Privacy Policy

4.1 Information You Provide Voluntarily

When you submit a project inquiry or contact our team, we may collect:

• Full name.
• Email address.
• Company or business name.
• WhatsApp number or other contact number, where provided.
• Service required or area of interest.
• Initial project budget range.
• Project requirements and descriptions.
• Business objectives or challenges.
• Any additional information you voluntarily share about your project or business.

The information requested may vary depending on the contact form, communication channel, or type of inquiry.

Certain fields may be necessary to submit an inquiry, while additional business information may be optional.

4.2 Business Communication Information

When you contact us through email, WhatsApp, Calendly, or another available communication channel, we may collect and process:

• Your contact details.
• The content of your communication.
• Relevant business or project information.
• Meeting requests and scheduling details.
• Files or attachments voluntarily provided.
• Records of relevant correspondence.

We use this information to communicate with you, understand your requirements, and manage our business relationship.

4.3 Information Collected Automatically

When you access our website, certain technical and usage information may be collected through our website infrastructure, cookies, analytics services, or advertising technologies.

Depending on the tools in operation and your privacy choices, this information may include:

• IP address.
• Browser type and version.
• Device type and operating system.
• Approximate geographic location derived from technical information.
• Pages viewed and navigation activity.
• Time and date of visits.
• Time spent on website pages.
• Referral sources and referring websites.
• Interactions with buttons, forms, and other website elements.
• Cookie identifiers and similar online identifiers.
• Advertising and conversion-related events.

We use such information for website functionality, analytics, performance evaluation, security, and marketing purposes as described in this Policy.

4.4 Information from Third-Party Platforms

We may receive information from third-party services when you interact with us through those services.

These may include:

• Google Analytics.
• Meta advertising services.
• LinkedIn advertising and analytics services.
• Calendly.
• WhatsApp.
• Email service providers.

The categories of information received depend on the platform, the relevant integration, your interaction, and the provider's applicable privacy practices.

4.5 Sensitive Personal Information

Our standard website inquiry process is intended to collect business contact information and project-related details.

We do not intentionally request sensitive personal information through our public inquiry forms, including medical records, health information, banking credentials, financial-account information, biometric information, or other similarly sensitive personal data.

A project's estimated budget range is collected for commercial planning purposes and is not intended to capture sensitive financial-account information.

We request that visitors avoid submitting sensitive personal information or confidential third-party records unless a specific business arrangement and appropriate safeguards have been established.

If unnecessary sensitive information is submitted, we may take appropriate steps to restrict, remove, or otherwise handle that information in accordance with applicable law.

5.1 Responding to Inquiries

We use information submitted through our website or communication channels to:

• Respond to questions and inquiries.
• Understand project requirements.
• Evaluate potential service opportunities.
• Discuss business objectives.
• Provide quotations and proposals.
• Schedule consultations.
• Recommend suitable services.
• Follow up on relevant business discussions.

5.2 Business Relationship Management

Where you become a client or actively engage with our team, we may use relevant information to:

• Establish and manage a business relationship.
• Coordinate project discovery and planning.
• Prepare service agreements.
• Communicate regarding project requirements.
• Coordinate delivery and support activities.
• Maintain necessary business records.

Client project information may also be subject to separate agreements, including confidentiality or data processing arrangements where applicable.

5.3 Website Analytics and Improvement

We use website analytics to:

• Understand website traffic and visitor engagement.
• Evaluate the performance of website pages.
• Identify areas for usability improvements.
• Understand which services attract visitor interest.
• Improve website content and navigation.
• Evaluate overall marketing effectiveness.

5.4 Marketing and Business Development

Subject to applicable law and privacy preferences, we may use relevant personal information to:

• Communicate about our services.
• Follow up with prospective clients.
• Share relevant business or service updates.
• Measure advertising campaign effectiveness.
• Understand marketing conversions.
• Conduct appropriate advertising and remarketing activities.
• Improve our marketing strategy.

Where required, we obtain consent before using personal information for particular marketing activities.

5.5 Security and Fraud Prevention

We may process information to:

• Protect our website and business systems.
• Identify unauthorized access or suspicious activity.
• Investigate potential misuse.
• Maintain operational security.
• Diagnose technical problems.
• Protect our legitimate business interests.

5.6 Legal and Regulatory Purposes

We may process personal information where necessary to satisfy applicable legal obligations, respond to binding legal requests, resolve disputes, or establish, exercise, or defend legal claims.

We do not use personal information for purposes that are incompatible with the purposes described in this Privacy Policy without an appropriate legal basis and any required additional notice or consent.

6.1 Consent

We may rely on consent where required for:

• Non-essential advertising cookies.
• Certain analytics technologies.
• Specific marketing communications.
• Other processing activities requiring your authorization.

Where processing is based on consent, you may withdraw it at any time.

6.2 Contractual Necessity

We may process personal information where necessary to:

• Respond to requests for pre-contractual steps.
• Prepare requested proposals.
• Enter into service agreements.
• Perform contractual obligations to which the individual is a party.

