Privacy Policy - R2 Consulting, LLC

1. Introduction

R2 Consulting, LLC and its subsidiaries and affiliates ("R2 Consulting," "we," "us," or "our") are committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites, use our services, or otherwise interact with us. This policy applies to all personal data processed in connection with our custom software development, AI services, and related consulting offerings. By engaging with our services, you acknowledge that you have read and understood this Privacy Policy.

2. Scope and Applicability

This Privacy Policy applies to all individuals whose personal data we process, including clients, prospective clients, website visitors, business contacts, and end users of applications we develop. It covers data collected through our websites, applications, email communications, and in-person interactions.

3. Information We Collect

4. How We Collect Information

• Directly from you when you engage our services, fill out forms, or communicate with us
• Automatically through cookies, web beacons, and similar technologies when you visit our websites
• From third-party sources including publicly available databases, business directories, social media platforms, referral partners, and data enrichment services
• Through our AI-powered tools and automated systems used for business development and lead generation
• From our clients when acting as a data processor on their behalf

5. Legal Bases for Processing (GDPR)

6. How We Use Your Information

• Delivering, maintaining, and improving our software development and AI consulting services
• Managing client relationships and accounts
• Processing transactions and sending related information
• Sending marketing communications (with your consent where required)
• Conducting business development and lead generation activities
• Analyzing website usage and optimizing user experience
• Ensuring network and information security
• Complying with legal obligations and enforcing our agreements
• Developing and training AI/ML models (using anonymized or aggregated data only)
• Responding to inquiries and providing customer support

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you. Our use of cookies includes essential cookies for website functionality, analytics cookies to understand usage patterns, and marketing cookies for targeted advertising.

8. Data Sharing and Disclosure

R2 Consulting does not sell your personal information. We do not share personal information for cross-context behavioral advertising as defined under the CCPA/CPRA.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer personal data from the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms.

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, applicable legal requirements, and whether we can achieve those purposes through other means.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls and authentication mechanisms, regular security assessments and penetration testing, employee training on data protection, incident response procedures, and secure software development practices.

12. Your Rights Under GDPR

Individuals located in the EEA, UK, or Switzerland

13. Your Rights Under CCPA/CPRA

California residents

To exercise your rights, we will verify your identity using reasonable methods. You may also designate an authorized agent to make requests on your behalf.

14. Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

15. Third-Party Links and Services

Our websites and services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites or services you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website with a revised effective date. Where required by law, we will obtain your consent before making material changes.

17. Data Protection Officer

For questions or concerns about this Privacy Policy or our data processing practices, or to exercise your privacy rights, please contact our Privacy Officer.

18. Supervisory Authority

If you are located in the EEA and believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with your local data protection supervisory authority.