Compliance & Data Protection

Our GDPR Commitment

As a data and AI consultancy, we understand the critical importance of data governance. Our internal practices reflect the same standards we build for our clients:

• Lawful basis: We process personal data only when we have a lawful basis — typically legitimate interest (responding to inquiries) or consent (marketing communications).
• Data minimization: We collect only the data necessary for the stated purpose. Our intake forms ask only for information needed to scope an engagement.
• Encryption: All data in transit is encrypted using TLS 1.2+. Data at rest is encrypted on our CRM and infrastructure platforms.
• Third-party processors: We use GoHighLevel (CRM), Vercel (hosting), and Google Analytics. Each processor is vetted for compliance with applicable data protection regulations.
• Retention: Personal data is retained only for as long as necessary. Prospect data is purged after 24 months of inactivity unless a business relationship exists.
• Breach notification: In the event of a data breach, we will notify affected individuals and relevant authorities within 72 hours, in compliance with GDPR Article 33.

CCPA Compliance

For California residents, we comply with CCPA requirements including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal data), and the right to non-discrimination for exercising CCPA rights.