Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how Linchpin Advisory, LLC, a computer systems design and integration firm based in Sandy, Utah, collects, uses, stores, and protects information obtained from visitors to our website located at www.linchpinadvisory.buzz and from individuals and organizations who engage our professional services. This policy applies to all interactions with Linchpin Advisory through our website, email communications, telephone consultations, and in-person engagements.

By accessing our website or using our services, you acknowledge that you have read and understood the practices described in this Privacy Policy. If you do not agree with any provision of this policy, you should discontinue use of our website and refrain from submitting personal information through any channel associated with Linchpin Advisory.

Linchpin Advisory acts as a data controller for the personal information we collect directly from you. For information processed on behalf of our clients during the course of providing systems design and integration services, we act as a data processor in accordance with the terms of our client agreements. This policy primarily addresses our role as a data controller.

2. Information We Collect

We collect several categories of information in connection with our business operations and the delivery of our professional services. The types of information we gather depend on the nature of your interaction with Linchpin Advisory and are limited to what is reasonably necessary for the purposes described in this policy.

2.1 Information You Provide Directly

When you contact us through our website contact form, send us an email at care@linchpinadvisory.buzz, call our office at +1 (270) 490-5980, or engage us for consulting services, you may provide us with personal and business information including your full name, job title, company name, email address, telephone number, physical mailing address, and details about your project requirements, technical infrastructure, and business objectives. If you enter into a professional services agreement with Linchpin Advisory, we may also collect billing information, payment details, and other information necessary to fulfill our contractual obligations.

2.2 Information Collected Automatically

When you visit our website, our servers automatically log certain technical information transmitted by your browser. This includes your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages visited on our site, the date and time of your visit, and the duration of your browsing session. This information is collected through standard web server logs and is used solely for operational purposes, security monitoring, and aggregate analytics to improve our website performance and user experience.

We do not use third-party advertising cookies, tracking pixels from advertising networks, or behavioral profiling technologies on our website. Any analytics we employ are limited to first-party, privacy-respecting tools that do not share your data with external advertising platforms or data brokers.

2.3 Information From Third Parties

In the course of business development and due diligence, we may receive limited professional contact information from publicly available sources such as corporate websites, professional networking platforms, and industry directories. Any such information is used exclusively for legitimate business outreach relevant to our computer systems design and integration services and is handled in accordance with applicable data protection laws.

3. How We Use Your Information

Linchpin Advisory uses the information we collect for specific, legitimate business purposes. We do not sell, rent, or trade your personal information to third parties under any circumstances. The purposes for which we process your information include:

• Service Delivery: To provide the computer systems design, integration, consulting, and advisory services you have requested, including project planning, technical assessment, implementation, and ongoing support.
• Communication: To respond to your inquiries, provide information about our services, send project updates, deliver proposals and statements of work, and maintain ongoing client relationships.
• Contract Administration: To negotiate, execute, and manage professional services agreements, process invoices and payments, and fulfill our legal and contractual obligations.
• Website Operations: To monitor and maintain the security, performance, and functionality of our website, diagnose technical issues, and protect against unauthorized access or malicious activity.
• Business Development: To identify organizations that may benefit from our services, conduct market research relevant to computer systems design and related technical services, and measure the effectiveness of our outreach efforts.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests, as well as to enforce our terms of service and protect the rights, property, and safety of Linchpin Advisory, our clients, and the public.

4. Legal Basis for Processing

For individuals located in jurisdictions that require a specified legal basis for processing personal data, including the European Economic Area, the United Kingdom, and certain U.S. states with comprehensive privacy legislation, Linchpin Advisory relies on the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract for our professional services.
• Legitimate Interests: Processing is necessary for our legitimate business interests in operating, improving, and promoting our computer systems design and integration services, provided those interests are not overridden by your data protection rights.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including tax laws, financial record-keeping obligations, and responses to lawful requests from public authorities.
• Consent: In limited circumstances where neither contractual necessity nor legitimate interest applies, we will obtain your explicit consent before processing your personal information for a specific purpose. You may withdraw your consent at any time by contacting us.

5. Data Sharing and Disclosure

Linchpin Advisory maintains strict controls over how your information is shared. We do not disclose personal information to third parties except in the following limited circumstances:

• Service Providers: We may engage trusted third-party vendors to perform functions on our behalf, such as website hosting, email delivery, payment processing, and cloud infrastructure services. These providers are contractually bound to process data only in accordance with our instructions and to implement appropriate security measures. They are prohibited from using your data for their own purposes.
• Professional Advisors: We may share information with our legal counsel, accountants, auditors, and insurance providers as reasonably necessary for the operation of our business and the protection of our legal interests.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
• Legal Requirements: We may disclose information if required to do so by law, regulation, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The specific retention period depends on the nature of the information and the context in which it was provided:

• Client project records, including technical specifications, architectural documentation, and integration plans, are retained for the duration of the client relationship and for a period of seven years following project completion to address any post-engagement questions, warranty claims, or legal requirements.
• Business correspondence, including emails and consultation notes, is retained for a period of five years from the date of the last communication, unless a longer period is required for contractual or regulatory reasons.
• Website server logs are retained for a maximum of ninety days before being automatically purged, unless preserved for security investigation purposes in response to a specific incident.
• Billing and financial records are retained in accordance with applicable tax laws and accounting standards, typically for a period of seven years.

When the applicable retention period expires, we securely delete or anonymize personal information using industry-standard data destruction methods. Archived or backup copies may be retained for an additional limited period as necessary for disaster recovery purposes before being permanently destroyed.

7. Data Security

Linchpin Advisory implements and maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information. Our security measures include:

• Encryption of data in transit using Transport Layer Security (TLS) protocols for all web-based communications and encrypted email channels where supported by the recipient.
• Encryption of data at rest for sensitive information stored on our infrastructure, including client project files, contractual documents, and financial records.
• Access controls and authentication mechanisms that limit data access to authorized personnel who have a legitimate business need and who are bound by confidentiality obligations.
• Regular security assessments, vulnerability scanning, and penetration testing of our systems and network infrastructure.
• Incident response procedures and business continuity plans to address potential data breaches or system disruptions promptly and effectively.
• Employee training on data protection practices, phishing awareness, and secure handling of client information.

While we strive to protect your information using commercially reasonable safeguards, no method of electronic storage or transmission over the Internet is absolutely secure. We cannot guarantee the absolute security of information transmitted to us, and you acknowledge that you provide information at your own risk. In the event of a data breach that affects your personal information, we will notify you and relevant authorities in accordance with applicable breach notification laws.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding the personal information we hold about you. These rights may include:

8.1 Access and Portability

You have the right to request confirmation of whether we process your personal information and, if so, to obtain access to that information in a structured, commonly used, and machine-readable format. Upon verification of your identity, we will provide a copy of the personal data we hold about you within the timeframes prescribed by applicable law.

8.2 Correction and Deletion

You have the right to request that we correct inaccurate or incomplete personal information we hold about you. You also have the right to request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when the data has been unlawfully processed. We will evaluate deletion requests in accordance with applicable legal requirements, which may require or permit us to retain certain information for legitimate business or legal purposes.

8.3 Restriction and Objection

You have the right to request that we restrict the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests. You also have the right to object to processing of your personal information for direct marketing purposes at any time, and we will honor such objections promptly.

8.4 Exercising Your Rights

To exercise any of the rights described above, please contact us using the information provided in Section 11 of this policy. We will respond to your request within the timeframes required by applicable law, typically within thirty to forty-five days. We may need to verify your identity before processing your request, which may require you to provide additional information. We will not discriminate against you for exercising your privacy rights.

9. International Data Transfers

Linchpin Advisory is headquartered in the United States, and our servers and operations are located within the United States. If you are accessing our website or services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located and our central operations are conducted. The data protection laws of the United States may differ from those of your country of residence.

By providing your personal information to Linchpin Advisory, you consent to the transfer of your data to the United States and its processing in accordance with this Privacy Policy. We take reasonable steps to ensure that your data receives an adequate level of protection regardless of where it is processed, including the use of standard contractual clauses or other legally recognized transfer mechanisms where appropriate.

10. Children's Privacy

Our website and services are not directed to individuals under the age of eighteen. We do not knowingly collect personal information from children. If we become aware that a child under the age of eighteen has provided us with personal information without verifiable parental consent, we will take steps to delete such information from our records promptly. If you believe that a child has provided us with personal information, please contact us immediately using the contact details provided below.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us using any of the following methods. We are committed to addressing your privacy concerns promptly and transparently.

We take all privacy inquiries seriously and will endeavor to respond to your communication within ten business days. If you are located in a jurisdiction that provides for a right to lodge a complaint with a supervisory authority, you may do so if you believe our processing of your personal information violates applicable law. We encourage you to contact us first so that we may address your concerns directly.

12. Changes to This Privacy Policy

Linchpin Advisory reserves the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this policy, we will post the updated version on our website with a revised effective date and, where appropriate, provide notice through our website or via email to clients with whom we have an active relationship.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our website or services after any changes to this policy constitutes your acknowledgment and acceptance of the revised terms. If you do not agree with the updated policy, you should discontinue use of our website and services.

13. Governing Law

This Privacy Policy and any disputes arising from or relating to it shall be governed by and construed in accordance with the laws of the State of Utah and applicable federal laws of the United States of America, without regard to conflict of law principles. Any legal action or proceeding arising under this Privacy Policy shall be brought exclusively in the federal or state courts located in Salt Lake County, Utah.

This Privacy Policy was developed by Linchpin Advisory, the developer and operator of this website, to provide clear and comprehensive disclosure of our data handling practices in compliance with applicable privacy regulations, including the California Consumer Privacy Act, the General Data Protection Regulation where applicable, and other relevant data protection frameworks.