Legal

Privacy Policy

Last reviewed: August 8, 2026

This Privacy Policy describes how Data Wise Consulting LLC ("Data Wise," "we," "us," or "our") handles information in connection with the website located at datawisec.com (the "Site"). It covers the Site only. Information handled under a signed Master Services Agreement or Statement of Work is governed by that agreement.

1. Summary of Current Practices

We collect information you submit through the contact form, limited security and request metadata generated when your browser communicates with our infrastructure, and a preference record stored locally in your browser. We do not sell personal information, do not share personal information for cross-context behavioral advertising, do not conduct targeted advertising, do not disclose personal information to advertising networks or data brokers, and do not use session replay, screen recording, heatmaps, keystroke capture, or form-abandonment monitoring. No analytics service, advertising pixel, marketing cookie, or chat widget currently loads on this Site.

2. Categories of Information and Sources

Contact and inquiry information. Name, work email address, company, service interest, business objective, message content, and an optional resource identifier indicating the material you requested. Source: you, through the contact form.
Communications. Correspondence you exchange with us, including transactional confirmation and notification email associated with your submission, and any follow-up messages. Source: you and our email infrastructure.
Security and request metadata. Standard information generated when your browser makes a request, such as internet protocol address, timestamp, requested address, response status, referring address, and user-agent string, together with bot protection signals generated by the challenge presented on the contact page. Source: your browser and our hosting and network security providers.
Local preference record. Your privacy category selections, the state of any Global Privacy Control signal, and a timestamp, stored in your browser under the local storage key dwc-cookie-consent-v2. This record remains on your device and is not transmitted to us as a separate collection. Source: your interaction with the privacy preference dialog.

We do not request government identifiers, financial account numbers, health information, precise geolocation, biometric data, or account credentials through this Site, and we ask that you not submit them. We do not knowingly collect information from individuals under 16.

3. Purposes

Responding to your inquiry and corresponding with you about it.
Delivering material you requested and confirming that a submission was received.
Operating, maintaining, and improving the Site.
Securing the Site, preventing abuse and fraud, and investigating suspected misuse.
Maintaining ordinary business and prospect records.
Meeting legal, tax, accounting, and recordkeeping duties.
Establishing, exercising, or defending legal claims.

We do not use information collected through the Site to build advertising profiles or to make inferences for advertising purposes.

4. Categories of Recipients

We disclose information to the following categories of recipients for the business purposes described above, subject to contractual confidentiality and use limitations where applicable:

Cloudflare. Network delivery, network security, and bot protection on the contact form.
Supabase. Hosted database storage for contact form submissions.
Lovable. Application hosting and transactional email infrastructure used to send confirmation and internal notification messages.
Google. Delivery of web font files. Requesting a font file makes your internet protocol address and standard request headers visible to that service. We do not send contact form content, analytics identifiers, or advertising identifiers to it.
Professional advisers. Legal, accounting, and insurance advisers, where relevant to a matter.
Government authorities and other parties. Where required by law, legal process, or an enforceable governmental request, or where reasonably necessary to protect rights, safety, or property, or in connection with a merger, financing, reorganization, or sale of assets.

We do not disclose personal information to advertising networks, data brokers, social platforms, or model developers for their own purposes.

5. No Sale, No Sharing, No Targeted Advertising

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not engage in targeted advertising, profiling in furtherance of decisions producing legal or similarly significant effects, or disclosure of personal information to advertising networks. We do not use session replay or similar behavior recording technology.

6. Retention

We retain information for as long as needed for the purpose for which it was collected and then for the period appropriate to our recordkeeping and legal needs. We apply the following criteria rather than a single fixed deletion date:

whether the inquiry remains open or has become an active or prospective engagement;
whether the record is needed for business, accounting, tax, or contractual records;
whether the record is needed to establish, exercise, or defend a legal claim, or is subject to a legal hold;
whether the record is needed for security, abuse prevention, or investigation of misuse; and
the retention behavior of the underlying provider, which applies to infrastructure logs generated by hosting, network security, and email delivery services.

Security and request logs are generated and retained by our providers on their own operational schedules and are not maintained by us as a long-term marketing record. When a criterion no longer applies, we delete the record or reduce it to a form that is no longer associated with an identifiable individual, subject to backup and archival cycles that may retain copies for a limited additional period. The local preference record remains in your browser until you clear it or your browser clears it.

7. Security

We use administrative, technical, and physical measures that are reasonable in light of the nature of the information and the risks involved, including transport encryption, access restrictions, hosted infrastructure with provider-managed controls, and bot protection on the contact form. No method of transmission or storage is completely secure, and we do not warrant or guarantee the security of any information.

8. Your Choices

You can review and change your privacy category selections at any time through the control in the footer. You can also manage cookies through your browser settings, decline to submit the contact form, and unsubscribe from any non-transactional email we may send using the mechanism provided in that message.

