Privacy Policy
Your privacy matters. This policy explains what we collect, how we use it, and the choices you have. We align with GDPR/CCPA principles and practice data minimization.
Last updated: September 7, 2025
Scope & Controller
This Privacy Policy applies to the EntireSol website, forms, communications, and professional services operated by EntireSol LLC (“we,” “us,” “our”). Where we act as a processor on behalf of a client, the client’s privacy notice governs and our processing is subject to a Data Processing Addendum (DPA) when applicable.
Primary contact: privacy@entiresol.us
1. Information We Collect
- Contact & business details (name, email, phone, company, role)
- Form & communications (project briefs, support requests, chat/email threads)
- Usage & device data (IP address, pages viewed, referrer, UTMs, approximate location)
- Cookies & similar tech (see our Cookie Policy)
- Billing & transaction data when you pay us (limited details from payment processors)
- Log & telemetry data from our infrastructure for security and diagnostics
2. Why We Use Data (Lawful Bases)
- Provide Services & support (contractual necessity)
- Improve & secure our site (legitimate interests)
- Marketing with consent/opt-out (consent or legitimate interests, as applicable)
- Legal compliance (to meet legal obligations)
Where required, we will ask for your consent (e.g., non‑essential cookies). You can withdraw consent at any time.
3. Your Rights
Depending on your location (e.g., EU/UK/EEA GDPR; CA CPRA), you may request:
- Access and Portability
- Correction (rectification)
- Deletion (erasure)
- Restriction or Objection to processing
- Withdraw consent (where we rely on consent)
- Opt‑out of certain uses where applicable (e.g., targeted advertising)
4. Exercising Your Rights
Submit requests to privacy@entiresol.us. We may verify your identity before acting. Response timelines follow local laws (e.g., ~30 days under GDPR; ~45 days under CPRA, with possible extension).
6. International Transfers
Where data moves across borders, we apply appropriate safeguards (e.g., Standard Contractual Clauses and applicable addenda) consistent with local requirements.
7. Retention
We keep data only as long as needed for the purposes described, after which we delete or anonymize it per our retention practices. For example:
- Transactional & contract data: as required by tax/accounting laws;
- Support communications: typically up to 24 months after resolution;
- Marketing records: until you opt out or they become inactive.
8. Security
We apply administrative, technical, and organizational safeguards (least‑privilege access, encryption in transit where applicable, code reviews, and secrets hygiene). No method is 100% secure. Please notify us promptly of any suspected security issues.
9. Children’s Privacy
Our Services are not intended for children under 16. If we learn we collected such data, we’ll delete it.
11. Changes
We’ll post updates on this page with a new “Last updated” date. For material changes, we may provide additional notice (e.g., email or banner).