Privacy Policy

Effective October 23rd, 2024


KRSA values your privacy and is committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information. By using our services or accessing our website, you consent to the practices described in this policy.

Information Collection:

  • Types of Information: We may collect personal and non-personal information, business contact information, project-related data, other details relevant to the work we perform, billing address and payment details, and browsing behavior.
  • What We Collect: We may collect information directly from you, through our website, and from third parties with whom we have business relationships.
  • Sensitive Information: We do not intentionally collect sensitive personal data such as health information, racial or ethnic origins, or religious beliefs.
  • Log Data: We may collect log data from our use of Microsoft 365 services or other third parties, which can include your IP address, activity, and usage details. This data is processed for security, analytics, and service optimization.
  • Children's Privacy: Our services are not directed at children under the age of 13 (or other applicable age limits depending on jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will delete that information as quickly as possible.

Use of Information:

  • Project Delivery: To perform and deliver consulting services or projects that meet your requirements.
  • Business Operations: To process orders, contracts, invoices, and payments.
  • Customer Communication: To respond to inquiries, provide updates on projects, and communicate about services.
  • Legal Compliance: To comply with laws and regulations, including data retention and reporting obligations.
  • Security: To safeguard our website, systems, and data from unauthorized access or cyber threats.
  • Marketing and Business Development: To send you relevant business and service updates, subject to your preferences.

    • We only use your personal information for purposes compatible with the original purpose of collection, unless we obtain your explicit consent or are required by law.

Prohibition on the Sale of Private Information:

  • Sale of Private Information:KRSA, its employees, contractors, and agents are expressly forbidden to sell or provide personal customer, employee or vendor information to third parties for commercial benefit.

Disclosure of Information:

  • Service Providers: We may engage third-party service providers for IT support, payment processing, cloud services, or other functions necessary to run our business. These third parties are contractually obligated to protect your data and comply with applicable privacy laws.
  • Business Partners: If necessary, we may share information with subcontractors or partners involved in joint projects, subject to confidentiality agreements.
  • Legal Requirements: We may share data with government bodies, regulators, or law enforcement if required by law or in response to valid legal requests (e.g., subpoenas or court orders).
  • Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred as part of the transaction.

    • KRSA personnel are prohibited from all other uses of customers’ information.

Data Security:

  • Measures: We implement technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction.
  • Data Breach: In the event of a data breach, we will notify affected individuals and authorities as required by law.

Cookies and Tracking:

  • Cookies: Our website may contain links to third-party websites, services, or resources. This Privacy Policy does not apply to these third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites before providing personal information.

Data Retention:

  • Data Retention: The company retains personal and business data for as long as necessary to fulfill its operational, legal, and regulatory obligations. The specific retention period for data will be determined based on the type of data, business needs, and any applicable legal requirements. Once data is no longer required for these purposes, it will be securely deleted, archived, or anonymized. The company reserves the right to modify retention periods at its discretion, ensuring compliance with evolving legal and business demands while maintaining the security and privacy of the data throughout its lifecycle.

User Rights:

  • Access and Correction: You have the right to access, correct, update, or delete your personal information. Contact us to exercise these rights.

Changes to This Policy:

  • Policy Review: This policy will be reviewed annually to reflect changes in our practices or legal requirements.