BSFI Consulting

Privacy Policy

最終更新日: 1 June 2026

[Company legal name] ("we", "us", or "our") respects your privacy. This Privacy Policy explains what personal information we collect through this website and our services, how we use and share it, and the choices and rights you have. [Company legal name] is a company organized in [State], United States, and is the controller of the personal information described here.

Information you provide to us

When you submit our intake form, request a project, or otherwise contact us, we collect the information you choose to provide. This typically includes your name, email address, and the project details you share, such as the type of work, scope, budget range, and timeline.

If we enter into an engagement, we also collect the information needed to deliver and bill for that work, including contract and billing details and any materials you provide during the project.

Information we collect automatically

When you visit the site, we and our hosting providers automatically collect limited technical information through standard server logs, such as your IP address, browser type, device information, referring pages, and the dates and times of your requests. We use this information to operate and secure the site.

Cookies and similar technologies

We use a small number of strictly functional cookies that are necessary for the site to work, including a cookie that remembers your selected language. We do not use cookies for advertising, and we do not use third-party advertising trackers.

Most browsers let you refuse or delete cookies. Disabling functional cookies may affect how the site behaves.

How we use your information

We use personal information to:

  • Respond to your inquiry and communicate with you;
  • Assess and scope a potential engagement;
  • Provide, manage, and bill for contracted services;
  • Operate, maintain, secure, and improve the website;
  • Comply with our legal, tax, and accounting obligations; and
  • Detect, prevent, and address fraud, abuse, or security issues.

How we share your information

We do not sell your personal information. We share it only in the following circumstances:

  • Service providers: We use Stripe, Inc. to process payments; payment-related information is handled by Stripe under its own terms and privacy policy. We also rely on infrastructure and hosting providers to run the site and our services. These providers process information on our behalf and only as needed to provide their service.
  • Professional advisors: We may share information with our accountants, auditors, and lawyers as needed.
  • Legal and safety: We may disclose information where required by law, to enforce our agreements, or to protect the rights, property, or safety of any person.
  • Business transfers: If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

Payment processing

Payments are processed by Stripe. We do not store full payment card numbers on our systems. Your use of payment features is also subject to Stripe's terms and privacy policy.

International data transfers

We are based in the United States, and the information we collect is processed and stored in the United States. If you access the site from the European Economic Area (EEA) or the United Kingdom, your personal information will be transferred to the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) for such transfers. See our GDPR notice for more detail.

Data retention

We keep personal information for as long as needed for the purposes described in this policy. Inquiries that do not lead to an engagement are kept only as long as reasonably necessary, then deleted. Engagement, billing, and tax records are retained for [retention period — e.g. 7 years for engagement and tax records], after which they are deleted or anonymized.

How we protect your information

We use reasonable administrative, technical, and organizational measures to protect personal information, including encryption in transit (TLS) and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Your choices and rights

You may ask us to access, correct, update, or delete the personal information you have provided by contacting us at [your privacy contact]. You may also opt out of non-essential communications at any time. If you are in the EEA or the United Kingdom, additional rights apply — see our GDPR notice.

Children's privacy

The site and our services are intended for businesses and individuals aged 18 or older. They are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Third-party links

The site may link to third-party websites or services that we do not control. This policy does not apply to those sites, and we are not responsible for their content or privacy practices. Review their policies before providing information.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date above and, where appropriate, provide additional notice. Your continued use of the site after an update means you accept the revised policy.

Contact us

If you have questions about this policy or our handling of personal information, contact [Company legal name] at [your privacy contact].