Privacy Policy

1. Introduction

CVAUSA Management LLC, also referred to as CVAUSA, we, us, or our throughout this document, operates the website located at https://www.cvausa.buzz and provides computer systems design, IT consulting, network architecture, cybersecurity, cloud infrastructure, software development, and related professional services. This website and the associated services were developed and are maintained by CVAUSA Manage.

This Privacy Policy describes our practices regarding the collection, use, storage, protection, and disclosure of information that we receive from users of our website and from clients who engage our professional services. We are committed to protecting the privacy and security of all personal information entrusted to us. This policy explains what data we gather, why we gather it, how we use it, and the choices available to individuals regarding their personal information.

By accessing or using our website, or by engaging our services, you acknowledge that you have read, understood, and agree to the terms described in this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of our website and services immediately. We encourage you to read this document carefully and to contact us if you have any questions or concerns about our privacy practices.

Our privacy practices are designed to comply with applicable data protection laws and regulations, including but not limited to the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other relevant state and federal privacy statutes within the United States. We regularly review and update our practices to maintain alignment with evolving legal requirements and industry standards for data protection.

2. Information We Collect

2.1 Personal Information You Provide

When you interact with our website, contact us through our web forms, send us email, call our phone number, or engage our professional services, we may collect personal information that you voluntarily provide. This information may include your full name, email address, telephone number, company name, job title, physical mailing address, and any other details you choose to include in your communications with us. If you engage us for professional services, we may also collect billing information, project specifications, and technical details about your existing systems and infrastructure that are necessary for us to provide the requested services.

When you submit a contact form on our website, we collect the information you enter into the form fields. This typically includes your name, email address, phone number, the service you are interested in, and the message you provide about your project. We use this information solely to respond to your inquiry and to determine how we may best serve your technology needs.

2.2 Information Collected Automatically

When you visit our website, certain information is automatically collected by our systems and by third-party service providers that assist us in operating our website. This automatically collected information may include your Internet Protocol (IP) address, browser type and version, operating system type and version, referring URLs, pages visited on our site, the dates and times of your visits, time spent on individual pages, click patterns, and other diagnostic data related to your browsing session.

We collect this information through the use of cookies, web beacons, log files, and similar tracking technologies. This data helps us understand how visitors use our website, identify technical issues, improve site performance, and enhance the overall user experience. The automatically collected information is generally aggregated and does not directly identify individual users, although it may be associated with personal information that you voluntarily provide to us.

2.3 Information from Third Parties

In some circumstances, we may receive information about you from third-party sources. This may include information from business partners, analytics providers, marketing platforms, and publicly available databases. We may combine this information with data we already hold about you to improve the accuracy of our records, to better understand your technology needs, and to provide more relevant communications about our services. When we receive information from third parties, we require that those parties have obtained the information lawfully and that they have the right to share it with us.

2.4 Information We Do Not Collect

We do not knowingly collect sensitive personal information such as social security numbers, driver license numbers, financial account credentials, biometric data, or health information through our website. We do not request or store payment card details on our own servers; any payment processing is handled through secure, PCI-compliant third-party payment processors. We also do not intentionally collect information from children under the age of 13, as detailed in our Privacy for Children section below.

3. How We Collect Information

3.1 Direct Collection from You

The primary method by which we collect information is directly from you, through your voluntary interactions with our website and our team. This includes when you fill out and submit our contact form, when you send us email messages, when you call our office by telephone, when you register for an account if we offer such functionality, when you subscribe to receive newsletters or marketing communications, when you participate in surveys or feedback requests, and when you engage our company for professional services and provide project-related information.

3.2 Automated Collection Methods

We use several automated technologies to collect information when you visit our website. Cookies are small data files placed on your device that allow our website to recognize your browser and remember certain information. Web beacons, also known as pixel tags or clear GIFs, are tiny graphic files embedded in web pages and emails that allow us to track page views and email opens. Server logs automatically record information about each request made to our servers, including IP addresses, timestamps, and requested resources.

3.3 Analytics Services

We utilize analytics services, which may include Google Analytics and similar platforms, to understand how visitors interact with our website. These services use cookies and other tracking technologies to collect information about your use of our site and generate reports about website activity. The information generated by these cookies about your use of the website is transmitted to and stored by the analytics service providers on servers that may be located in the United States or other countries. These providers use this information to evaluate website usage, compile reports on website activity, and provide other services relating to website activity and internet usage.

4. How We Use Information

4.1 Providing and Improving Services

We use the information we collect primarily to provide, maintain, and improve our computer systems design and IT services. This includes responding to your inquiries and service requests, delivering the professional services you have engaged us to perform, communicating with you about your projects, providing technical support and troubleshooting, sending administrative information such as confirmations, invoices, and notices about your account, and personalizing your experience with our website and services.