6.3 Legitimate Interests

We may rely on legitimate interests for activities such as:

• Responding to appropriate business inquiries.
• Managing professional relationships.
• Maintaining website and business security.
• Improving our services.
• Managing relevant business operations.

We assess such interests against the rights and freedoms of individuals where required by law.

Legitimate interests do not override separate consent requirements for non-essential tracking or particular marketing communications.

6.4 Legal Obligations

We may process personal information where necessary to comply with applicable legal or regulatory requirements.

The applicable lawful basis depends on the particular processing activity, the individuals involved, and the relevant jurisdiction.

7.1 Essential Technologies

Essential technologies may be used to support core website functions, security, and services explicitly requested by visitors.

These technologies are limited to purposes that are necessary or otherwise permitted without consent under applicable law.

7.2 Analytics Technologies

We use Google Analytics to understand how visitors interact with our website.

Depending on its configuration, Google Analytics may process information relating to:

• Website traffic.
• Page views.
• Visitor engagement.
• Device and browser characteristics.
• Traffic acquisition sources.
• Website events and interactions.

This information helps us evaluate website performance and improve the user experience.

7.3 Advertising and Marketing Technologies

We use advertising and measurement technologies, including:

Meta Pixel

Used in connection with Meta advertising services, including advertising measurement, campaign attribution, and related marketing functions.

LinkedIn Insight Tag

Used in connection with LinkedIn advertising services, including website audience insights, conversion measurement, and campaign performance analysis.

These tools may process information about website interactions, device characteristics, online identifiers, and advertising-related events.

Depending on their configuration, advertising platforms may use information for their own purposes under their applicable privacy terms.

7.4 Cookie Consent and Preferences

Where applicable law requires consent, optional analytics and advertising technologies must not be activated before valid consent has been obtained.

Visitors should have meaningful choices regarding optional tracking, including the ability to accept, reject, or manage relevant categories.

You may also control or delete cookies through your browser settings.

Browser-level controls do not necessarily block all forms of tracking, including certain server-side processing.

The ability to withdraw consent, applicable consent mechanisms, and additional technical controls depend on the website's implemented privacy settings.

7.5 Third-Party Cookie Policies

Third-party service providers may use cookies or similar identifiers in accordance with their own privacy policies and applicable contractual arrangements.

The exact cookies, retention periods, and technical identifiers may change when providers update their services or website integrations.

Information about relevant third-party providers may be obtained from their published privacy and cookie documentation.

Opting Out of Marketing

You may request to stop receiving promotional communications at any time.

To opt out, you may:

• Use an unsubscribe mechanism where available.
• Reply to a marketing message requesting removal.
• Email info@endpointclients.com.

We will respect applicable marketing objections and opt-out requirements.

If you unsubscribe, we may retain limited information necessary to maintain a suppression record and prevent further marketing communications.

Opting out of marketing does not necessarily prevent communications relating to an active project, existing agreement, or legal obligation.

10.1 Website Inquiry Information

Our standard website inquiry process is intended to collect business contact details and initial project requirements.

The use of AI technology within our business does not mean that every website inquiry is automatically submitted to an AI model.

10.2 AI Processing in Client Projects

Where AI providers or tools are used for a particular client engagement, their use may be governed by the relevant service agreement, technical configuration, and any applicable data processing arrangements.

The types of information processed depend on the project requirements and agreed scope of services.

10.3 AI Provider Data Practices

AI providers may have different policies regarding data retention, model improvement, training, and related processing activities.

These practices can vary by product, account type, configuration, and contractual terms.

We do not represent that all data submitted to every AI provider is automatically excluded from model training unless the relevant service terms and settings establish that protection.

Where personal or confidential client information may be involved, appropriate processing arrangements and safeguards should be established before such information is shared with an AI provider.

10.4 Automated Decision-Making

Our general website inquiry process is not intended to make solely automated decisions that produce legal or similarly significant effects on individuals.

Where a particular future service involves automated decision-making or regulated profiling, any applicable additional transparency, assessment, and individual rights requirements will be addressed.

11.1 Cloud Infrastructure and Database Hosting

Amazon Web Services (AWS)

We use Amazon Relational Database Service (AWS RDS) to store website lead and inquiry information.

AWS supplies cloud infrastructure and associated security capabilities.

The management of personal information within the database, including relevant application and customer-managed security settings, remains a responsibility of EndPoint Clients.

11.2 Analytics and Advertising Providers

Google, Meta, and LinkedIn

These providers support the analytics, advertising measurement, and related marketing activities described in this Policy.

Depending on the services and processing arrangements, they may act as processors, independent controllers, or in other legally defined roles.

11.3 Communication and Scheduling Services

Calendly

Used to support meeting scheduling and consultation arrangements.

WhatsApp

Used for business communications when individuals choose to contact us through the service.

Email Service Providers

Used to exchange, deliver, and manage business communications.

11.4 AI Technology Providers

OpenAI and Anthropic

May be involved in relevant AI-related business operations and client projects, subject to the specific use and applicable arrangements.

