1. Who we are
Whitefield Consulting Inc., a Delaware corporation, is responsible for the personal information described in this policy. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the controller.
This policy covers this website and the messages you send us through it. Personal information we process on behalf of clients during an engagement is governed by the agreement with that client.
2. What we collect
Information you give us
When you use the contact form, we receive your name, work email, the subject you choose and your message, plus your company and country if you provide them. If you email us directly, we receive whatever you include in the email.
Information collected automatically
Like any web server, ours records technical data for each request: IP address, browser user agent, the page requested, the referring page and the date and time. We use these logs only to keep the Site running and secure.
What we don’t collect
The Site sets no cookies and uses no analytics, advertising, tracking pixels or social media plugins. Fonts and other assets are served from our own server, so loading a page does not send your data to third parties.
3. How we use it
- to reply to your request and, if you ask, prepare a proposal;
- to keep a record of our correspondence with you;
- to protect the Site against abuse, such as spam and attacks;
- to comply with legal obligations and to establish or defend legal claims.
We do not use your information for automated decision-making or profiling, and we will not add you to a marketing list.
4. Legal bases (EEA and UK)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
- steps taken at your request before entering into a contract, when you ask about our services;
- our legitimate interests in answering correspondence and securing the Site;
- compliance with legal obligations, where applicable.
6. International transfers
We are based in the United States, and your information is processed there. When we transfer personal information from the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses or another transfer mechanism recognized by law.
7. How long we keep it
- Inquiries that do not lead to an engagement: deleted three years after our last exchange.
- Correspondence with clients: kept for the duration of the relationship and the limitation period that follows it.
- Server logs: deleted after 90 days, unless needed to investigate a security incident.
8. Security
The Site is served over HTTPS only. Access to inquiries is limited to the people who need it to answer you. No system is perfectly secure, and we will notify you and the relevant authorities of a breach where the law requires it.
9. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time.
To exercise these rights, email privacy@whitefieldconsultinginc.com. We will reply within the time required by law, usually within one month, and may ask you to confirm your identity first. Exercising your rights is free.
If you are in the EEA or the UK, you may also lodge a complaint with your local data protection authority.
10. U.S. state privacy rights
Residents of California and other U.S. states with comprehensive privacy laws may have the right to know what personal information we collect and how we use it, to access, correct and delete it, and to opt out of its sale or sharing. We do not sell or share personal information as those laws define the terms, and we do not process sensitive personal information.
You can make a request by emailing privacy@whitefieldconsultinginc.com, or have an authorized agent do so on your behalf. We will not discriminate against you for exercising these rights. Because the Site does no tracking, Global Privacy Control and Do Not Track signals require no further action from us.
11. Children
The Site is intended for businesses and is not directed at children under 16. We do not knowingly collect their personal information.
12. Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top. Significant changes will be highlighted here for a reasonable period.
13. Contact
Privacy questions and requests: privacy@whitefieldconsultinginc.com.
Postal address: Whitefield Consulting Inc., 74 East Glenwood Avenue, STE 222, Smyrna, DE 19977, United States.