Privacy Policy

1. Summary

2. Who we are

This Privacy Policy explains how Tapper Consulting Solutions LLC ("Tapper Consulting," "we," "us" or "our") collects, uses, shares and protects personal information in connection with our website at tapperconsulting.com (the "Site") and related communications, such as scheduling and email correspondence (together, the "Services").

Tapper Consulting is the business responsible for (the "controller" of) the personal information described in this policy. This policy does not cover information we process on behalf of clients under a consulting engagement; that information is governed by the agreement with the relevant client.

By using the Site, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Site.

3. Information we collect

Information you provide to us

• Scheduling information. When you book a call through our embedded scheduling tool, you provide your name, email address and the date and time you select. You may also provide optional details, such as your company, role, phone number and the topics you want to discuss.
• Communications. When you email us or contact us another way, we receive your name, email address and the contents of your message, including any attachments.
• Business information. If you become a prospective or current client, you may share business information with us in calls, emails or documents, such as company details, goals and performance data.

Information collected automatically

• Server and log data. Like most websites, the servers that host the Site automatically receive standard technical information when you visit. This includes your IP address, browser type, device information, referring page, the pages you request and the date and time of each request. We use this information only to deliver, secure and maintain the Site.
• Information collected by embedded services. Third-party services built into the Site, described in Section 7, may collect technical information directly from your browser under their own privacy policies.

Information we do not collect

We do not intentionally collect sensitive personal information, such as government identification numbers, financial account numbers, health information or precise geolocation, through the Site. Please do not send us this type of information.

TAPS AI assistant

The TAPS AI chat assistant on the Site answers questions using pre-written information that loads in your browser. Your questions are not transmitted to us, to an artificial intelligence provider or to any other third party, and they are not stored after you close or leave the page. Please do not enter confidential information into the assistant. If you want to discuss something specific, book a call or email us.

4. How we use information

We use personal information to:

• Schedule, prepare for, hold and follow up on calls and meetings you request;
• Respond to your inquiries and communicate with you about our Services;
• Evaluate whether we are a good fit for your needs and, if we work together, provide our consulting services;
• Operate, maintain, secure and improve the Site, including detecting and preventing fraud, abuse and security incidents;
• Keep business records, and comply with our legal, tax and accounting obligations; and
• Establish, exercise or defend legal claims.

If you book a call or contact us, we may send you messages related to that request. We will not add you to a marketing email list without your consent, and any marketing email we send will include a way to unsubscribe.

5. Legal bases for processing (EEA/UK visitors)

If you are located in the European Economic Area, the United Kingdom or Switzerland, we process your personal information on the following legal bases:

• Performance of a contract, or steps before entering one: to schedule calls you request and to provide services you ask for;
• Legitimate interests: to respond to inquiries, run and secure our business and the Site, and keep business records, where those interests are not overridden by your rights;
• Legal obligation: to comply with applicable laws; and
• Consent: where we ask for it, such as for optional marketing communications. You may withdraw consent at any time.

6. How we share information

We do not sell personal information, and we do not share it with third parties for their own marketing purposes. We disclose personal information only as follows:

• Service providers. We use vendors that process information on our behalf to provide services to us, such as website hosting, scheduling, email and productivity tools. They may use the information only to perform those services.
• Professional advisers. We may share information with lawyers, accountants, insurers and similar advisers where necessary, subject to confidentiality obligations.
• Legal requirements and protection. We may disclose information if we believe in good faith it is required by law, subpoena or other legal process. We may also disclose it to protect the rights, property or safety of Tapper Consulting, our clients or others.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction, subject to this policy or protections that are at least as strong.
• With your consent. We may share information for other purposes with your permission.

7. Third-party services

The Site uses the following third-party services. These services process information under their own privacy policies, which we encourage you to review.

If you join a video meeting with us, the meeting platform you use processes information under its own privacy policy.

8. Cookies and similar technologies

The Site itself does not set cookies and does not use analytics, advertising or social-media tracking technologies. However, the embedded Calendly scheduling widget may set cookies or use similar technologies that are necessary for scheduling to work, and possibly for Calendly's own purposes, as described in Calendly's cookie notice. You can block or delete cookies through your browser settings. If you do, the scheduling widget may not work, and you can email us to arrange a call instead.

