other contact information. All of this information is provided in separate communications from our website.

In addition, we automatically gather general statistical information about our website and visitors, such as IP addresses, browsers, pages viewed, number of visitors, goods and services purchased, etc., but in doing so we do not reference you by individual name, e-mail address, home address, or telephone number. We use this data in the aggregate to determine how much our customers use parts of our site so we can improve our site. We may provide this statistical information to third parties, but when we do so we do not provide personally-identifying information without your permission. 

As part of our service, we use cookies to store and sometimes track information about you. A cookie is a small amount of data that is sent to your browser from a web server and stored on your computer's hard drive.

Generally, we use cookies to remind us who you are and enable us to access your account information so you do not have to re-enter it; gather statistical information about usage by registered or unregistered users, research visiting patterns, and help target advertisements based on user interests; and track progress and participation in promotions.

Preference and options configurations in your browser determine if and how a cookie will be accepted. You can change those configurations on your computer if you desire. By changing your preferences, you can accept all cookies, you can be notified when a cookie is set, or you can reject all cookies. If you do so and cookies are disabled, you may be required to re-enter your information more often and certain features of our site may be unavailable.

The Way We Use Information

We use the information you provide about yourself when placing an order to complete that order. We do not share this information with outside parties except to the extent necessary to complete that order. 

We use return email addresses to answer the email we receive and for internal marketing, customer services and product development efforts. Such addresses are not used for any other purpose and are not shared with outside parties. We use non-identifying and aggregate information to better design our website. Finally, we never use or share the personally identifiable information provided to us online in ways unrelated to the ones described above without also providing you an opportunity to opt out or otherwise prohibit such unrelated uses.

Certain portions of our website, such as MyCoreSite, may only be accessed by registering on our website. We may use the information you provide when registering for internal marketing purposes to share products or services we think may be of interest to you. We will not sell this information to third parties.

Our website may contain links to other websites, which may send cookies. We do not control this activity. Links to third party websites are not under our control, and we have no responsibility for the privacy practices of such websites or links. If you access a third party website through a link on our website, you do so at your own risk, and shall be subject to the privacy policy of the third party website. 

Our website may contain blogs, message boards or other public forums. The information you choose to disclose on these forums may be viewed and used by others, and CoreSite is not responsible for such information. 

Our brand or logo may be used on other websites as part of a co-marketing effort. Information disclosed on other third-party websites will be subject to such third-party’s privacy policy. CoreSite will not be responsible for any information disclosed on a third party website.

We reserve the right to disclose information when needed to comply with the law or a legal process, cooperate with investigations of purported unlawful activities, identify persons violating the law, or in connection with any disposition of part or all of CoreSite's stock or assets.

Our Commitment to Data Security

We employ reasonable and current security methods to prevent unauthorized access, maintain data accuracy, and ensure correct use of information. Your account information and profile are password-protected. We recommend that you do not divulge your password to anyone. Our personnel will never ask you for your password in an unsolicited phone call or in an unsolicited e-mail. 

Remember to sign out of your account and close your browser window when you have finished your session. This is to help ensure that others cannot access your personal information and correspondence if you share a computer with someone else or are using a computer in a public place where others may have access to it. No data transmission over the Internet or any wireless network can be guaranteed to be perfectly secure. As a result, while we try to protect your personal information, we cannot ensure or guarantee the security of any information you transmit to us, and you do so at your own risk.

For purposes of this Privacy Policy, “CoreSite” shall include CoreSite Realty Corporation and all of its affiliates.

Our Commitment to Children's Privacy

Protecting the privacy of the very young is especially important. For that reason, we never collect or maintain information at our website from those we actually know are under 13, and no part of our website is structured to attract anyone under 13.

How You Can Access or Correct Your Information

You can access all your personally identifiable information that we collect online and maintain by contacting the company at Sales@CoreSite.com. We use this procedure to better safeguard your information. You can correct factual errors in your personally identifiable information by sending us a request that credibly shows error. To protect your privacy and security, we will also take reasonable steps to verify your identity before granting access or making corrections.

