Privacy Policy

Personal Information You Provide

We collect information that you voluntarily provide to us when you express interest in obtaining information about our services, participate in activities on our website, or contact us. This information may include:

• Name and contact details (email address, phone number)
• Communication preferences and feedback
• Any other information you choose to provide in forms or correspondence

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing activities. This may include:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referring website and search terms used
• Cookies and similar tracking technologies

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific purposes
• Legitimate Interests: To operate and improve our website and services
• Contractual Necessity: To fulfill our obligations when providing services
• Legal Obligation: To comply with applicable laws and regulations

Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Contact form submissions are typically retained for two years unless you request earlier deletion. Analytics data is anonymized after six months.

Security Measures

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• SSL encryption for data transmission
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel
• Regular security assessments and vulnerability testing

Data Storage and Encryption

Your personal data is stored on secure servers with encryption both in transit and at rest. We use industry-standard protocols to ensure data integrity and confidentiality throughout the storage lifecycle.

Access Controls and Monitoring

We maintain strict access controls ensuring that only authorized personnel with legitimate business needs can access personal data. All access is logged and monitored for suspicious activity.

Breach Notification Procedures

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by applicable data protection regulations. We maintain an incident response plan to address security breaches promptly and effectively.