Privacy Policy

1. Information We Collect

1.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, company name, and job title
• Communication Data: Messages, inquiries, and correspondence you send to us
• Professional Information: Industry, company size, technology challenges, and project requirements

1.2 Automatically Collected Information

• Technical Data: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Location Data: General geographic location based on IP address

2. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide technology advisory services, respond to inquiries, and deliver requested information
• Communication: To contact you regarding our services, respond to your questions, and provide updates
• Business Development: To understand your needs and tailor our services accordingly
• Website Improvement: To analyze usage patterns and improve our website functionality
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To protect against fraud, unauthorized access, and other security threats

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal information based on:

• Consent: When you voluntarily provide information through our contact forms
• Legitimate Interests: For business development, website analytics, and security purposes
• Contractual Necessity: To fulfill our obligations when providing services
• Legal Obligation: To comply with applicable laws and regulations

4. Data Storage and Security

4.1 Security Measures

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: Data transmission is protected using SSL/TLS encryption
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Updates: Security systems and software are regularly updated
• Monitoring: Continuous monitoring for security threats and vulnerabilities

4.2 Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Typically:

• Contact inquiries: 3 years from last contact
• Client information: Duration of engagement plus 7 years for legal compliance
• Website analytics: 26 months

5. Cookies and Tracking Technologies

5.1 Types of Cookies

Our website may use the following types of cookies:

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: To understand how visitors use our website
• Functional Cookies: To remember your preferences and settings

5.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality. Most browsers allow you to:

• View and delete cookies
• Block cookies from specific sites
• Block third-party cookies
• Clear all cookies when closing the browser

6. Third-Party Services

Our website may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these external services. Third-party services we may use include:

• Email Services: For sending and receiving communications
• Analytics Services: To analyze website usage and performance
• Hosting Services: For website hosting and content delivery

We recommend reviewing the privacy policies of any third-party services you interact with.

7. Your Rights

7.1 GDPR Rights (EU Residents)

If you are located in the European Union, you have the following rights:

• Right of Access: Request information about your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Residents)

If you are a California resident, you have the following rights:

• Right to Know: Information about personal data collection and use
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices

7.3 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Section 10. We will respond to your request within the timeframes required by applicable law.

8. International Data Transfers

The Cantwell Group, LLC is based in Washington State, USA. If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

10. Contact Information

For privacy-related inquiries, questions about this Privacy Policy, or to exercise your rights, please contact us:

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending email notification for significant changes (if we have your email address)

Your continued use of our website after any changes indicates your acceptance of the updated Privacy Policy.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Washington, USA, without regard to its conflict of law principles. Any disputes arising from this Privacy Policy will be subject to the exclusive jurisdiction of the courts in Washington State.