Should you have other questions or concerns about these privacy policies, please call us at +1 303.405.8300 or send us an e-mail to Sales@CoreSite.com.

Effective Date

This Privacy Policy became effective on June 22, 2009. We reserve the right to change this Privacy Policy at any time. Any changes to our Privacy Policy will be posted on this website. We encourage you to review the Privacy Policy each time you visit the website to understand our current practices regarding the collection and use of your personal information.

Your Consent

By using our website, you consent to the collection and use of this information in the manner we describe.

Security Protocol and Biometric Data Policy

In our data center facilities, CoreSite is committed to state of art, in-house physical access security, which includes highly-trained security officers who are on site at our data centers 24 hours a day, 7 days a week, 365 days per year, and who are supported by best-in-class processes and procedures and cutting-edge technology.

CoreSite’s security protocol governs physical access at all main entrances and many locations throughout our data centers, and enables our customers to meet all their information security objectives.  Our protocol governs access by employees, customers, agents, contractors, vendors, and third-party business partners of the Company (“Users”).

CoreSite’s security procedure utilizes both personalized security badges and finger scan technology, which measures certain aspects of a User’s fingertip upon enrollment into the system.  Those fingertip biometric data points are immediately converted through a proprietary software program to an unique mathematical representation of that data, called a “template.”  No optical image of a finger scan is kept.  

As a condition of any authorized admission of CoreSite’s Users to our data centers or secured locations, and as a condition of employment for CoreSite’s employees, each User must present a personalized security badge and provide a non-intrusive finger scan.  CoreSite will consider requests by Users for accommodation or exemption in whole or in part from the procedures set forth in this Security Protocol and Biometric Data Policy.  

The template from that finger scan is compared with the template associated with the User’s personalized security badge during the initial enrollment process to verify the identity of the User.  All biometric data obtained from a User’s finger scan are securely retained on applications and infrastructure owned and maintained by CoreSite. Except for a limited number of our administrators with responsibility for the security protocol, no direct access to biometric data are enabled for CoreSite’s employees or system administrators.  We will not sell, lease, trade or otherwise profit from a User’s biometric data and will not disclose, redisclose or otherwise disseminate such data without a User’s consent unless required by any state or federal law or municipal ordinance, valid warrant or valid subpoena.

A User’s biometric data will be retained by CoreSite for up to 1 year after any User’s authorization to enter our data centers has expired or been terminated, or employment by CoreSite ended, or within 1 year of the User’s last authorized entry to a CoreSite data center, whichever is sooner, or for a different time period, if required by law.  CoreSite will permanently destroy a User’s biometric data upon expiration of the aforesaid time periods.  During the time of retention, we will store and protect from disclosure the User’s biometric data using the reasonable standard of care within the industry, and in a manner equally protective as that in which CoreSite stores, transmits and protects other confidential and sensitive information.

CoreSite will provide this Security Protocol and Biometric Data Policy to its Users and will obtain written release and consent from each User for the finger scan and biometric data procedures as outlined herein.

Any legal disputes, claims, controversies or disagreements arising out of or relating to this Security Protocol and Biometric Data Policy or CoreSite’s procedures relating to User’s biometric data (“Claim”) shall be resolved by binding arbitration instead of the courts.  All Claims may be brought only in the User’s individual capacity, and not as Plaintiff, claimant or class member in a class, collective or other representative or joint proceeding.  Arbitration is the exclusive form for the resolution of such Claims, and both CoreSite and Users mutually waive their respective right to a trial before a judge or jury in federal or state court.  The binding arbitration will be administered by the American Arbitration Association (“AAA”) in accordance with its rules and procedures then in effect, and shall be confidential.  

This Security Protocol and Biometric Data Policy is intended to comply with all federal, state, and local laws, and will be interpreted and applied in order to comply with all applicable laws, including but not limited to the Illinois Biometric Information Privacy Act.

