GDPR Compliance Policy

Data We Collect

We collect personal data in the following ways:

• Contact Form: When you submit our contact form, we collect your name, email address, and any other information you provide in the message.
• Newsletter Subscription: When you subscribe to our newsletter, we collect your email address.
• Vercel Analytics: We use Vercel Analytics to collect anonymous, aggregated data about website usage. This does not include personal data.
• Google reCAPTCHA: We use Google reCAPTCHA to protect our forms from spam. This service may collect and process certain data about your interactions with our website.

Data Processing and Third-Party Services

To facilitate our operations and provide our services, we may use third-party service providers to process your personal data. These may include:

• Email marketing services
• Customer relationship management (CRM) systems
• Website hosting and cloud storage providers
• Analytics services
• Payment processors (if applicable)

All third-party service providers that we use are carefully selected and are required to use appropriate measures to protect your personal information. They are only permitted to use your data for the specific purposes we direct them to carry out, and not for their own purposes.

We ensure that any third-party service providers we use who may process your data outside the European Economic Area (EEA) do so in a manner compliant with GDPR requirements, typically through standard contractual clauses or other appropriate safeguards.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: For newsletter subscriptions, we process your data based on your explicit consent.
• Legitimate Interests: For contact form submissions, we process your data based on our legitimate interests to respond to your inquiries and provide our services.

How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries submitted through our contact form
• To send you our newsletter if you've subscribed
• To improve our website and services based on aggregated, anonymous usage data
• To protect our website from spam and abuse

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your Rights Under GDPR

Under GDPR, you have the following rights:

• The right to access your personal data
• The right to rectify inaccurate personal data
• The right to erase your personal data
• The right to restrict processing of your personal data
• The right to data portability
• The right to object to processing of your personal data
• The right to withdraw consent at any time, where processing is based on consent

To exercise these rights, please contact us using the details provided below.

Data Transfers

We do not transfer your personal data outside of the European Economic Area (EEA) except where adequate safeguards are in place as required by GDPR.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk associated with the processing of your personal data.

Changes to this Policy

We may update this GDPR Compliance Policy from time to time. We encourage you to review this page periodically for any changes.

Contact Us

If you have any questions about this GDPR Compliance Policy or our data practices, please contact us at contact@consultqualia.com.