Privacy Policy

Section 1: Information We Collect

We collect information that you provide directly to us, as well as information automatically gathered when you interact with our website and services. The categories of information we collect include:

• Personal Identification Information: Your full name, email address, telephone number, company name, job title, and professional address when you submit inquiry forms, request consultations, or communicate with our team.
• Technical Usage Data: IP address, browser type and version, operating system, device identifiers, referring website URLs, page interaction data, and browsing patterns collected through standard server logs and analytics technologies.
• Communication Records: Copies of correspondence you send to us via email, contact forms, or phone calls, including metadata such as timestamps and message content.
• Service-Related Information: Project specifications, technical requirements, system architecture details, and other information you share with us during the course of our professional engagement.
• Payment and Billing Information: Invoice details, billing addresses, and transaction records processed through our secure financial systems. We do not store full credit card numbers on our servers.

Section 2: How We Use Your Information

GFS Alliance uses the collected information for the following legitimate business purposes:

• To respond to your inquiries, provide quotations, and deliver our computer systems design and technical consulting services.
• To administer our professional relationship with you, including contract management, invoicing, and project coordination.
• To improve and personalize your experience on our website through content optimization and interface enhancements.
• To comply with legal obligations, enforce our terms of service, and protect our rights and property.
• To send service-related communications, including updates about our offerings, industry insights, and relevant technical announcements with your consent where required.
• To detect, prevent, and address technical issues, security incidents, fraudulent activity, and unauthorized access to our systems.

Section 3: Legal Basis for Processing

We process your personal data based on the following legal grounds, consistent with applicable privacy regulations including the General Data Protection Regulation and California Consumer Privacy Act where relevant:

• Contractual Necessity: Processing required to fulfill our service agreements and pre-contractual obligations with you.
• Legitimate Interests: Processing necessary for our legitimate business interests in operating our firm, providing services, maintaining security, and improving our offerings.
• Consent: Processing based on your voluntary consent for specific purposes such as marketing communications, which you may withdraw at any time.
• Legal Compliance: Processing required to comply with applicable laws, regulations, court orders, or government requests.

Section 4: Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our business, such as cloud infrastructure providers, analytics services, email delivery platforms, and payment processors. These providers are contractually bound to protect your data.
• Professional Advisors: With legal counsel, accountants, and insurance providers when necessary for business operations and risk management.
• Legal Requirements: When required by law, subpoena, court order, or government regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your information may be transferred as part of that transaction.

Section 5: Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Our retention periods are determined based on:

• The duration of our professional relationship with you and the services we provide.
• Legal and regulatory requirements that mandate specific record-keeping periods.
• The statute of limitations for potential legal claims.
• Our legitimate business interests in maintaining accurate records for reference and analysis.

When information is no longer needed, we securely delete or anonymize it using industry-standard data destruction methods. Residual copies may be retained in backup systems for a limited period before automatic deletion.

Section 6: Data Security

GFS Alliance implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.3 protocol and at rest using AES-256 encryption standards.
• Access controls based on the principle of least privilege, with multi-factor authentication required for system access.
• Regular security assessments, vulnerability scanning, and penetration testing of our infrastructure.
• Employee training on data protection practices and confidentiality obligations.
• Incident response procedures to address potential data breaches promptly and effectively.

While we strive to protect your data, no method of electronic storage or transmission is completely secure. We encourage you to take precautions when sharing sensitive information online.

Section 7: Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: You may request limitation on how we process your data in certain circumstances.
• Right to Data Portability: You may request transfer of your data to another service provider in a commonly used format.
• Right to Object: You may object to our processing of your data for direct marketing or other purposes based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at service@gfsalliance.mom. We will respond to your request within the timeframe required by applicable law.

Section 8: Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance functionality, analyze usage patterns, and improve your experience. Cookies are small text files stored on your device by your web browser. We use the following categories:

• Essential Cookies: Required for the basic operation of our website, including security features and navigation functions.
• Analytics Cookies: Help us understand how visitors interact with our site, which pages are most frequently visited, and how users navigate between sections.
• Preference Cookies: Remember your settings and preferences to provide a personalized experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. We do not use cookies for behavioral advertising or cross-context tracking.

Section 9: International Data Transfers

Your information may be processed in the United States and other jurisdictions where our service providers operate. When we transfer data across borders, we implement appropriate safeguards compliant with applicable data protection laws, including Standard Contractual Clauses where required. By using our services and providing your information, you acknowledge that your data may be transferred and stored in countries with different data protection regimes than your own.

Section 10: Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data without parental consent, we will promptly delete that information. Parents or guardians who believe their child has provided personal information to us should contact us at service@gfsalliance.mom to request removal.

Section 11: Third-Party Links

Our website may contain links to third-party websites, plugins, or services that are not operated or controlled by GFS Alliance. This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices of other websites and encourage you to review their privacy policies before providing any personal information.

Section 12: Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or industry standards. When we make material changes, we will post the updated policy on this page and revise the Last Updated date. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any modifications constitutes acceptance of the updated policy.

Section 13: Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

• Email: service@gfsalliance.mom
• Phone: +1 (845) 736-5737
• Postal Address: GFS Alliance, Inc, 814 Ponce De Leon Blvd Ste 310, Miami, FL 33134-3033, United States

We will acknowledge receipt of your privacy-related inquiry within five business days and work to resolve your concerns promptly. If you are unsatisfied with our response, you may have the right to lodge a complaint with your local data protection authority.