Information We Collect
Personal Information
We collect information you provide directly to us, such as when you:
- Fill out contact forms or request consultations
- Subscribe to our newsletter or content updates
- Participate in surveys or provide feedback
- Communicate with us via email, phone, or chat
Automatically Collected Information
When you visit our website, we automatically collect certain information, including:
- IP address and browser information
- Pages visited and time spent on our site
- Referring website and search terms used
- Device type and operating system
Professional Service Data
During the course of providing professional services, we may collect additional information including:
Technical Information
- • System configurations and architectures
- • Performance metrics and logs
- • Security assessment data
- • Infrastructure specifications
Business Information
- • Organizational structure data
- • Process documentation
- • Compliance requirements
- • Strategic objectives
How We Use Your Information
We use the information we collect to:
- Provide and improve our professional services
- Respond to your inquiries and provide customer support
- Send you relevant updates about our services (with your consent)
- Analyze website usage to improve user experience
- Comply with legal obligations and protect our rights
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
Contractual Necessity
Processing necessary to perform our professional services contract with you.
Legitimate Interest
Website analytics and service improvement activities that benefit both parties.
Consent
Marketing communications and optional services you explicitly agree to receive.
Data Security and Protection
We implement industry-standard security measures to protect your personal information:
Technical Safeguards
- 256-bit SSL encryption for data transmission
- AES-256 encryption for data at rest
- Multi-factor authentication for system access
- Regular security audits and penetration testing
Administrative Controls
- Role-based access controls
- Employee background checks and training
- Incident response procedures
- Data retention and disposal policies
Data Breach Notification
In the unlikely event of a data breach, we will notify affected individuals and relevant authorities within 72 hours as required by GDPR regulations.
Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your explicit consent
- To comply with legal requirements or court orders
- To protect our rights, property, or safety
- With trusted service providers who assist in our operations (under strict confidentiality agreements)
Third-Party Service Providers
We work with carefully vetted service providers who assist in delivering our services:
Cloud Infrastructure
AWS and Microsoft Azure for secure data hosting and processing, both SOC 2 Type II certified.
Communication Tools
Professional email and collaboration platforms with enterprise-grade security features.
Data Retention
We retain personal information only as long as necessary for the purposes outlined in this policy:
Client Data
Retained for 7 years after project completion for professional liability and tax purposes.
Marketing Data
Retained until consent is withdrawn or 3 years of inactivity, whichever comes first.
Website Analytics
Anonymized data retained for 26 months for statistical analysis and service improvement.
Your Rights
Under GDPR and other privacy laws, you have the right to:
- Access your personal data we hold
- Correct inaccurate or incomplete information
- Delete your personal data (right to be forgotten)
- Restrict or object to processing of your data
- Data portability (receive your data in a structured format)
- Withdraw consent at any time
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information below. We will respond within 30 days of receiving your request.
Request Process
- Submit your request via email or phone
- Provide identification verification
- Specify the exact right you wish to exercise
- Receive confirmation and timeline for completion
International Data Transfers
As a global consulting firm, we may transfer your personal data to countries outside your jurisdiction:
Adequacy Decisions
We primarily transfer data to countries with EU adequacy decisions or equivalent privacy protections.
Standard Contractual Clauses
Where adequacy decisions don't exist, we use EU-approved Standard Contractual Clauses.
Contact Information
For privacy-related questions or concerns, please contact our Data Protection Officer:
Primary Contact
Mailing Address
CPLERR Data Protection Officer
123 Business Ave, Suite 100
New York, NY 10001
United States
Supervisory Authority
If you're not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority.