Privacy Policy | IntelPak

Section 1

About Us & Scope

The IntelPak.com website is part of the PrivacyStudios Advisory ecosystem. IntelPak is a product and division of PrivacyStudios Advisory LLC.

Privacy Studios Advisory LLC ("PrivacyStudios," "we," "us," or "our") explains here how we collect, use, disclose, and protect personal data when you visit intelpak.com (the "Website"), receive our communications, attend our events, or use our services and tools. We act as a data controller when we decide why and how personal data is processed for our own purposes. This Policy forms part of our Terms of Use.

Section 2

When This Policy Applies

This Policy covers Website visitors and people who interact with our content, forms, and events. It does not apply to job applicants or our personnel, or where we act solely as a processor for a client: those situations are governed by notices or contracts specific to them.

Section 3

Changes to This Policy

We may update this Policy to reflect legal, technical, or business changes. The "Last updated" date indicates when changes took effect. When required, and if we have your contact details, we'll provide advance notice of material updates. Your continued use of the Website after an update applies on a prospective basis.

Section 4

Contact Information

Privacy Studios Advisory LLC – Data Protection Officer

[email protected]

Submit a request via our on-site form: Data Privacy Request

Section 5

Personal Data We Collect

Provided by you: name, email, phone, company, role, state/province, country/region, topics of interest, messages, event registrations.
From third parties: service providers supporting registrations, communications, or events; public sources where lawful.
Automatically: device/usage data (e.g., IP, browser, pages visited) as described in Cookies. We may create de-identified or aggregated data for analytics.

We do not sell or share personal information for cross-context behavioral advertising, and have not done so in the past 12 months.

Section 6

How We Use Personal Data

Operate and improve the Website and our services.
Respond to inquiries, deliver resources, and run events.
Send communications you request or that are compatible with our relationship (you can opt out at any time).
Maintain security, prevent fraud, and meet legal obligations.
Generate de-identified/aggregated insights to improve content and performance.

Legal bases vary by region and include legitimate interests, contractual necessity, consent (where required), and legal obligations.

Section 7

Disclosures of Personal Data

We may disclose data to:

Service providers/contractors (hosting, email, analytics, event platforms) under our instructions and not for their own use.
Professional advisors bound by confidentiality.
Authorities where required by law or to protect rights and safety.
Affiliates within PrivacyStudios for the purposes described here.

International transfers use appropriate safeguards (e.g., Standard Contractual Clauses for EEA/UK transfers).

Section 8

Cookies & Similar Technologies

We use cookies and similar tech to run the site, remember preferences, measure traffic, and improve content. Browser and on-site tools let you manage choices. Some browsers send "Do Not Track" signals; our site does not currently respond to DNT. For details please check our Cookie Notice.

Section 9

SMS Consent & Messaging Policy

Opt-in onlyWe send SMS if you provide your number and explicitly consent (e.g., a checked box).

PurposeSupport, appointment confirmations/reminders, security/account alerts. No promotional SMS.

Opt-outReply STOP to stop; START to re-enable. Carrier rates may apply.

ProviderTwilio. We follow carrier and legal requirements.

Use & protectionNumbers used only as stated and protected per Section 11 (Security).

Section 10

Data Retention

We retain personal data only as long as needed for the purposes in this Policy and to meet legal/regulatory requirements. De-identified/aggregated data may be kept without time limit. Specific retention rules may apply for recruiting or contracts.

Section 11

Security

We use administrative, technical, and organizational measures designed to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. No method is perfectly secure. If you suspect misuse, contact [email protected].

Section 12

Minors

This Website is intended for adults. We do not knowingly collect data from individuals under 18. If you believe a minor has provided data, contact us and we will delete it promptly.

Section 13

Links to Other Sites

Our Website/emails may link to external sites governed by their own privacy policies. Review those notices before sharing information; we are not responsible for their practices.

Section 14

Your Privacy Rights (Global)

Subject to law and verification of identity, you may be able to:

Access or obtain a copy of your personal data.
Correct inaccuracies.
Delete data.
Object to or restrict processing.
Withdraw consent (where processing relies on consent).
Receive data in portable form (where applicable).

Submit requests via our on-site Data Privacy Request form or email [email protected]. We do not retaliate against people for exercising privacy rights.

14.1 How to Submit a Request

Use the links above or email our DPO. Please tell us which right you wish to exercise and enough information for us to locate your records (e.g., the email you used with us). If you maintain an account with us, you can also review or correct certain data in your account settings.

14.2 Verification & Authorized Agents

We take reasonable steps to verify your identity before acting on a request. Where permitted, you may appoint an authorized agent to submit a request; we may request evidence of the agent's authority and information sufficient to verify your identity.

14.3 Appeals

If we decline to take action on your request, you may appeal by replying to our decision email or by writing to [email protected] with "Appeal" in the subject line. We will review and respond in writing within the timeframe required by applicable law. If you remain dissatisfied, you may contact your state Attorney General or relevant data protection authority.

14.4 Opt-Out Signals (GPC/DNT)

Where required by law, we treat a browser-based Global Privacy Control (GPC) signal as a request to opt out of "sale"/"sharing" (targeted advertising) for that browser. Our site does not currently respond to Do-Not-Track (DNT) signals.

Section 15

U.S. Residents' Rights (General)

This summary applies to U.S. residents in states with comprehensive privacy laws and complements Sections 14 and 16 (California).

Core rights: access/know, correction, deletion, portability (copy), and non-discrimination for exercising your rights.
Opt-out rights: targeted advertising, sale of personal data (we do not sell), and profiling for decisions with legal or similarly significant effects (not currently used for consumers).
Sensitive data: where required, we obtain consent or provide an opt-out and limit use to necessary purposes.
How to act: use our request form or email [email protected].

Our program aims to apply the strongest relevant protection consistently across states.

Section 16

California Notice (CCPA/CPRA)

16.1 Overview

Transparency: We explain the categories of personal information we collect, where it comes from, why we use it, and who we disclose it to.
Control: You can submit requests to access, correct, delete, or obtain a copy of your information, and you may use an authorized agent where the law allows.
Benefits to you: We use personal information to run and secure our services, answer your requests, deliver resources you choose, and improve your experience: and never to sell or "share" it for cross-context behavioral advertising.

16.2 What We Collect, Why We Use It, and Who Receives It

Category	Sources	Purposes	Recipients
Identifiers & contact details (name, email, phone, company, role)	You; event signups; website forms	Responding to inquiries; delivering content; administering events; security/fraud prevention	Service providers; professional advisors
Commercial & interaction data (downloads, registrations, site usage)	You; automatic collection; event tools	Operate, secure, and improve our site and services; non-intrusive communications you can opt out of	Service providers (analytics, hosting, email)
Content you submit (messages, support requests)	You	Answer questions; provide support; maintain records	Service providers; professional advisors
Event media (webinar recordings)	You; event platforms	Provide event access; share recordings with registrants; improve event quality	Service providers (event hosting)

We do not sell personal information and we do not "share" personal information for cross-context behavioral advertising.

16.3 Sensitive Personal Information

PrivacyStudios does not intentionally collect sensitive categories in our normal operations. If a project or legal requirement ever necessitates limited processing, we will only use or disclose such information for the narrow, permitted purposes in the statute.

16.4 Your California Rights

Know / Access (categories and specific pieces).
Correct inaccuracies.
Delete personal information (subject to lawful exceptions).
Portability (copy in a portable format).
Opt-out of sale or sharing (not applicable: see above).
Limit use/disclosure of sensitive personal information (not applicable as described).
Appeal a denied request (see Section 14.3).

16.5 How to Exercise Your Rights

Submit a request via our on-site Data Privacy Request form or email [email protected]. We take reasonable steps to verify the request.

16.6 Response Timing and Fees

We generally respond within 45 days of receiving a verifiable request. If we need more time (up to an additional 45 days), we will let you know. We do not charge a fee unless a request is excessive or repetitive as defined by law.

16.7 Non-Discrimination

We will not deny goods or services, charge different prices, or provide a different level of service because you exercised your CCPA/CPRA rights.

16.8 Financial Incentives

We do not offer financial incentive programs tied to the sale or sharing of personal information.

16.9 "Sharing," GPC, and Do-Not-Track

Sharing (ads): We do not engage in cross-context behavioral advertising: no "sharing" to opt out of at this time.
Global Privacy Control (GPC): We treat a valid GPC signal as an opt-out request where applicable.
Do-Not-Track: Our site does not currently respond to DNT signals.

Section 17

GDPR Notice (EU/EEA)

17.1 Controller

For Website operations and communications described in this Policy, PrivacyStudios acts as the controller. For client projects where we act on instructions, we are a processor and the client's privacy terms apply.

17.2 Purposes, Legal Bases, and Retention

Purpose	Personal Data	Legal Basis	Retention
Respond to inquiries	Identifiers, contact, message content, organization, role	Legitimate interests (Art. 6(1)(f))	As needed to address request; archived if required by law
Email subscriptions & newsletters	Email, preferences, interaction data	Consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f))	Duration of subscription; unsubscribe any time
Events and webinars	Registration details, access logs, session questions, recordings	Contract (Art. 6(1)(b)); legitimate interests	Event lifecycle and limited post-event period
Site operation, analytics, security	Technical/usage data, cookies	Legitimate interests (Art. 6(1)(f)); consent for non-essential cookies	Cookie/log durations; de-identified data may be retained longer
Contracting	Contact, company info, proposal history, billing contacts	Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c))	Contract term plus statutory limitation periods
Compliance, legal claims, fraud prevention	Identifiers, transactional records, logs	Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f))	As required by law and for duration of claims/defense

17.3 Recipients

Service providers/contractors acting on our instructions.
Professional advisors under confidentiality.
Affiliates within PrivacyStudios, only as needed.
Authorities when required by law or to protect rights and security.

17.4 International Transfers

When personal data is transferred outside the EEA/UK, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses. Contact [email protected] for details.

17.5 Security and Confidentiality

We maintain administrative, technical, and organizational measures to protect personal data. Access is limited to personnel and providers who need it under binding obligations.

17.6 Cookies and Consent Management

Non-essential cookies are used only with your consent, which you can withdraw at any time via your browser or our on-site controls. Withdrawing consent does not affect processing carried out before withdrawal.

17.7 Your GDPR Rights

Subject to conditions in Articles 12–23 GDPR, you have the right to access, rectify, erase, restrict, object, obtain portability for certain data, and withdraw consent where relied upon.

17.8 Supervisory Authority

You have the right to lodge a complaint with your local supervisory authority (e.g., the CNIL in France, the DPC in Ireland, or the ICO in the UK). We invite you to contact our DPO first at [email protected] so we can address your concerns quickly.

Section 18

SaaS & Tools Operated by PrivacyStudios

When clients upload data to our tools and cloud storage, we act as a processor and follow the client's instructions under a data processing agreement.
When we collect limited usage data (e.g., login events, IP, activity) to secure and improve our services, we act as a controller.
We apply industry-standard safeguards (e.g., encryption in transit/at rest) and retain data only as needed or required by law. Upon termination, data is deleted or de-identified per contract.

Section 19

Country/Region-Specific Addenda

Supplemental information for residents of U.S. states with comprehensive privacy laws. If any term below conflicts with the general sections, this addendum controls for residents of that state.

Applicability

These provisions apply to residents of: Virginia (VCDPA), Colorado (ColoPA), Connecticut (CTDPA), Utah (UCPA), Delaware (DPDPA), Oregon (OCPA), Texas (TDPSA), Iowa (Iowa CDPA), Indiana (Indiana CDPA), Tennessee (TIPA), Montana (MCDPA), Kentucky (KCDPA), Nebraska (NDPA).

Key Rights and Protections

Access and Confirmation: request confirmation of processing and access to data.
Correction: correct inaccurate personal data.
Deletion: request deletion, subject to legal exceptions.
Portability: receive data in a portable format where technically feasible.
Opt-Out: targeted advertising, sale (if applicable), and profiling for decisions with legal/similar effects.
Appeal: if we deny a rights request, you may appeal within the state-specific timelines (see Section 14.3).

Summary of State Enforcement and Timelines

Virginia (VCDPA)45-day response; appeal rights within 60 days.

Colorado (ColoPA)Mandatory appeals and universal opt-out signals.

Connecticut (CTDPA)Similar to Colorado; enhanced protections under 16.

Utah (UCPA)Applies to larger entities; fewer rights (no correction/appeal).

Delaware, Oregon, Texas, etc.Strong opt-out and sensitive-data limits.

PrivacyStudios applies a unified compliance framework designed to meet or exceed the strongest of these state standards across U.S. operations.

Section 20

Definitions

ControllerDecides why/how personal data is processed.

ProcessorProcesses personal data for a controller under contract.

Personal dataInformation relating to an identified or identifiable person.

Sell / Share (CCPA/CPRA)Meanings set by California law.

SCCsEU-approved Standard Contractual Clauses for international transfers.

De-identified / Aggregated dataData that cannot reasonably be linked to an individual.