Privacy Policy

1. WHO WE ARE AND HOW TO CONTACT US Sondag LLC, a limited liability company organized under the laws of the State of New Mexico, United States, operates the website https://sondagconsulting.com and trades as Sondag Consulting. We are the data controller responsible for the personal information collected through this website. Our registered office is located at 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States. You may contact us by email at info@sondagconsulting.com with any questions about this privacy policy or to exercise your rights under applicable data protection laws. 2. WHAT INFORMATION WE COLLECT We collect personal information only in two ways: through the contact form on our website and through technical server logs maintained by our hosting provider. Contact Form Submissions When you submit the contact form on our website, we collect the information you voluntarily provide, which includes your name, email address, and message. Submission of the contact form is optional. We do not require you to provide this information to access or view our website. Technical and Server Log Data Our hosting provider maintains server access logs for security, troubleshooting, and operational purposes. These logs may include your Internet Protocol address, the date and time of your request, the pages you accessed, your browser type and version, your operating system, and the referring website or search query that led you to our site. These logs are retained by the hosting provider according to its standard practices and are not directly controlled by us, though we may access them for legitimate operational needs. Local Storage Our website uses browser local storage to store two items on your device: your language preference (English or Spanish) and your cookie consent choice. These items are stored locally on your browser and are not transmitted to our servers except when you interact with the website. 3. HOW WE USE IT AND WHY Contact Form Information When you submit the contact form, we use your name, email address, and message to respond to your inquiry, provide information about our consulting services, and discuss potential business opportunities. We may use your email address to send you follow-up communications related to your inquiry or to provide you with information about our services that you have requested. We do not use contact form submissions for marketing purposes beyond responding to your direct inquiry unless you explicitly consent to receive marketing communications. Technical and Server Log Data We use technical and server log data to maintain the security and integrity of our website, to troubleshoot technical issues, to understand how visitors use our site, and to comply with legal obligations. We do not use this data for marketing, advertising, or behavioral profiling. Local Storage Items Your language preference is used solely to display the website in your chosen language on subsequent visits. Your cookie consent choice is used to remember whether you have accepted or declined our use of local storage and to honor that choice on future visits. 4. LEGAL BASES UNDER THE GDPR Our processing of personal information is based on the following legal grounds under the General Data Protection Regulation: Consent We process your language preference and cookie consent choice on the basis of your consent. You provide this consent by interacting with our website and making your choices known through the local storage mechanism. You may withdraw this consent at any time by clearing your browser's local storage or by adjusting your browser settings. Contract and Pre-Contractual Steps We process the information you submit through the contact form on the basis that such processing is necessary to take steps at your request prior to entering into a contract. Your inquiry through the contact form constitutes a request for information about our services, and we process your personal data to respond to that request and to discuss potential engagement terms with you. Legitimate Interests We process technical and server log data on the basis of our legitimate interests in maintaining the security and integrity of our website, troubleshooting technical problems, and understanding general patterns of website usage. These interests are not overridden by your rights and interests because we do not use this data for marketing, profiling, or any purpose that would create a risk to your privacy. 5. COOKIES AND LOCAL STORAGE Our website does not set, use, or allow any analytics cookies, advertising cookies, or third-party tracking cookies. We do not use Google Analytics, Facebook Pixel, or any similar service that tracks your behavior across websites or builds a profile of your interests. Our website uses local storage only for two purposes: to store your language preference and to store your cookie consent choice. These items are stored on your device and are not transmitted to third parties. You can clear these items at any time by clearing your browser's local storage or by using your browser's privacy settings. 6. THIRD-PARTY SERVICES AND DISCLOSURE Contact Form Processing When you submit the contact form on our website, your message is processed by a PHP script running on our web server. Your name, email address, and message are sent by email through our hosting provider's mail transfer agent. We do not use a third-party contact form service, customer relationship management system, marketing automation platform, or analytics service to process contact form submissions. Your data is handled entirely by our own server infrastructure. Hosting Provider Our website is hosted by a hosting provider that maintains our web server and email infrastructure. The hosting provider has access to server logs and may process technical data as necessary to provide hosting services. The hosting provider is a data processor acting on our instructions and is bound by contractual obligations to protect your data and use it only for the purposes we specify. No Other Disclosures We do not disclose your personal information to any other third parties except as required by law. We do not sell, rent, or share your personal information with marketing companies, data brokers, or any other commercial entities. 