Section 01
Introduction
Cirro Group LLC ("Cirro Group," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website at www.cirroedge.ai (the "Site") and those who engage with our enterprise technology consulting services. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in connection with our Site and services.
This Policy applies to: (a) visitors to our Site; (b) prospective clients who submit inquiries; (c) existing clients and their authorized personnel; and (d) any individual whose personal data we process in the course of delivering our professional services.
By accessing the Site or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
Section 02
Information We Collect
2.1 Information You Provide Directly
We collect information you provide when you:
- Complete and submit a contact form on our Site
- Engage us to provide consulting services
- Communicate with our team by email, phone, or other means
- Enter into a Master Services Agreement or Statement of Work with us
This information may include your name, business email address, phone number, job title, employer name, and the content of your communications with us.
2.2 Information Collected Automatically
When you visit our Site, we and our third-party service providers may automatically collect IP address and approximate geographic location, browser type, version, and operating system, pages visited, time spent on pages, and referring URLs, and device identifiers and session data. This information is collected through cookies, web beacons, and similar tracking technologies. You may configure your browser to refuse cookies, though certain Site functionality may be affected.
2.3 Client Engagement Data
In the course of providing services, we may process business and technical data you provide. Where Cirro Group processes personal data on your behalf as a data processor, such processing is governed by the Data Processing Agreement ("DPA") incorporated into your services agreement.
Section 03
How We Use Your Information
- To respond to inquiries and communicate with prospective clients
- To enter into and perform contracts for professional services
- To deliver, manage, and improve our consulting services
- To operate, maintain, and enhance our Site
- To send relevant communications about our services, with your consent where required
- To comply with legal obligations and enforce our agreements
- To protect the security and integrity of our systems and those of our clients
We do not sell personal information to third parties.
Section 04
Legal Basis for Processing (EU/EEA Visitors)
Where the GDPR applies, we rely on: contractual necessity, legitimate interests (operating our Site, responding to inquiries, fraud prevention), legal obligation, and consent where requested. You may withdraw consent at any time.
Section 05
Disclosure of Information
We share personal information with service providers who assist in operating our Site and delivering services (including cloud infrastructure, CRM, and communication platforms), professional advisors under confidentiality obligations, and governmental authorities where required by law. In connection with a business transfer, personal information may be transferred as part of the transaction.
Section 06
International Data Transfers
Cirro Group is based in the United States. Transfers from the EEA or UK rely on Standard Contractual Clauses (SCCs) or other lawful mechanisms. A copy of applicable transfer safeguards may be requested by contacting us.
Section 07
Data Retention
- Website visitor and contact form data: Up to 24 months from last interaction
- Client engagement data: Duration of engagement plus 7 years, or as required by law
- Financial and contractual records: As required by applicable tax and corporate law (typically 7 years)
Section 08
Your Privacy Rights
Depending on your jurisdiction, you may have rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. To exercise any right, contact us at privacy@cirroedge.ai. We will respond within 30 days. EEA/UK residents may also lodge a complaint with their local supervisory authority.
Section 09
Security
We implement appropriate technical and organizational measures — including access controls, encryption in transit and at rest, and regular security assessments consistent with our Zero Trust security practice — to protect personal information. No method of transmission is completely secure; we will notify you and applicable regulators of any breach as required by law.
Section 10
Children's Privacy
Our Site and services are directed to businesses and professionals. We do not knowingly collect personal information from individuals under 18. If we become aware of such collection, we will delete it promptly.
Section 11
Third-Party Links
Our Site may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies.
Section 12
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated Policy on our Site with a revised effective date. Where changes are material, we will provide additional notice as appropriate.
Section 13
Contact Us
If you have any questions or requests regarding this Privacy Policy, please contact us at: