Privacy Policy

How we collect, use, and protect your personal information

Last updated: September 22, 2025 • Effective: September 22, 2025

Key Points

  • • We collect only the information necessary to provide our services
  • • Your data is encrypted and protected with enterprise-grade security
  • • We never sell your personal information to third parties
  • • You have full control over your data and can request deletion at any time
  • • We comply with GDPR, CCPA, and other global privacy regulations

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

  • Contact Information: Name, email address, phone number, company name, job title
  • Communication Data: Information in messages you send to us, including support requests and consultation inquiries
  • Project Information: Details about your technology requirements, project scope, and business objectives
  • Payment Information: Billing address and payment method details (processed securely through third-party providers)

1.2 Information We Collect Automatically

When you visit our website, we automatically collect certain information:

  • Usage Data: Pages visited, time spent on pages, click-through rates, and navigation patterns
  • Device Information: IP address, browser type, operating system, device identifiers
  • Analytics Data: Website performance metrics and user interaction data

1.3 Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Analyze website usage and improve our services
  • Provide personalized content and recommendations
  • Measure the effectiveness of our marketing campaigns

2. How We Use Your Information

We use the information we collect to:

  • Provide Services: Deliver consulting services, respond to inquiries, and manage client relationships
  • Communication: Send service updates, newsletters, and relevant industry insights
  • Improvement: Analyze usage patterns to improve our website and services
  • Legal Compliance: Meet regulatory requirements and protect our legal rights
  • Security: Detect and prevent fraud, security breaches, and other harmful activities

3. Information Sharing and Disclosure

3.1 Service Providers

We may share your information with trusted third-party service providers who assist us in:

  • Website hosting and maintenance
  • Email marketing and communication services
  • Customer relationship management (CRM)
  • Analytics and performance monitoring
  • Payment processing

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

  • Valid legal processes (subpoenas, court orders)
  • Government investigations
  • Protection of our rights and safety
  • Prevention of fraud or illegal activities

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity with the same privacy protections.

4. Data Security

We implement comprehensive security measures to protect your information:

  • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access Controls: Multi-factor authentication and role-based access controls
  • Monitoring: 24/7 security monitoring and threat detection
  • Compliance: SOC 2 Type II and ISO 27001 certified security controls
  • Regular Audits: Quarterly security assessments and penetration testing

5. Your Privacy Rights

Depending on your location, you may have the following rights:

5.1 All Users

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Opt-out: Unsubscribe from marketing communications

5.2 GDPR Rights (EU Residents)

  • Portability: Request your data in a portable format
  • Restriction: Request restriction of processing
  • Objection: Object to processing based on legitimate interests
  • Withdrawal: Withdraw consent for data processing

5.3 CCPA Rights (California Residents)

  • Know: Know what personal information is collected and how it's used
  • Delete: Request deletion of personal information
  • Opt-out: Opt-out of the sale of personal information (we don't sell data)
  • Non-discrimination: Equal service regardless of privacy choices

6. International Data Transfers

If you are located outside the United States, please note that we may transfer your information to the US and other countries. We ensure adequate protection through:

  • EU-US Privacy Shield certification
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules where applicable
  • Adequacy decisions by relevant authorities

7. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Improve our services

Specific retention periods:

  • Contact Information: 7 years after last interaction
  • Project Data: 10 years for compliance purposes
  • Website Analytics: 26 months
  • Marketing Data: Until opt-out or 3 years of inactivity

8. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Sending email notifications to registered users
  • Displaying prominent notices on our website

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:

Privacy Contact Information

Email: privacy@optimuslabs.com

Phone: +1 (555) 123-4567 ext. 701

Mail: Privacy Officer, Optimus IT Labs
123 Market Street, Suite 500
San Francisco, CA 94105

EU Representative: privacy-eu@optimuslabs.com