Privacy Policy

This Privacy Policy ("Policy") describes how Barrett Sharpe ("we," "us," or "our") collects, uses, discloses, and safeguards information in connection with the website located at barrettsharpe.com and any related online services, content, or functionality (collectively, the "Site").

This Policy is designed to reflect the expectations of sophisticated organizations operating in regulated, high-stakes, and data-sensitive environments.

1. Scope and Applicability

This Policy applies to information collected through the Site and through direct communications initiated via the Site, including diagnostic inquiries, submissions, and related interactions.

This Policy does not apply to information collected offline, through third-party platforms not controlled by us, or through engagements governed by separate contractual agreements.

2. Information We Collect

2.1 Information You Provide Directly

We may collect information that you voluntarily submit through the Site, including but not limited to:

• •First name and last name
• •Business email address
• •Company or organization name
• •Postal or ZIP code
• •Diagnostic and qualitative business information submitted through forms or written responses
• •Any additional information you choose to provide during communications

All submissions are provided at your discretion. You are responsible for ensuring that any information you provide does not violate third-party rights or confidentiality obligations.

2.2 Information Collected Automatically

When you access the Site, we may automatically collect certain technical and usage information, including:

• •IP address and approximate geographic location
• •Device type, browser type, and operating system
• •Pages viewed, navigation patterns, and interaction timestamps
• •Referral sources and session metadata

This information is collected using first-party analytics and tracking technologies designed to measure system performance, usage patterns, and operational integrity. We do not engage in behavioral advertising, cross-site tracking, or the sale of personal data.

3. Purpose of Collection and Use

We collect and use information for the following legitimate business purposes:

• •To evaluate and respond to diagnostic inquiries
• •To assess whether an engagement is appropriate or feasible
• •To analyze system performance and site integrity
• •To improve the accuracy, reliability, and security of the Site
• •To comply with legal, regulatory, and contractual obligations
• •To protect against fraud, misuse, or unauthorized activity

We do not use collected information for consumer profiling, mass marketing, or automated decision-making with legal or similarly significant effects.

4. Legal Bases for Processing (Where Applicable)

Where applicable under data protection laws (including the GDPR), we process information based on one or more of the following legal bases:

• •Your consent
• •Our legitimate interests in operating and securing the Site
• •Performance of pre-contractual or contractual obligations
• •Compliance with legal obligations

5. Disclosure of Information

We do not sell, rent, or trade personal information.

We may disclose information in limited circumstances, including:

• •To service providers acting on our behalf under confidentiality obligations (e.g., secure hosting, infrastructure, analytics, or communication services)
• •To comply with applicable laws, regulations, legal process, or governmental requests
• •To protect the rights, safety, or property of Barrett Sharpe, our users, or others
• •In connection with a business transfer, restructuring, or similar transaction

All disclosures are made on a need-to-know basis and subject to appropriate safeguards.

6. Data Security

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, or destruction.

These measures include, but are not limited to:

• •Secure server-side processing
• •Encryption in transit where appropriate
• •Access controls and principle-of-least-privilege enforcement
• •Monitoring for misuse and abnormal activity

No system is entirely immune from risk. However, we take security seriously and continuously evaluate our controls in light of evolving threats.

7. Data Retention

We retain information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Diagnostic submissions and related communications may be retained for internal reference, audit, or compliance purposes, subject to reasonable retention limits.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• •Request access to personal information we hold about you
• •Request correction or deletion of your information
• •Object to or restrict certain processing activities
• •Withdraw consent where processing is based on consent

Requests may be submitted through the contact mechanism provided on the Site. We reserve the right to verify identity and to decline requests where permitted by law.

9. International Transfers

Information collected through the Site may be processed and stored in jurisdictions outside of your country of residence, including the United States.

Where required, we implement appropriate safeguards to ensure lawful cross-border data transfers.

10. Children's Information

The Site is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. Accessing external sites is at your own risk.

12. Changes to This Policy

We may update this Policy from time to time to reflect operational, legal, or regulatory changes.

Material changes will be posted on this page with an updated "Last Updated" date. Continued use of the Site constitutes acceptance of the revised Policy.

13. Contact

Questions or concerns regarding this Privacy Policy may be directed through the contact mechanism provided on the Site.