If any provision of this Security Protocol and Biometric Data Policy or any part thereof contravenes any law, or if the operation of any provision hereof is determined by law or otherwise to be unenforceable, then such offending provision or part thereof shall be severed and the remaining provisions given full force and effect.

Any User having any questions about this Security Protocol and Biometric Data Policy, including how the finger scan technology works, is used, or how the biometric data will be kept and deleted, please contact Security@CoreSite.com.

Supplemental Information for California Consumers

The California Consumer Privacy Act of 2018, as amended (Cal. Civ. Code § 1798.100 et. seq.), and related regulations (CCPA), requires that we describe our handling of California consumer personal information by reference to the categories of personal information defined in the statute. This section outlines the categories of personal information that we collect, the sources of the information, with whom we share the information, and the rights available to consumers.

Categories of Personal Information We Collect and How We Use and Disclose that Information

Since January 1, 2022, we have collected, used, and disclosed the following categories of personal information:

Categories of Sensitive Personal Information We Collect and How We Use and Disclose that Information

Since January 1, 2022, we have collected, used, and disclosed the following categories of sensitive personal information (SPI):

We do not use SPI for any business purpose other than those permitted by the CCPA.

We retain the personal information that we handle subject to this Privacy Policy in accordance with our data retention policy. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, and mandatory retention periods under applicable law.

California Consumer Rights

If you are a resident of California, you have the following rights:

• Right to Know. You have the right to request that we disclose certain information to you about our collection and use of your personal information and/or SPI since January 1, 2022. Once we receive and confirm your verifiable consumer request, we will disclose to you:
• The categories of personal information and/or SPI we collected about you.
• The categories of sources for the personal information and/or SPI we collected about you.
• Our business and commercial purpose for collecting or selling that personal information and/or SPI.
• The categories of third parties with whom we share that personal information and/or SPI.
• The specific pieces of personal information and/or SPI we collected about you.
• If we sold or disclosed your personal information and/or SPI for a business purpose, two separate lists disclosing: (i) sales, identifying the personal information and/or SPI categories that each category of recipient purchased; and (ii) disclosures for a business purpose, identifying the personal information and/or SPI categories that each category of recipient obtained.
• Right to Delete. You have the right to request that we delete any of your personal information and/or SPI that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information and/or SPI from our records, unless an exception applies. If so, we will notify you in our response that an exception applies and identify that exception.
• Right to Correct. You have the right to request that we correct any inaccurate personal information and/or SPI that we maintain about you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will correct (and direct our service providers to correct) any inaccurate personal information and/or SPI in our records, unless an exception applies. If so, we will notify you in our response that an exception applies and identify that exception.
• To exercise your rights, please submit a verifiable consumer request to us by emailing privacy@coresite.com or completing the form at https://www.coresite.com/contact-us. To verify your identity, we may ask you for additional information, which may include asking you to confirm other personal information and/or SPI you have provided to us. We reserve the right to deny any requests for which identity cannot be verified. If you have authorized another person to make a request on your behalf, that person must provide to us your written authorization allowing them to make such a request on your behalf. We reserve the right to deny any request by an authorized agent if we are not reasonably able to confirm proper authorization.
• We will not discriminate against you for exercising any of your rights under California law. Unless permitted by California law, we will not:
• Deny you goods or services;
• Charge you a different price or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services;
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
• The CCPA provides a right to opt-out of the sale and/or sharing, for cross-context behavioral advertising, of personal information. We do not sell California consumer personal information for monetary consideration; however, we may share information with third parties for cross context- behavioral advertising to help us better advertise to you, which may be considered a “sale” under CCPA. These third parties may use information to also serve other ads they feel may be relevant to you. To exercise the right to opt-out you can (a) enable Global Privacy Control on your browser; (b) opt-out of certain cookies in our website cookie preference center.
• We do not collect personal information and/or SPI of consumers who are less than 16 years of age.