This notice explains what personal information Bridgelytic collects through this website and during client engagements, why we collect it, how long we keep it, and how to exercise your rights.
To respond to your inquiry, to assess whether an engagement is appropriate, to deliver contracted services, and to maintain our own business records. We do not sell personal information, and we do not use inquiry content for advertising.
Where GDPR or comparable law applies, we rely on legitimate interests for responding to business inquiries, contract performance for delivering engagements, consent where you have given it, and legal obligation for retention of business records.
Inquiry and diagnostic records are retained for up to 24 months from last contact unless an engagement begins, in which case client records are retained for the term of the engagement plus the period required by our professional and tax obligations. You may request earlier deletion.
Data accessed during an engagement is governed by the engagement agreement and the controls described on our AI & Trust page: approved data sources, minimization, scoped access and defined retention. Bridgelytic acts as a processor for client operating data unless the agreement states otherwise.
Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing. Contact privacy@bridgelytic.capital and we will respond within the period required by applicable law.
Bridgelytic is based in the United States. Where personal information is transferred from another jurisdiction, we rely on appropriate safeguards including standard contractual clauses with our providers.
Privacy questions and requests: privacy@bridgelytic.capital. Security reports: security@bridgelytic.capital.