Privacy Policy

2. Data We Collect

We collect information you provide directly to us, such as when you:

• Fill out our contact forms or signup forms
• Request a gap analysis or consultation
• Subscribe to our newsletter or updates
• Communicate with us via email or phone

Personal Information

• Company name and contact details
• Email address
• Phone number (optional)
• Name and position
• Information about your compliance needs

3. How We Use Your Data

We use the information we collect to:

• Provide compliance consulting and gap analysis services
• Respond to your inquiries and communicate with you
• Send you relevant information about our services
• Improve our services and website
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on:

• Consent: When you provide consent for marketing communications
• Contract: To perform our consulting services
• Legitimate interests: To respond to inquiries and improve our services
• Legal obligation: To comply with applicable laws

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only:

• With trusted service providers who assist in our operations
• When required by law or to protect our rights
• With your explicit consent

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected]

9. Cookies and Your Consent

We use cookies and similar technologies (such as local storage). Strictly necessary technologies that make the site work are always active. Optional analytics technologies are described below.

Visitors in the EU/EEA (and the UK and Switzerland) are shown a consent banner, and cookie-based analytics are only enabled after you click “Accept.” Google Ads / Google tag additionally runs under Google Consent Mode and sets no advertising or analytics cookies until consent is given. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer, or by clearing this site’s cookies and local storage in your browser, which will make the banner appear again.

10. Analytics Tools

PostHog. A product-analytics tool that we self-host on our own infrastructure (ph.lucido.dev). It records usage events and heatmaps (clicks, scrolling) to help us improve the site. It uses cookies/local storage and is activated only after you consent.

Google Ads / Google tag (Google Ireland Ltd. / Google LLC). Used to measure advertising performance. Consent-gated via Google Consent Mode — cookies are set only after you accept.

Plausible Analytics. A privacy-friendly, cookieless analytics tool that we self-host (t.lucido.dev). It does not use cookies and does not store personal data or full IP addresses.

Legal basis: your consent (Art. 6(1)(a) GDPR) for cookie-based analytics and advertising measurement; our legitimate interest in aggregate, privacy-friendly statistics (Art. 6(1)(f) GDPR) for the cookieless analytics.

11. International Transfers

We do not sell your personal data. PostHog and Plausible are self-hosted on our own infrastructure. Some providers (such as Google) are based in or transfer data to the United States; such transfers are safeguarded by appropriate measures such as the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.

13. Privacy Contact Information

If you have any questions, concerns, or comments about our privacy policy, please contact us using the information below:

Company Information