Legal

Privacy Policy

Last updated: January 15, 2025

1. Introduction

Zoltrava LLC ("Zoltrava," "we," "us," or "our") is committed to protecting the privacy of our clients, website visitors, and any individuals whose personal information we may process in the course of delivering our operational consulting services. This Privacy Policy describes how we collect, use, store, share, and protect personal information when you interact with our website, engage our services, or communicate with our team.

This policy applies to all personal information collected through our website at zoltrava.com, through direct communications (email, phone, in-person meetings), through engagement-related documentation and deliverables, and through any other channels where we interact with you in a professional capacity. By using our services or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you submit inquiries through our website contact form, enter into a consulting engagement, communicate with us via email or phone, or participate in meetings, workshops, or training sessions. This information may include your full name, email address, phone number, company name and title, business address, and any additional details you choose to share in the context of your communications or our professional engagement.

In the course of delivering consulting services, we may also receive operational data, business process documentation, employee information, financial summaries, organizational charts, and other business-related information from your organization. While much of this data relates to your business operations rather than individual persons, we treat all client-provided information with the same care and confidentiality regardless of whether it constitutes personal information under applicable privacy laws.

When you visit our website, we may automatically collect certain technical information including your IP address, browser type and version, operating system, referring URL, pages visited, time and date of access, and general geographic location derived from IP address. This information is collected through standard web server logs and analytics tools and is used to improve website performance and understand visitor behavior in aggregate.

3. How We Use Your Information

We use the personal information we collect for the following purposes: to respond to your inquiries and communicate with you about our services; to deliver, manage, and improve our consulting engagements; to prepare and deliver proposals, statements of work, invoices, and related business documentation; to conduct operational analysis, develop recommendations, and create deliverables as part of our consulting services; and to comply with legal obligations and enforce our Terms of Service.

We do not use your personal information for automated decision-making or profiling. We do not sell your personal information to third parties. We do not use client engagement data for marketing purposes without explicit consent. All personal information processing is limited to what is necessary and proportionate to the purposes described in this policy.

4. Information Sharing and Disclosure

We do not sell, rent, lease, or trade your personal information to any third party. We may share your information in the following limited circumstances: with service providers who assist us in operating our business (such as cloud hosting providers, accounting software, and communication tools), provided they are contractually obligated to protect your information and use it only for the purposes we specify; when required by law, regulation, legal process, or governmental request; to protect the rights, property, or safety of Zoltrava, our clients, or others; or in connection with a merger, acquisition, or sale of all or a portion of our assets, in which case you would be notified of any change in ownership or uses of your personal information.

Any third-party service providers we engage are carefully vetted and required to maintain the confidentiality and security of personal information in accordance with standards no less protective than those described in this Privacy Policy. We maintain a limited number of such relationships and regularly review their data handling practices.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. For client engagement data, we generally retain records for a period of seven (7) years following the completion of an engagement, consistent with professional best practices and applicable regulatory requirements.

Website analytics data is retained in aggregate form and is not linked to identifiable individuals after processing. Contact form submissions that do not result in a consulting engagement are retained for twelve (12) months and then securely deleted. You may request earlier deletion of your personal information at any time by contacting us using the details provided below, subject to any legal or contractual obligations that may require continued retention.

6. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls limiting data access to authorized personnel on a need-to-know basis, regular security assessments and updates, secure file storage and transfer protocols, and employee training on data protection practices.

While we take reasonable steps to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information, but we commit to promptly investigating and addressing any suspected data breaches and notifying affected individuals and relevant authorities as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have certain rights with respect to your personal information, including the right to access and obtain a copy of your personal information, the right to request correction of inaccurate or incomplete personal information, the right to request deletion of your personal information (subject to certain exceptions), the right to restrict or object to certain processing of your personal information, the right to data portability where technically feasible, and the right to withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within thirty (30) calendar days or as required by applicable law. We may request verification of your identity before processing your request to protect against unauthorized disclosure of personal information.

8. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and collect analytical data. Cookies are small data files stored on your device when you visit a website. We use only essential cookies necessary for website functionality and analytics cookies to understand how visitors interact with our website. We do not use advertising or behavioral targeting cookies.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling cookies may affect certain features of our website. For more information about cookies and how to manage them, visit your browser's help documentation.

9. Children's Privacy

Our services are designed for businesses and professional individuals. We do not knowingly collect personal information from children under the age of sixteen (16). If we become aware that we have inadvertently collected personal information from a child under sixteen, we will take immediate steps to delete such information from our records. If you believe we may have collected information from a child, please contact us immediately using the details provided below.

10. International Data Transfers

Zoltrava is based in the United States and our primary data processing activities occur within the United States. If you are accessing our services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States where data protection laws may differ from those in your jurisdiction. By providing your personal information, you consent to such transfers. We take reasonable steps to ensure that your personal information receives an adequate level of protection regardless of where it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where appropriate, provide additional notice through our website. We encourage you to periodically review this Privacy Policy to stay informed about how we protect your personal information.