Privacy Policy
BAFK Consulting LLC (“BAFK Consulting”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you visit bafkconsulting.com or interact with our services.
This policy is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.
1. Data controller
The data controller responsible for your personal information is:
BAFK Consulting LLC
1704 Llano St, Ste B-1561, Santa Fe, NM 87505, United States
Email: contact@bafkconsulting.com
2. Information we collect
2.1 Information you provide directly
- Contact information: name, email address, phone number, company name, and any other information you submit when contacting us.
- Engagement information: details about your business, project requirements, and any other context shared during our exchanges.
- Communication content: the contents of emails, messages, and other communications you send to us.
2.2 Information collected automatically
- Technical data: IP address, browser type and version, device type, operating system, referring URL, and pages visited.
- Usage data: pages viewed, time spent on pages, links clicked, and similar engagement metrics.
- Cookies and similar technologies: see our Cookie Policy for details.
3. How we use your information
We use the information we collect for the following purposes:
- To respond to inquiries and provide the services you request.
- To enter into and perform a contract with you or your organization.
- To send transactional communications (e.g. proposals, invoices, scheduling).
- To improve our website, content, and services.
- To comply with legal obligations and protect our legal rights.
- To prevent fraud, abuse, and security incidents.
4. Legal bases for processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases:
- Performance of a contract — to deliver services you have engaged us for.
- Legitimate interests — to operate, improve, and secure our website and services, provided your interests do not override ours.
- Consent — for non-essential cookies and marketing communications, where required.
- Legal obligation — to comply with applicable laws and regulations.
5. Sharing of information
We do not sell your personal data. We may share information with:
- Service providers who help us operate the website and deliver our services (e.g. email, hosting, analytics, billing). These providers are bound by appropriate confidentiality and data protection obligations.
- Professional advisors such as lawyers, accountants, and auditors, where necessary.
- Authorities when required by law, court order, or to protect the rights, property, or safety of BAFK Consulting, our clients, or others.
- Successors in the event of a merger, acquisition, reorganization, or sale of assets.
6. International data transfers
As a US-based entity working with international clients, your data may be transferred to and processed in jurisdictions outside your country of residence, including the United States. Where required, we put appropriate safeguards in place — such as Standard Contractual Clauses (SCCs) — to protect your information.
7. Data retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Inquiry data that does not lead to an engagement is generally deleted within 24 months. Engagement records are retained for the duration of the relationship and a reasonable period thereafter as required by tax, accounting, or contractual obligations.
8. Your rights
Depending on your location, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your personal data, subject to legal retention obligations.
- Restriction — request that we limit processing of your data.
- Portability — request a copy of your data in a structured, commonly used format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — withdraw any consent you have given at any time.
- Lodge a complaint — file a complaint with your local data protection authority.
To exercise any of these rights, please contact us at contact@bafkconsulting.com. We respond to verified requests within 30 days.
California residents (CCPA/CPRA)
If you are a California resident, you have additional rights including the right to know what categories of personal information we collect, the right to delete your information, the right to opt out of any “sale” or “sharing” of personal information (we do not sell or share for cross-context behavioral advertising), and the right to non-discrimination for exercising these rights.
9. Security
We implement reasonable technical and organizational measures designed to protect your personal data against loss, misuse, and unauthorized access, alteration, or disclosure. However, no internet transmission or electronic storage is fully secure, and we cannot guarantee absolute security.
10. Children
Our website and services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated through the website or by email where appropriate.
12. Contact us
For any questions about this Privacy Policy or our data practices, please contact us at contact@bafkconsulting.com or by mail at 1704 Llano St, Ste B-1561, Santa Fe, NM 87505, United States.