4.2 Business Operations

We use collected information to support our internal business operations. This encompasses processing payments and managing billing, maintaining accurate business and financial records, conducting data analysis and research to improve our service offerings, detecting and preventing fraudulent or unauthorized activity, enforcing our terms of service and other agreements, and complying with applicable legal obligations and regulatory requirements.

4.3 Marketing and Communications

With your consent where required by law, we may use your contact information to send you marketing communications about our services, industry insights, technology updates, and promotional offers that we believe may be of interest to you. You may opt out of receiving marketing emails at any time by clicking the unsubscribe link included in every marketing email we send, or by contacting us directly at hello@cvausa.buzz. Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to your account or ongoing services.

4.4 Legal Compliance and Protection

We may use and disclose information as necessary to comply with applicable laws, regulations, legal processes, or governmental requests; to enforce our agreements and policies; to protect the rights, property, or safety of CVAUSA Management LLC, our clients, or others; and to detect, investigate, and prevent security incidents, fraud, and illegal activities. We will make such disclosures in good faith and only when we believe they are reasonably necessary.

5. Information Sharing and Disclosure

5.1 Service Providers and Partners

We may share your information with trusted third-party service providers who perform functions on our behalf. These providers include cloud hosting and infrastructure services, email delivery platforms, analytics providers, payment processors, customer relationship management systems, and professional advisors such as attorneys and accountants. We enter into written agreements with all service providers that require them to process personal information only according to our instructions, to implement appropriate security measures, and to comply with all applicable data protection laws.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other corporate transaction, the information we hold may be transferred as part of the business assets. We will notify you via email or a prominent notice on our website of any such change in ownership or control of your personal information, as well as any choices you may have regarding this information.

5.3 With Your Consent

We may share your information for purposes other than those described in this policy when we have obtained your explicit consent to do so. You may withdraw your consent at any time by contacting us, although this will not affect the lawfulness of processing based on consent before its withdrawal.

5.4 Aggregated and De-Identified Data

We may aggregate, anonymize, or de-identify personal information so that it no longer identifies any individual. Such aggregated or de-identified data is not considered personal information under this policy, and we may use and share it for any lawful purpose, including research, analysis, marketing, and improvement of our services.

5.5 No Sale of Personal Information

We do not sell personal information to third parties. We do not trade, rent, or otherwise exchange personal information for monetary or other valuable consideration. Our business model is based on providing professional technology services, not on monetizing the personal data of our website visitors or clients.

6. Data Security

6.1 Security Measures

We implement and maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal information in our possession. These measures include but are not limited to encryption of data in transit using Transport Layer Security (TLS) protocols, encryption of data at rest on our servers, firewalls and intrusion detection systems, regular vulnerability scanning and penetration testing, access controls and authentication mechanisms, employee training on data security and privacy practices, and physical security measures at our data storage facilities.

Our security practices are informed by industry standards and frameworks, including the NIST Cybersecurity Framework and ISO 27001 guidelines. We regularly review and update our security measures to address evolving threats and vulnerabilities.

6.2 Breach Notification

In the event of a data breach that affects personal information, we will investigate promptly and take appropriate remedial action. We will notify affected individuals and relevant regulatory authorities as required by applicable law. Our notification will describe the nature of the breach, the categories of information involved, steps we have taken to address the breach, and the measures affected individuals can take to protect themselves.

6.3 Your Role in Security

While we implement robust security measures, no method of transmission over the Internet or method of electronic storage is completely secure. You also play an important role in protecting your information. We encourage you to use strong, unique passwords, to keep your login credentials confidential, and to notify us immediately if you suspect any unauthorized access to your account or any other breach of security involving our services.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The specific retention period depends on the nature of the information and the purpose of its collection. For example, we retain information related to client engagements for the duration of the engagement plus a period required by applicable statutes of limitations and professional obligations. Contact form submissions and related correspondence are retained for a reasonable period to allow us to respond to inquiries and maintain records of communications. Information collected automatically through cookies and analytics is retained for periods defined by the relevant analytics platforms, typically ranging from 14 to 26 months.

When personal information is no longer needed for the purposes for which it was collected, we will securely delete, destroy, or anonymize it in accordance with our data disposal procedures. If you wish to request deletion of your information earlier than our standard retention period, you may contact us using the information provided in this policy, and we will evaluate your request in accordance with applicable law.

8. Your Rights and Choices

8.1 Access and Portability

You have the right to request access to the personal information we hold about you. Upon receiving a verifiable request, we will provide you with a copy of your personal information in a structured, commonly used, and machine-readable format. We will respond to your access request within the timeframes required by applicable law, typically within 45 days of receipt of a verifiable request.

