Privacy Policy

1. Introduction

OptiCloud Consulting ("Company," "we," "us," or "our") operates the website opticloud.consulting and related services. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your personal information when you use our website, products, and services (collectively, the "Services").

We are committed to protecting your privacy and ensuring you have a positive experience on our website. This policy applies to all information collected through our Services and offline records.

2. Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us, such as:

• Name, email address, phone number, and company information
• Billing and payment information
• Contact preferences and communication history
• Information provided through contact forms, surveys, and inquiries
• CV or resume information when applying for positions
• Other information you choose to provide

Usage Data and Device Information

When you access our Services, we automatically collect certain information about your device and how you interact with our Services:

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and navigation patterns
• Device identifiers and unique mobile device IDs
• Referral sources and exit pages
• Approximate geographic location based on IP address
• Search queries and interaction data

Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. This includes:

• Session cookies for website functionality
• Persistent cookies for remembering preferences
• Third-party analytics cookies
• Marketing and retargeting cookies

You can control cookie preferences through your browser settings. Please note that disabling cookies may affect functionality.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: Providing, operating, and maintaining our Services
• Communication: Responding to inquiries, sending newsletters, and service updates
• Marketing: Delivering targeted advertising and promotional materials
• Analytics: Analyzing usage patterns to improve our Services
• Security: Detecting and preventing fraud, abuse, and security incidents
• Compliance: Meeting legal obligations and enforcing agreements
• Personalization: Customizing content and recommendations
• Research: Conducting surveys, market research, and product development
• Legal Proceedings: Defending against legal claims or litigation

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your personal data based on the following legal grounds:

• Consent: When you have explicitly agreed to the processing
• Contract: When processing is necessary to perform our Services
• Legal Obligation: When required by applicable law
• Legitimate Interests: When processing is necessary for our legitimate business interests
• Vital Interests: When processing protects your vital interests

5. Information Sharing and Disclosure

We may share your information with third parties in the following circumstances:

• Service Providers: Third-party vendors who assist in operating our Services (processors)
• Business Partners: Partners who jointly offer products or services
• Legal Requirements: When required by law, court order, or government request
• Business Transfer: In connection with merger, acquisition, or sale of assets
• With Your Consent: As described at the time of collection
• Public Information: Information you choose to make publicly available

We do not sell your personal information to third parties for their direct marketing purposes without your explicit consent.

6. Data Retention

We retain your personal information for as long as necessary to provide our Services, fulfill the purposes outlined in this policy, and comply with legal obligations. Retention periods vary depending on the context of processing and our legal obligations:

• Contact information: retained until you request deletion or opt-out
• Transaction data: retained for 7 years for accounting and audit purposes
• Website analytics: typically retained for 12-24 months
• Marketing data: retained until you unsubscribe

When data is no longer necessary, we securely delete or anonymize it.

7. Your Rights

GDPR Rights (European Residents)

If you are located in the European Economic Area, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("Right to Be Forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Opt-out of certain processing activities
• Right to Withdraw Consent: Withdraw previously given consent
• Right to Lodge a Complaint: File a complaint with a supervisory authority

CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: Request what personal information is collected
• Right to Delete: Request deletion of collected personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information
• Right to Correct: Correct inaccurate personal information
• Right to Limit Use: Limit use and disclosure of sensitive personal information

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@opticloud.consulting with details of your request. We will respond within 30 days (or as required by applicable law).

8. International Data Transfers

Your information may be transferred to, stored in, and processed in countries outside your country of residence, which may have data protection laws that differ from your home country. When we transfer data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules
• Your explicit consent for specific transfers
• Adequacy decisions

9. Security Measures

We implement comprehensive security measures to protect your personal information:

• AES-256 encryption for data in transit and at rest
• TLS 1.3 for secure communications
• Multi-factor authentication for account access
• Regular security assessments and penetration testing
• Firewall and intrusion detection systems
• Access controls and role-based permissions
• Regular security training for employees
• Incident response procedures and 24/7 monitoring

While we strive to protect your information using reasonable security measures, no system is completely secure. We cannot guarantee absolute security.

10. Children's Privacy

Our Services are not intended for individuals under the age of 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will promptly delete such information. Parents or guardians who believe their child has provided information to us should contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of material changes by updating the "Last Updated" date at the top of this policy. Continued use of our Services following the posting of revised Privacy Policy means you accept and agree to the changes.

12. Contact Information

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us:

• Privacy Department: privacy@opticloud.consulting
• Data Protection Officer (DPO): dpo@opticloud.consulting
• Address: OptiCloud Consulting, 123 Cloud Street, San Francisco, CA 94105, USA
• Phone: +1 (555) 123-4567

We will respond to your inquiry within 30 days or as required by applicable law.