9. Requests, Verification, Agents, and Appeals

Depending on your residence and on whether the applicable law covers our processing, you may have the right to request access to the personal information we hold about you, correction of inaccurate information, deletion, a portable copy, information about disclosures, or the opportunity to opt out of certain processing. Submit a request through our contact form and identify the right you are exercising.

Verification. Before acting on a request we take reasonable steps to verify that the request comes from you or from a person authorized to act for you. We may ask you to confirm information already in our records, or to respond from the email address used in the original submission. If we cannot verify a request, we will tell you and will not disclose personal information.

Authorized agents. Where applicable law allows an authorized agent to submit a request on your behalf, we may require written proof of authorization and may require you to verify your own identity directly.

Appeals. Where applicable law provides a right to appeal a declined request, you may submit an appeal through the contact form, and we will respond within the period that law requires, including an explanation of the decision and any further recourse available to you.

Non-discrimination. We do not deny access to the Site, charge a different price, or provide a different level of service because you exercised a privacy right.

We respond to requests within the period required by applicable law, or promptly where no specific period applies. There is no charge for a reasonable request, and we may decline or charge a reasonable fee for a request that is manifestly unfounded or excessive to the extent permitted by law.

10. Cookies, Local Storage, and Global Privacy Control

Our Cookie Policy describes the cookies and local storage in use, the distinction between them, and the categories in the preference dialog. Where required by applicable law, we treat a Global Privacy Control signal from your browser as an opt-out of the sale or sharing of personal information for cross-context behavioral advertising. When that signal is present, the marketing and personalization categories are set to off and cannot be enabled in the preference dialog for that browser.

11. California

This section addresses the disclosure subjects covered by the California Online Privacy Protection Act. The categories of personally identifiable information we collect, the categories of third parties with whom that information may be shared, the process for reviewing and requesting changes, the way we notify visitors of changes to this notice, and its effective date are described in Sections 2, 4, 9, 14, and the review date above. We respond to Do Not Track browser signals as described in this Section, and we treat Global Privacy Control signals as stated in Section 10. Because there is no accepted uniform standard for Do Not Track signals, we do not respond to them separately; we do not conduct cross-site behavioral tracking in any event.

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to a business only where statutory thresholds and exemptions are met. We do not state that it necessarily applies to us. If and to the extent it applies to our processing of your personal information, California residents have the right to know what personal information is collected, used, disclosed, sold, or shared; to request deletion; to request correction; to obtain a portable copy; to opt out of the sale or sharing of personal information; to limit the use and disclosure of sensitive personal information; and not to receive discriminatory treatment for exercising a right. As stated above, we do not sell or share personal information and we do not collect sensitive personal information through this Site for purposes requiring a limitation right. To exercise a right, use the process in Section 9.

12. Other United States Jurisdictions

Several states have enacted consumer privacy statutes. Coverage under those statutes depends on business thresholds, entity-level and data-level exemptions, the residency of the individual, and the nature of the processing. Where a statute applies to our processing, qualifying residents may have rights of access, correction, deletion, portability, opt-out of targeted advertising, sale, or certain profiling, and appeal of a declined request. We honor applicable rights using the process in Section 9. We do not represent that any particular state statute applies to us.

13. EEA, United Kingdom, and Switzerland

This Site is operated from the United States and is directed to organizations in the United States. The fact that the Site is accessible from other countries does not establish that we target or monitor individuals in those countries. If and to the extent European Union, United Kingdom, or Swiss data protection law applies to our processing:

Data Wise Consulting LLC is the controller for personal data processed through this Site, and may be contacted through the contact form.
Lawful bases are performance of steps taken at your request before entering a contract and our legitimate interests in responding to inquiries, operating and securing the Site, keeping business records, and defending claims, together with legal obligation where a duty applies and consent where consent is required for a specific technology.
You may have rights of access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent without affecting prior processing.
You may lodge a complaint with your supervisory authority. We would appreciate the opportunity to address your concern first.
Personal data is transferred to and processed in the United States. Where applicable law requires a transfer mechanism, Data Wise will assess and use an appropriate mechanism, which may include applicable standard contractual clauses. Safeguards offered by our providers must be confirmed on a provider by provider basis, and we do not represent that any particular mechanism is presently in place for every provider.
We do not make decisions based solely on automated processing of website data that produce legal effects concerning you or similarly significantly affect you.

14. Changes to This Policy

We may revise this Privacy Policy. The review date above reflects the most recent revision. Where a change materially affects how we handle personal information, we will take reasonable steps to bring it to your attention.

15. Contact

Privacy questions and requests may be submitted through our contact form.

This notice describes our current practices. It is not a compliance certification, a legal opinion, or a guarantee that any particular law applies or has been satisfied.