7. INTERNATIONAL TRANSFERS Our website is hosted on servers located in Europe. Sondag LLC, the data controller, is located in the United States. When you submit information through our contact form or when our servers process your technical data, your information is transferred from your location to our European servers and may be accessed by us in the United States. This transfer occurs on the basis of your consent, which you provide by using our website and submitting the contact form, and on the basis of our legitimate interests in operating our business and responding to your inquiries. The transfer is necessary to provide the services you request and to operate our website. We recognize that data protection laws in the United States and Europe differ. By using our website and submitting information through our contact form, you acknowledge and accept this international transfer of your data. If you do not consent to this transfer, please do not use our website or submit the contact form. 8. HOW LONG WE KEEP IT Contact Form Information We retain the information you submit through the contact form for as long as necessary to respond to your inquiry and to maintain a record of our business communications. Typically, we retain contact form submissions for a period of three years from the date of submission, unless a longer retention period is required by law or unless you request deletion. After this period, we delete the information unless there is a legal reason to retain it. Technical and Server Log Data Technical and server log data maintained by our hosting provider is typically retained for a period of thirty days from the date of collection, in accordance with standard hosting provider practices. This data is used for security monitoring and troubleshooting and is not retained for longer than necessary for these purposes. Local Storage Items Your language preference and cookie consent choice are stored in your browser's local storage indefinitely until you clear your browser's local storage or delete these items manually. These items do not expire automatically. 9. YOUR RIGHTS UNDER THE GDPR If you are located in the European Union or the European Economic Area, you have the following rights under the General Data Protection Regulation: Right of Access You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a structured, commonly used, and machine-readable format within thirty days of your request. Right to Rectification You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. We will make the correction within thirty days of your request. Right to Erasure You have the right to request that we delete your personal information, subject to certain exceptions. We will delete your data within thirty days of your request unless we have a legal obligation to retain it. Right to Restrict Processing You have the right to request that we restrict our processing of your personal information while we verify the accuracy of the data or while we consider your other rights. Right to Data Portability You have the right to request that we provide your personal information in a portable format and to transmit it to another data controller if you wish. Right to Object You have the right to object to our processing of your personal information on the basis of legitimate interests. We will cease processing unless we can demonstrate a compelling legitimate interest that overrides your rights. Right to Withdraw Consent If we are processing your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. Right to Lodge a Complaint You have the right to lodge a complaint with the data protection supervisory authority in your country if you believe we have violated your rights under the GDPR. To exercise any of these rights, please contact us at info@sondagconsulting.com with a clear description of your request. We will respond within thirty days. 10. YOUR RIGHTS UNDER THE CCPA, CPRA, AND OTHER US STATE PRIVACY LAWS If you are a resident of California or another state that has enacted a comprehensive privacy law, you may have the following rights: Right to Know You have the right to request that we disclose what personal information we collect, use, share, and sell about you. We will provide this information within forty-five days of your request. Right to Delete You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. We will delete your data within forty-five days of your request unless we have a legal reason to retain it. Right to Correct You have the right to request that we correct inaccurate personal information we hold about you. We will make the correction within forty-five days of your request. Right to Opt Out of Sale or Sharing You have the right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information with third parties for their own commercial purposes. We do not use your personal information for targeted advertising or behavioral profiling. Therefore, there is no sale or sharing to opt out of. If you wish to confirm this, you may contact us at info@sondagconsulting.com. No Sale or Sharing of Personal Information We want to be clear: we do not sell your personal information to data brokers, marketing companies, or any other third parties. We do not share your personal information with third parties for their own commercial purposes. We do not engage in targeted advertising or behavioral profiling. Your personal information is used only to respond to your inquiries and to operate our website. To exercise any of these rights, please contact us at info@sondagconsulting.com with a clear description of your request. We will respond within forty-five days. 11. CHILDREN Our website and services are not directed to children under the age of thirteen. We do not knowingly collect personal information from children under thirteen. If we become aware that we have collected personal information from a child under thirteen, we will delete that information immediately. If you believe we have collected information from a child under thirteen, please contact us at info@sondagconsulting.com. Our consulting services are intended for business owners, founders, and corporate decision-makers. We do not market our services to minors, and we do not knowingly engage minors as clients or collect their personal information in connection with our services. 12. CHANGES TO THIS POLICY We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on our website and update the effective date at the bottom of this policy. Your continued use of our website following the posting of changes constitutes your acceptance of the updated policy. If we make material changes to this policy that affect how we use your personal information, we will notify you by email at the address you provided through the contact form, if applicable, or by posting a prominent notice on our website. 13. EFFECTIVE DATE This privacy policy is effective as of 15 September 2026.