PRIVACY POLICY

1. Who We Are

The Emporium Agency LLC ("TEA," "we," "our," or "us") operates at TheEmporiumAgency.com. We provide cybersecurity consulting, remote IT and security management, website, network, and IAM configuration, and computer and hardware repair services, along with secondary social media management and digital brand protection services, to individuals, sole proprietors, and small-to-medium businesses.

As a consultancy that advises clients on data protection and privacy matters, integrity in how we handle personal information is foundational to everything we do.

2. Information We Collect

Information You Provide Directly

• Contact and inquiry information: name, email address, business name, and the details you provide in consultation request forms
• Client engagement information: business context, operational details, and background shared during the course of our advisory work
• Communication records: emails, meeting notes, and correspondence related to service delivery

Submissions made through the forms on this website are transmitted to us by Web3Forms, our form-handling provider, which processes each submission solely to deliver it to our inbox. We do not add form submissions to marketing lists.

Information Collected Automatically

We do not operate analytics, tracking pixels, or advertising tools on this website. Our hosting provider (Cloudflare) processes standard server logs, including IP addresses and browser information, as a necessary part of delivering the site securely; we do not use these logs to identify or profile individual visitors.

Information We Do Not Collect

We do not collect payment card data directly. All transactions are handled by PCI-compliant third-party processors. We do not purchase, import, or use third-party marketing lists.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to consultation requests and communications
• Delivering contracted security, IT, and consulting services
• Maintaining accurate client records and fulfilling contractual obligations
• Complying with applicable laws and legal obligations

We do not use your information for automated decision-making, profiling, or any purpose beyond what is described above.

4. How We Protect Your Information

Given our role as a cybersecurity consultancy, we maintain security practices that exceed standard commercial requirements:

• All data in transit is encrypted using TLS 1.2 or higher (TLS 1.3 where supported)
• Client engagement data is stored in access-controlled environments with role-based permissions
• Sensitive client information is subject to the same security controls we recommend in our advisory engagements
• We conduct regular internal security reviews of our own systems and processes
• Third-party vendors and processors are assessed for security posture before onboarding

5. Information Sharing

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

• Service delivery: With sub-processors or specialist partners necessary to deliver contracted services, under strict confidentiality obligations. This includes Web3Forms (website form delivery) and Cloudflare (website hosting and security)
• Legal compliance: When required by applicable law, court order, or lawful government request
• Protection of rights: Where necessary to protect the rights, property, or safety of TEA or our clients

Any third party with whom we share information is contractually bound to handle it in accordance with this policy and applicable privacy law.

International transfers: If you contact or engage us from outside the United States, your information will be processed in the United States. Where the GDPR or UK GDPR applies, we rely on appropriate safeguards, such as standard contractual clauses, for any transfer of personal data to third countries.

6. Cookies

This website sets no cookies and uses no similar tracking technologies. There is nothing to opt out of: no analytics cookies, no functional cookies, and no advertising or behavioral profiling tools of any kind. If this ever changes, this policy will be updated before any cookie is set.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention obligations)
• Object to or restrict processing of your information
• Receive a portable copy of your data
• Withdraw consent where processing is based on consent

EEA and UK Residents (GDPR)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: your consent (for example, when you submit an inquiry), performance of a contract or pre-contractual steps (when we prepare or deliver an engagement), and our legitimate interests in operating and securing our business. In addition to the rights listed above, you may lodge a complaint with your local data protection supervisory authority.

California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, use, and disclose; to request deletion and correction; and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising, we honor Global Privacy Control (GPC) signals as an opt-out request, and we do not discriminate against anyone for exercising these rights.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purpose for which it was collected, comply with legal obligations, and resolve any disputes. Client engagement records are typically retained for 7 years following the conclusion of an engagement in accordance with standard business record-keeping requirements. Website inquiry data is retained for 24 months unless a client relationship is established.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify active clients of material changes via email. Continued use of our website or services following notice of changes constitutes acceptance of the updated policy. The effective date at the top of this page indicates when it was last revised.

10. Contact Us

For any privacy-related questions, requests, or concerns: