At Process Pro Consulting ("Process Pro"), we are committed to safeguarding your personal information. This Privacy Policy describes the ways we process and protect your personal information that you provide or we collect in connection with your use of our electronic services, including processproconsulting.com (the "Website") and any related web-based or downloadable software or applications (collectively, the "Services"). The scope of this Policy is limited to information collected or received by us through your use of the Services.
Why We Process Your Personal Information
The Services are to assist business owners in accessing tools to improve business-related decision-making. Process Pro collects email addresses and other identifiable information to better inform and coordinate the use of the Services. If you do not agree to the terms of this Policy, please do not access this Website.
If you have questions or concerns about our privacy policy or practices, please contact us at contactus@processproconsulting.com.
The following list identifies why Process Pro uses your personal information when providing the Services:
A. Customer Surveys & Research:
We may use your contact information to ask you about your experience and about your use of the Services. We use this feedback to improve our Services.
B. Marketing:
We use your information when developing and providing relevant marketing materials. Our goal is to only provide you with materials that are of interest to you. We provide marketing materials to our users, including direct emails and other written materials. You may opt out of direct marketing communications by either clicking "unsubscribe" within any emails sent or requesting removal by emailing us at contactus@processproconsulting.com.
C. Marketing Communications:
By downloading any of our resources (ebooks, guides, case studies, etc.), you agree to receive marketing communication from Process Pro Consulting. This may include promotional emails, newsletters, or other information that we think you may find interesting.
You may opt out of receiving these communications at any time by clicking on the "unsubscribe" link provided in our emails or by contacting us at contactus@processproconsulting.com.
D. Detecting and Preventing Fraud:
We use your information to monitor for potentially fraudulent activities committed using the Services.
Information We Process to Provide the Services
We may use your e-mail address or mobile phone number to contact you about your experience with the Services and notify you about company news and promotions.
Payment Information:
If you make a payment to us for the Services, we use Stripe as our payment processor to handle payment transactions. We do not directly access, handle, or store your full credit or debit card information; Stripe processes and stores this information in accordance with its own privacy policy.
Social Media Pages:
We maintain pages on social media platforms such as LinkedIn and Facebook ("Social Media Pages"). When you interact with our Social Media Pages, we may collect personal information that you choose to share with us, such as your contact details and the content of any messages or comments. The companies that host these platforms may also provide us with aggregate information and analytics regarding engagement with our Social Media Pages.
Information We Obtain from Others:
We may also obtain information about you from other sources, such as our customers (for example, where we are granted access to a customer's systems, such as a CRM or database, in order to perform the Services), third-party services, and publicly available sources.
How We Share Your Information
We do not sell your personal information. We may share information with third-party service providers who perform functions on our behalf, including hosting, communications, analytics, and productivity and AI-based tools that help us deliver the Services. These providers are permitted to access information only as needed to perform their functions and are contractually restricted from using it for any other purpose.
Where we use AI-based tools, our agreements with those providers prohibit use of your data to train their underlying models. Our internal practices are designed to limit the exposure of personal, sensitive, or health information to these tools; in cases where we act as a business associate under HIPAA, files containing protected health information are maintained in a segregated environment that is not accessible to our AI-based tools.
A current list of our subprocessors is available upon request by emailing contactus@processproconsulting.com.
Business Transfers:
If Process Pro is involved in a merger, acquisition, financing, reorganization, or sale of some or all of its assets, personal information may be transferred as part of that transaction. We will notify you of any such change in ownership and any choices you may have regarding your personal information.
International Data Transfers:
Where we transfer personal data from the European Economic Area, United Kingdom, or Switzerland to the United States, we take steps designed to ensure that data receives a level of protection consistent with applicable data protection law, including assessing the data protection practices of our service providers.
Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, or destruction. These safeguards include:
- Access controls based on the principle of least privilege, so that personnel and contractors can access client information only to the extent necessary to perform authorized services;
- Multi-factor authentication required for access to our primary business systems;
- Encryption of data in transit and at rest;
- Endpoint protection and continuous security monitoring across company devices and systems;
- Background screening of employees prior to hire;
- A documented incident response process, and a vendor risk review process applied before adopting new third-party tools or subcontractors, including review of available security certifications; and
- Prompt revocation of system access upon termination of an employee, contractor, or subcontractor relationship.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain personal information for as long as necessary to provide the Services. During an active client engagement, client information is stored on secure systems and accessed only by personnel performing services under a signed agreement. When an engagement ends, we identify and organize the client information in our possession and work with the client to determine whether that information should be securely returned, securely destroyed, or archived for potential future engagements.
For engagements involving Protected Health Information under a Business Associate Agreement, we retain applicable records and logs for the period required by the agreement and applicable law.
Your Choices
You have several options for managing how we collect and use your personal information:
Account Information:
If you have an active account or engagement with us, you may access, update, or request deletion of certain personal information you have provided by contacting us using the information in the Contact Us section above. We will need to verify your identity before fulfilling such requests, and certain information may need to be retained as described above under Data Retention.
Cookies:
See Usage Statistics & Tracking below for information about managing cookies through your browser settings.
Marketing Communications:
You may opt out of marketing emails at any time as described above under Why We Process Your Personal Information.
Do Not Track:
Some browsers offer a "Do Not Track" (DNT) signal. Because no common industry or legal standard for DNT has been adopted, we do not currently respond to DNT signals.
Data Privacy Rights Under General Data Protection Regulation (GDPR)
If you are a resident of the European Economic Area, you have the following rights with respect to your personal data:
- Right of Access – a right to understand the nature and extent of how your data is processed;
- Right to Rectification – a right to request correction of inaccurate data;
- Right to Erasure – a right to request the erasure of personal data in some circumstances, commonly referred to as the "Right to be Forgotten";
- Right to Restriction of Processing – a right to limit how your personal data is processed;
- Right to Data Portability – a right to receive personal data and transfer information to another controller;
- Right to Object – a right to object to the processing of your personal data based on your circumstances and a right to object to direct marketing; and
- Right to Freedom from Automated Decision-Making – a right not to be subject to decision-making based solely on automated processing, including profiling, that produces significant effects.
Process Pro will take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data. Please contact us if you wish to learn what personal data we hold about you or would like to request deletion of your personal data. Once we have verified your identity, we will comply with all reasonable requests.
You may bring a complaint directly to us by emailing us at contactus@processproconsulting.com. We take all of your concerns seriously and will review any written complaints received by us. We will cooperate with the appropriate regulatory authorities to resolve any complaints regarding your personal data.
You also have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority.
Our Legal Bases for Processing Personal Information
Legitimate Interests:
Our use of your information is necessary for our legitimate interests under purposes A – D. We have a legitimate interest in providing an excellent user experience, and we would be unable to provide our users with secure access to the client-only area or provide notifications to users relating to their business interests without access to their personal information. We also have legitimate interests in providing customer support, evaluating and improving our Services (via data gathering or direct customer feedback), and detecting and preventing fraud, which helps protect us and our customers from harm. We value your fundamental rights and freedoms and therefore do not engage in uses of your information where our legitimate interests are outweighed by your fundamental rights and freedoms.
Legal Obligations - Vital Interests:
In addition to the specific bases for disclosure of personal data set forth in this section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. To the extent we are legally required to disclose information to law enforcement, we will comply with such requests. We will not otherwise voluntarily disclose your information.
Pursuant to the GDPR, all transfers of personal data are subject to either (i) an adequacy decision, or (ii) appropriate safeguards, as further described above under International Data Transfers.
California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights regarding your personal information:
- Right to Know: the categories and specific pieces of personal information we have collected, the sources of that information, the purposes for collecting it, and the categories of third parties with whom it is shared.
- Right to Delete: request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Correct: request correction of inaccurate personal information.
- Right to Opt-Out: we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of at this time.
- Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information for purposes beyond what is necessary to provide the Services.
- Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights.
To exercise these rights, contact us at contactus@processproconsulting.com. We will verify your request before responding and will respond within the timeframes required by law. You may also designate an authorized agent to make a request on your behalf.
To the extent possible, users will receive equal service and price regardless of whether they exercise their privacy rights under the California Consumer Privacy Act. Process Pro does not sell the personal data of its users.
Children's Privacy
The Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children.
Security Incident Notification
In the event of a security incident affecting your personal information, we will notify affected individuals and any applicable regulatory authorities without undue delay, as required by applicable law.
Usage Statistics & Tracking
Cookies:
Cookies are small text files that are transferred to your computer and/or device to remember things about your visit, such as your preferences or a username and password. Information contained in a cookie may be linked to your personal information for purposes such as improving the quality of the Service or tailoring recommendations to your interests. You can disable cookies at any time, although it may prevent you from accessing or using some or all features of the Services. You can manage your cookie preferences through your browser settings.
Links to Third-Party Websites
The Services may contain links to other websites that are not operated or controlled by us, including social media platforms. Any information you share with those third-party websites is governed by their own privacy policies and terms, not this Privacy Policy. Providing these links does not imply that we endorse or have reviewed the practices of those websites, and we encourage you to review their privacy policies directly.
Changes to This Privacy Policy
We may amend, update, or replace this Privacy Policy from time to time. In the event we make changes, we will notify users after publishing the same, by updating the "Last Updated" date at the top of this Privacy Policy accordingly. If there are significant changes to this Privacy Policy, we will attempt to notify you directly by e-mail, or provide information via our home page prior to such changes becoming effective. We encourage you to review our Privacy Policy whenever you use the Services to stay informed of ways you can protect your privacy.