Global Privacy Control and Do Not Track. Because we do not sell personal information or use it for targeted advertising, there is no such activity for these signals to stop. We will treat a Global Privacy Control signal as a valid request to opt out of any future sale or sharing, if we begin either practice.

If we add analytics or similar tools in the future, we will update this policy first and, where required by law, ask for your consent.

9. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy. Specifically:

• Inquiries and scheduling records for prospective clients who do not become clients: generally up to 24 months after our last interaction.
• Client records: for the duration of the engagement and afterward as needed for tax, accounting, legal and contractual purposes, generally up to 7 years.
• Server and log data: for the limited period set by our hosting provider's standard practices.

When information is no longer needed, we delete it or de-identify it. We may keep it longer where the law requires it or where it is needed to resolve disputes.

10. Security

We use reasonable administrative, technical and physical safeguards to protect personal information. These include encrypted (HTTPS) connections to the Site, reputable service providers, and access controls and account security measures on the business accounts that hold personal information. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security. If we learn of a security incident that affects your personal information, we will notify you as required by applicable law.

11. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access: to confirm whether we process your information and to get a copy of it;
• Correction: to correct inaccurate information;
• Deletion: to ask us to delete your information;
• Portability: to receive your information in a portable format;
• Opt-out: to opt out of the sale of personal information, targeted advertising or certain profiling. We do not engage in these activities;
• Restriction and objection: to restrict or object to certain processing (EEA/UK);
• Withdraw consent: where processing is based on consent; and
• Non-discrimination: we will not discriminate against you for exercising your rights.

How to make a request. Email grant@tapperconsulting.com with the subject line "Privacy request." Tell us which right you want to exercise and how we can reach you. To protect your information, we will verify your identity before acting, usually by confirming details you have previously given us. You may use an authorized agent to make a request on your behalf, and we may ask the agent for proof of authorization. We will respond within the time required by applicable law, which is generally within 45 days.

Appeals. If we decline your request, you may appeal by replying to our decision with the subject line "Privacy appeal." We will respond to your appeal within the time required by law. If you are still not satisfied, you may contact your state attorney general or, in the EEA/UK, your local data protection authority.

12. Additional notice for U.S. state residents

Several U.S. states, including California, New Jersey, Virginia, Colorado, Connecticut and others, give residents specific privacy rights. To the extent those laws apply to us, this section supplements the rest of this policy.

• Categories collected in the past 12 months: identifiers, such as name, email address and IP address; professional or employment-related information, such as company and role; internet or other electronic network activity, such as server log data; and the contents of communications you send us.
• Sources: directly from you, automatically from your device, and from the service providers described above.
• Purposes: the business purposes described in Section 4.
• Disclosures: to the categories of recipients described in Section 6, for business purposes.
• Sale, sharing and targeted advertising: we have not sold personal information, shared it for cross-context behavioral advertising or used it for targeted advertising in the past 12 months, and we do not do so. We do not knowingly sell or share the personal information of consumers under 16.
• Sensitive personal information: we do not use or disclose sensitive personal information for purposes that would give rise to a right to limit its use.

13. International visitors

We are based in the United States, and our service providers may process information in the United States and other countries. If you visit the Site from outside the United States, your information may be transferred to, stored in and processed in countries whose data protection laws differ from yours. Where required, we rely on appropriate safeguards for these transfers, such as the data transfer mechanisms (for example, Standard Contractual Clauses) offered in our service providers' data processing terms.

14. Children's privacy

The Site and our Services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

15. Links to other websites

The Site contains links to third-party websites and services, such as LinkedIn and Calendly. We are not responsible for the privacy practices of those third parties. Your use of their websites and services is governed by their own policies.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies or legal requirements. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will provide additional notice where appropriate. Your continued use of the Site after an update takes effect means you acknowledge the revised policy.

17. Contact us

If you have questions about this Privacy Policy or our privacy practices, or want to exercise your rights, contact: