Privacy Policy

1 Introduction

Digital Trust ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or engage with us in any capacity.

As an AI advisory and assurance firm, we understand the critical importance of data protection and privacy. We adhere to the highest standards of data governance and comply with applicable data protection regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy laws.

2 Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, company name, job title, and mailing address when you fill out forms, request consultations, or contact us.
• Professional Information: Details about your organization, industry, AI initiatives, and business requirements when engaging our advisory services.
• Communication Data: Records of correspondence, including emails, meeting notes, and feedback you provide.
• Account Information: Login credentials and preferences if you create an account on our platforms.
• Event Registration: Information provided when registering for webinars, workshops, or other events.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Device Information: Browser type, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths.
• Network Information: IP address, internet service provider, and approximate geographic location.
• Referral Data: The website or source that directed you to our site.

2.3 Information from Third Parties

We may receive information about you from:

• Business partners and referral sources
• Professional networking platforms (e.g., LinkedIn)
• Industry databases and public sources
• Marketing and analytics partners

3 How We Use Your Information

We use the information we collect for the following purposes:

4 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contractual obligations to you or to take pre-contractual steps at your request.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, marketing, and fraud prevention, where such interests are not overridden by your rights.
• Consent: Where you have provided explicit consent for specific processing activities, such as receiving marketing communications.
• Legal Obligation: Processing necessary to comply with legal requirements to which we are subject.

5 Data Sharing and Disclosure

We may share your information with the following categories of recipients:

5.1 Service Providers

We engage trusted third-party service providers who assist us in operating our business, including cloud hosting providers, email service providers, analytics platforms, and customer relationship management systems. These providers are contractually bound to protect your data and use it only for the purposes we specify.

5.2 Business Partners

With your consent, we may share information with strategic partners to provide integrated services or joint offerings that may benefit you.

5.3 Legal Requirements

We may disclose your information when required by law, in response to legal process, or to protect our rights, privacy, safety, or property, or that of others.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have.

6 International Data Transfers

As a global organization, we may transfer your personal data to countries outside your country of residence. When we transfer data internationally, we implement appropriate safeguards to ensure your information remains protected:

• Standard Contractual Clauses approved by relevant regulatory authorities
• Binding Corporate Rules for intra-group transfers
• Certification mechanisms and approved codes of conduct
• Adequacy decisions by data protection authorities

For transfers from the European Economic Area (EEA), we ensure that recipient countries provide adequate protection or that appropriate safeguards are in place.

7 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on:

• The nature of the data and the purposes for processing
• Legal and regulatory requirements
• Contractual obligations and legitimate business needs
• Statute of limitations for potential legal claims

When data is no longer required, we securely delete or anonymize it in accordance with our data retention policies and applicable regulations.

8 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within the timeframes required by applicable law.

9 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyze traffic, and personalize content. We implement Google Consent Mode v2 to ensure your preferences are respected across all Google services.

We use the following categories of cookies:

• Essential Cookies: Required for core website functionality (always active)
• Analytics Cookies: Help us understand website usage patterns
• Functional Cookies: Enable personalization and enhanced features
• Marketing Cookies: Used for relevant advertising and campaign measurement

10 Data Security

We implement robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection and security best practices
• Incident response procedures and breach notification protocols
• Physical security measures for our facilities and data centers

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We continuously review and enhance our security practices to address emerging threats.

11 Third-Party Links

Our website may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third-party resources. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of external websites.

12 Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users (for significant changes)
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving any complaints about our collection or use of your personal data. We will respond to your inquiry within 30 days or as required by applicable law.