Privacy Policy

1. Information We Collect

Information you provide to us

When you submit a form, request an audit or consultation, or otherwise contact us, we collect the information you choose to provide — typically your name, email address, phone number, company name, and the details of your message or project. If you become a client, we may also collect billing and account information necessary to provide our services.

Information collected automatically

When you visit our website, we and our analytics providers may automatically collect certain technical information, including your IP address, browser and device type, operating system, referring URLs, pages viewed, and interactions with the site. This information is collected through cookies and similar technologies (see Section 4).

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide the audits, consultations, and services you request;
• Operate, maintain, secure, and improve our website and services;
• Understand how visitors use our site and measure the performance of our marketing;
• Send you administrative messages and, where permitted, relevant marketing communications;
• Comply with legal obligations and enforce our agreements.

3. Legal Bases for Processing (EEA/UK)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: your consent (which you may withdraw at any time); the performance of a contract with you; our legitimate interests in operating and improving our business (balanced against your rights); and compliance with a legal obligation.

4. Cookies & Similar Technologies

We use cookies and similar technologies to keep the site functioning, remember your preferences, and analyze traffic. Essential cookies are required for the site to work; analytics cookies help us understand usage. You can control or disable cookies through your browser settings, though some features may not function properly as a result.

5. How We Share Your Information

We do not sell your personal information. We share it only in the following circumstances:

• Service providers: vendors who process data on our behalf (e.g., hosting, email delivery, analytics, CRM, and payment processing), under agreements that require them to protect your information.
• Legal & compliance: when required by law, subpoena, or other legal process, or to protect our rights, safety, and property.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy — for example, to respond to your inquiry, provide services, and meet legal, accounting, or reporting requirements. When information is no longer needed, we delete or de-identify it.

7. Your Privacy Rights

EEA / UK (GDPR)

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, to request portability of your data, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and share it, to request deletion or correction of your information, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email us at [email protected]. We may need to verify your identity before responding.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

We are based in the United States, and your information may be processed in the U.S. or other countries that may have different data-protection laws than your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

10. Third-Party Links

Our site may link to third-party websites and services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy practices.

11. Children's Privacy

Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above, and material changes will be reflected on this page. Your continued use of the site after an update constitutes acceptance of the revised Policy.