Privacy Policy
Last Updated: March 18, 2026
Introduction
Welcome to Canaria Consulting, LLC ("Canaria," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage our consulting services, or interact with us in any capacity (collectively, the "Services").
Canaria acts as a data controller for the personal information it collects directly from website visitors and prospective or current clients.
"Personal Data" or "personal information" refers to any information that relates to an identified or identifiable individual, including as defined under applicable data protection laws such as the GDPR and CCPA/CPRA.
Information We Collect
Information You Provide
- Contact Information: Name, email address, phone number, company name, and job title when you reach out to us or request our services
- Business Information: Company details, compliance documentation, and project information shared during consulting engagements
- Communications: Messages, inquiries, and other content you send to us
Information Automatically Collected
- Technical Data: IP addresses, browser type, device information
- Usage Data: Pages visited, time spent on pages, and website analytics
How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, manage, and deliver our consulting services, including client onboarding and project execution.
- Client Communication: To respond to inquiries, provide updates on engagements, and deliver administrative notices.
- Website Improvement: To improve our website, understand usage trends, and enhance user experience through aggregated analytics.
- Legal & Regulatory Compliance: To comply with applicable laws, regulations, and legal obligations, including responding to lawful requests from authorities.
- Security: To detect, prevent, and investigate security incidents, fraud, and unauthorized access.
Information Sharing and Disclosure
We may share your information with:
- Service providers who assist in operating our website and business
- Law enforcement or regulatory bodies when legally required
- Professional advisors (attorneys, accountants, auditors)
We do not sell your personal information to third parties.
Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit and at rest
- Access controls and authentication mechanisms
- Secure data backup and recovery procedures
Data Retention
We retain your information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to comply with our legal obligations, resolve disputes, and enforce our agreements.
- Contact and account information: Retained for the duration of our business relationship and up to 3 years thereafter
- Engagement-related documentation: Retained for up to 7 years or as required by law
- Technical and usage data: Retained for 12 months unless otherwise required
Cookies and Tracking Technologies
We may use cookies and similar technologies to enhance your experience, analyze usage patterns, and improve our website. You can manage cookie preferences through your browser settings or opt-out tools provided in your region.
Your Rights and Choices
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data (subject to legal requirements)
- Opt-out of marketing communications
- Request exporting your data in a structured format
International Data Transfers
We may transfer your information to servers located outside your country of residence. We rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers outside the EEA and UK. These clauses ensure your personal data is protected when transferred internationally.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of any material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date at the top of this page
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Company: Canaria Consulting, LLC
Additional Information for Specific Jurisdictions
California Residents
If you are a California resident and the processing of Personal Data about you is subject to the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the following rights:
Notice at Collection
You have the right to receive notice of our data practices at or before the point of collection, including:
- Categories of Personal Data collected
- Purposes for collection and use
- Whether information is sold or shared
- Retention period for collected information
These details are provided throughout this privacy policy.
Right to Know
You have the right to request disclosure of the Personal Data we have collected about you, including:
- Categories of Personal Data collected
- Sources of Personal Data
- Business purposes for collection
- Categories of third parties with whom we share Personal Data
To make a "request to know": Email us at privacy@canariaconsulting.com
Rights to Request Correction or Deletion
You have the right to:
- Request correction of inaccurate Personal Data
- Request deletion of Personal Data (subject to certain exceptions)
To make a correction or deletion request: Email us at privacy@canariaconsulting.com
Non-Discrimination
We will not discriminate against you for exercising your CCPA/CPRA rights.
For questions about our California privacy practices, email privacy@canariaconsulting.com.
European Economic Area & UK Residents
If you are located in the European Union or United Kingdom, the processing of your Personal Data is subject to additional rights and protections under applicable data protection laws (including GDPR and UK GDPR).
Legal Basis for Processing
We collect and process your Personal Data based on one or more of the following legal bases:
Your Rights
Under these laws, you have the following rights:
Access and Portability
- Request access to your Personal Data
- Receive a copy in a structured, commonly used, machine-readable format
- Transfer your Personal Data to another service provider where technically feasible
Control and Rectification
- Request correction of inaccurate Personal Data
- Object to the processing of your Personal Data
- Restrict the processing of your Personal Data under certain circumstances
- Request erasure of your Personal Data ("right to be forgotten")
- Withdraw your consent at any time for future processing where we rely on consent
Exercising Your Rights
To exercise any of these rights:
- Email us at privacy@canariaconsulting.com
We will respond to your request within the timeframe required by applicable law.
Supervisory Authority
While we encourage you to contact us first with any questions or concerns, you have the right to lodge a complaint with your local data protection supervisory authority.