Privacy Policy & Data Protection
How does Atlas Peak Advisory protect your personal information and ensure data privacy in all business consulting engagements?
At Atlas Peak Advisory, we are committed to safeguarding your privacy and maintaining the highest standards of data security and confidentiality across all our client interactions and internal business processes. This Privacy Policy outlines the types of information we collect, how it is used, and the measures we take to protect it. Our policies are effective as of October 26, 2023, and are regularly reviewed and updated to ensure compliance with relevant legal requirements and industry best practices.
For any questions or concerns regarding this policy or our data practices, please contact us at [email protected].
Information Collection and Usage
Atlas Peak Advisory collects information to provide and improve our consulting services, communicate with you, and comply with legal obligations. The types of personal information we collect include, but are not limited to, names, contact details, company information, professional roles, and financial data relevant to our engagements.
Purposes of Data Collection:
- Service Delivery: To tailor and deliver our strategic planning, organizational development, management consulting, market research, and financial advisory services.
- Communication: To respond to inquiries, send updates, and manage client relationships.
- Legal Basis: We process personal information based on explicit consent, contractual necessity, legitimate interests, or legal obligations.
- Improvements: To analyze website usage and improve our services, typically through aggregated, anonymized data.
While most information is provided voluntarily, some data may be required for us to deliver specific services. Failure to provide necessary information may restrict our ability to offer certain consulting engagements. We also utilize automated information collection methods, such as cookies and website analytics (e.g., Google Analytics, anonymized), to understand user behavior and optimize our online presence without identifying individuals. This data includes IP addresses, browser types, and visited pages.
For client-specific project work, all data handling is governed by the terms of our confidential agreements, ensuring strict adherence to data minimization, purpose limitation, and secure disposal protocols upon project completion.
Data Protection and Security Measures
Atlas Peak Advisory implements robust technical and organizational measures to protect your personal and business information from unauthorized access, disclosure, alteration, and destruction. Our security posture is designed to meet rigorous standards applicable to the consulting industry, ensuring client data confidentiality and integrity.
Encryption & Secure Protocols
We employ industry-standard encryption for data at rest and in transit, utilizing secure socket layer (SSL) technology for website communications and virtual private networks (VPNs) for internal network access. All sensitive client documents are stored on encrypted servers.
Access Controls & Training
Access to confidential information is strictly limited to authorized personnel on a 'need-to-know' basis. All Atlas Peak Advisory employees undergo regular data protection and cybersecurity training to reinforce compliance and best practices.
Audits & Incident Response
We conduct regular security audits, vulnerability assessments, and penetration tests to identify and remediate potential weaknesses. In the event of a data breach, we have comprehensive incident response protocols in place, including rapid containment, investigation, and notification procedures as required by law.
Regulatory Compliance
Our practices are designed to comply with applicable data protection regulations, including but not limited to, the California Consumer Privacy Act (CCPA), ensuring that our San Francisco-based operations meet current legal requirements for data privacy.
Your Privacy Rights and Choices
Atlas Peak Advisory respects your privacy rights and provides mechanisms for you to control your personal information. You have the right to access, correct, update, or request deletion of your personal data we hold.
Exercising Your Rights:
- Access & Correction: You may request access to the personal information we hold about you and request corrections to any inaccuracies.
- Data Portability & Deletion: You have the right to request a copy of your data in a portable format or request its deletion, subject to certain legal exceptions.
- Opt-Out: You can opt-out of marketing communications at any time by following the unsubscribe instructions in the emails or contacting us directly.
- Cookie Preferences: You can manage your cookie preferences through your browser settings or adjust settings via our website's cookie consent banner, if applicable.
We do not share your personal information with third parties for their direct marketing purposes without your explicit consent. Any third-party service integrations (e.g., CRM systems, cloud storage) are carefully vetted for their data security practices and align with our privacy standards.
To exercise any of these rights or if you have specific requests regarding your data, please contact our privacy compliance team at [email protected]. We will respond to your request within the legally required timeframe.
Last Updated: October 26, 2023