8.2 Correction and Deletion

You have the right to request that we correct inaccurate personal information we hold about you. You also have the right to request deletion of your personal information, subject to certain exceptions. For example, we may retain information necessary to complete a transaction for which the information was collected, to detect security incidents, to comply with legal obligations, or for other internal uses that are compatible with the context in which you provided the information.

8.3 Opt-Out Rights

You have the right to opt out of receiving marketing communications from us. Every marketing email we send includes an unsubscribe link at the bottom, which you may use to opt out at any time. You may also adjust your browser settings to refuse certain types of cookies or to alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of our website.

8.4 Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, provide a different level or quality of services, or suggest that you may receive a different price or service level as a result of exercising your rights.

8.5 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using the information provided in the Contact Information section of this policy. We may need to verify your identity before processing your request, which may require you to provide sufficient information to allow us to reasonably confirm that you are the person about whom we collected the personal information.

9. Privacy for Children

Our website and services are designed for business professionals and are not intended for children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verification of parental consent, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately using the contact details provided below. We will investigate the matter promptly and take appropriate action to remove the information from our systems.

For individuals between the ages of 13 and 18, we recommend that they review this Privacy Policy with a parent or guardian to ensure they understand how their information may be used. We encourage parents and guardians to monitor the online activities of their children and to instruct their children never to provide personal information through websites without parental permission.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files that are placed on your computer or mobile device when you visit a website. Cookies are widely used to make websites work more efficiently, to remember user preferences, and to provide information to the owners of the site. Cookies may be session cookies, which are deleted when you close your browser, or persistent cookies, which remain on your device for a set period or until you delete them manually.

10.2 Types of Cookies We Use

We use several categories of cookies on our website. Essential cookies are necessary for the website to function properly and cannot be disabled in our systems; these are usually set in response to actions you take, such as setting privacy preferences or filling out forms. Performance cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site; all information these cookies collect is aggregated and anonymous. Functional cookies enable the website to provide enhanced functionality and personalization; they may be set by us or by third-party providers whose services we have added to our pages. Targeting cookies may be set through our site by our advertising partners to build a profile of your interests and show you relevant advertisements on other sites.

10.3 Managing Cookies

You have control over cookies and can manage your preferences through your browser settings. Most browsers allow you to view, manage, delete, and block cookies for individual websites or all websites. You can also set your browser to send a Do Not Track (DNT) signal, although there is currently no universally accepted standard for how companies should respond to DNT signals. Please consult the help section of your browser for detailed instructions on managing cookies. Please note that if you choose to disable cookies entirely, some features of our website may not function as intended.

10.4 Other Tracking Technologies

In addition to cookies, we may use web beacons and similar technologies to track the effectiveness of our communications and to understand how visitors navigate our website. Web beacons are often used in conjunction with cookies to gather aggregate statistics about website usage. We may also use embedded scripts and similar technologies to collect information about your interactions with our website, such as the links you click on and the pages you visit.

11. Third-Party Services and Links

11.1 Links to Other Websites

Our website may contain links to third-party websites, plugins, and applications that are not operated or controlled by CVAUSA Management LLC. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices or content. When you leave our website, we encourage you to read the privacy policy of every website you visit.

11.2 Embedded Content and Widgets

Our website may include embedded content such as videos, maps, or social media features. Embedded content from other websites behaves in the exact same way as if the visitor has visited the originating website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

11.3 Third-Party Service Providers

We engage third-party companies and individuals to facilitate our services, to provide services on our behalf, to perform service-related functions, and to assist us in analyzing how our services are used. These third parties have access to personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. A list of key service providers and the purpose of their access is available upon request by contacting us.

12. International Data Transfers

CVAUSA Management LLC is based in the United States, and our website and services are hosted on servers located within the United States. If you are accessing our website or services from outside the United States, please be aware that your information will be transferred to, stored in, and processed in the United States, where our servers are located and our central database is operated. The data protection laws of the United States may differ from those of your country of residence.

By using our website or services, or by providing us with any personal information, you consent to the transfer, storage, and processing of your information in the United States. We take reasonable steps to ensure that your information is treated securely and in accordance with this Privacy Policy, and that adequate safeguards are in place to protect personal information transferred across borders. If we transfer personal information from other jurisdictions to the United States, we will comply with applicable legal requirements and implement appropriate safeguards, such as standard contractual clauses where available.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. When we make changes, we will revise the date at the top of this policy and post the updated version on this page. For material changes, we will provide a more prominent notice, which may include sending an email notification to clients with active engagements or placing a notice on the homepage of our website for a reasonable period before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised policy, you should discontinue use of our website and services and contact us regarding any concerns.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, we encourage you to contact us using the information below. We are committed to addressing your inquiries promptly and thoroughly.

We aim to acknowledge your inquiry within two business days and provide a substantive response within ten business days. If you are not satisfied with our response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.