Privacy Policy – Strategic Workflow Engineering

Data Collection & Processing

We collect personal data (name, email, phone, company role) only when voluntarily submitted via forms or direct inquiries. Processing is based on legitimate interest (service delivery) and consent (marketing communications). Data is stored on SOC 2 Type II certified servers with access controls. We adhere to GDPR, CCPA, and LGPD requirements.

• Lawful bases: consent, contractual necessity, legal obligation.
• Data categories: identity, contact, professional details, usage analytics (cookies).
• Retention: 24 months post-engagement or until consent withdrawal, whichever sooner.

Data Sharing & Third Parties

We engage sub-processors (e.g., cloud hosting, CRM, analytics) under data processing agreements that mirror our obligations. We never sell personal data. International transfers execute Standard Contractual Clauses (SCCs) for non-adequate jurisdictions.

• Sub-processors: AWS (us-east-1), HubSpot, Google Analytics.
• Disclosures: only to comply with law or protect rights.

Rights & Choices

Data subjects may access, rectify, erase, restrict, or port data by emailing [email protected]. We respond within 30 days. Marketing opt-out via unsubscribe link in every email.