11.5 Authorized Personnel and Service Providers

Relevant personal information may be made available to authorized personnel, contractors, or business service providers where reasonably necessary for business operations or service delivery.

Access and use should be limited to legitimate purposes and applicable confidentiality and security obligations.

11.6 Legal Disclosures

We may disclose information where legally necessary to:

• Comply with binding legal obligations.
• Respond to lawful requests from competent authorities.
• Protect legal rights.
• Investigate serious security incidents.
• Establish, exercise, or defend legal claims.

11.7 Sale and Sharing of Personal Information

We do not operate a business model based on selling our website lead database for direct monetary payment.

However, certain disclosures through advertising and tracking technologies may qualify as a "sale," "sharing," or targeted advertising under particular privacy laws, even where no direct monetary payment occurs.

Where such laws apply, we will assess the relevant disclosures and provide legally required notices and opt-out rights.

12.1 Data Storage

Website lead and inquiry information is stored in our AWS RDS database.

Other information processed through advertising, analytics, email, messaging, scheduling, or AI providers may also be maintained within the relevant third-party systems.

The geographic locations of such processing depend on the relevant provider, cloud region, and service configuration.

12.2 Security Practices

We use AWS cloud infrastructure and recognize the shared responsibility model that applies to AWS services.

AWS is responsible for security of its underlying cloud infrastructure, while EndPoint Clients is responsible for customer-managed security controls and relevant application-level protections.

Appropriate security practices may include access restrictions, secure configuration, credential management, database protections, monitoring, and backup controls.

The specific technical safeguards depend on the deployed systems and configurations.

12.3 Security Limitations

No internet service, electronic transmission, or cloud storage system can guarantee absolute security.

Although appropriate security measures are important, we cannot guarantee that unauthorized access, data loss, or other security incidents will never occur.

Where a personal data breach occurs, we will assess the incident and undertake any investigation, remediation, or notification required by applicable law.

13.1 Website Leads and Business Inquiries

Our standard retention period for website lead and inquiry information is up to 24 months from the last meaningful business interaction.

This information may include:

• Name.
• Email address.
• WhatsApp or contact number.
• Company information.
• Selected services.
• Initial project budget.
• Project description.
• Related inquiry and business communication records.

The 24-month period supports the management of prospective client relationships, ongoing business discussions, and reasonable follow-up opportunities.

A meaningful interaction may include a substantive inquiry, response, meeting, proposal discussion, or other relevant business communication.

Passive website visits, advertising impressions, or unresponded promotional messages do not, by themselves, restart this lead retention period.

13.2 Information No Longer Required

When the applicable retention period expires, information should be deleted, anonymized, or reviewed for a documented retention exception.

Information may be retained beyond the standard period where a longer period is necessary and justified by applicable law, an active contractual relationship, an unresolved dispute, or another lawful purpose.

13.3 Active Client Information

Information relating to active client engagements may be subject to separate retention requirements.

Relevant contractual documents, service records, accounting information, and legally necessary business records may be retained according to the applicable agreement, legitimate purpose, or legal obligation.

13.4 Marketing Preferences

Limited suppression or opt-out records may be retained for as long as necessary to respect marketing objections and prevent unwanted communications.

This does not authorize continued promotional use of information after a valid marketing objection.

13.5 Third-Party Retention

Analytics, advertising, messaging, scheduling, email, and AI providers may operate separate retention arrangements.

Their retention practices depend on the services, contractual terms, and account configurations involved.

Our 24-month website lead retention period does not automatically apply to every independently maintained third-party record.

13.6 Backups

Information deleted from an active database may remain temporarily in system backups where deletion cannot be performed immediately.

Backup copies must be managed according to applicable retention requirements and the configured backup lifecycle.

16.1 Right of Access

You may request confirmation of whether we process your personal information and obtain access to eligible information.

16.2 Right to Rectification

You may request correction of inaccurate personal information or completion of incomplete information where applicable.

16.3 Right to Erasure

You may request deletion of personal information, subject to relevant legal conditions and exceptions.

16.4 Right to Restrict Processing

You may request that certain processing activities be restricted where the law provides such a right.

16.5 Right to Object

You may object to certain processing activities, including processing based on legitimate interests, where applicable.

Where EU or UK GDPR applies, you have an absolute right to object at any time to processing of your personal information for direct marketing, including associated profiling.

16.6 Right to Data Portability

Where legally applicable, you may request eligible personal information in a structured, commonly used, machine-readable format or request its transmission to another controller.

16.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing performed before the withdrawal.

16.8 Rights Relating to Automated Decision-Making

Where applicable, you may have rights concerning qualifying solely automated decisions that produce legal or similarly significant effects.

16.9 Right to Complain

Where applicable privacy law provides this right, you may submit a complaint to a competent data protection or supervisory authority.

16.10 Exercising Your Rights

You can submit privacy-related requests to:

info@endpointclients.com

Please include sufficient information to help us understand and process your request.

We may verify your identity where appropriate and will respond within the timeframes required by applicable law.

We will not discriminate against individuals for exercising legally protected privacy rights.