PRIVACY POLICY

Last Updated: October, 2025

1. INTRODUCTION

TEMPORAL Consulting Ltd ("we," "us," "our," or "Company") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (the "Website") and use our services.

Company Details:

• Legal Name: TEMPORAL Consulting Ltd
• Registration: Republic of Seychelles, Registration Number 247675
• Registered Address: House of Francis, Room 303, Ile Du Port, Mahe, Seychelles
• Email: info@temporalconsultingltd.com
• Website: temporalconsultingltd.com

This Privacy Policy applies to information we collect through the Website and through our consulting services. By using our Website or services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. LEGAL BASIS FOR PROCESSING

We process personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and other applicable data protection laws. We process your personal data based on one or more of the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal Obligation: Processing is necessary for us to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and interests

3. INFORMATION WE COLLECT

3.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Fill out contact forms on our Website
• Request information about our services
• Subscribe to newsletters or marketing communications
• Engage our consulting services
• Communicate with us via email, phone, or other channels
• Register for an account (if applicable)

This information may include:

• Identity Data: First name, last name, title, job position
• Contact Data: Email address, telephone number, postal address, company name
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage Data: Information about how you use our Website and services
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences
• Business Information: Company details, business requirements, project specifications, operational data

3.2 Information We Collect Automatically

When you visit our Website, we automatically collect certain information about your device and usage patterns:

• Log Data: IP address, browser type, pages visited, time spent on pages, referring/exit pages
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Website (see Section 7 for more details)
• Device Information: Hardware model, operating system, unique device identifiers

3.3 Information from Third Parties

We may receive information about you from:

• Analytics providers such as Google Analytics
• Marketing and advertising partners
• Social media platforms (if you interact with us through social media)
• Business partners and referral sources
• Publicly available sources

3.4 Sensitive Information

We do not intentionally collect sensitive personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data). If you provide such information to us, you consent to our processing of that information for the purposes described in this Privacy Policy.

4. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

4.1 To Provide and Maintain Our Services

• Responding to your inquiries and requests
• Providing consulting services and operational audits
• Implementing technology solutions and system integrations
• Managing client relationships and service delivery
• Processing transactions and payments
• Providing customer support

4.2 To Improve Our Website and Services

• Analyzing usage patterns and trends
• Conducting research and development
• Testing new features and functionalities
• Monitoring and analyzing the effectiveness of our services
• Improving user experience

4.3 For Marketing and Communication

• Sending promotional communications about our services (with your consent)
• Providing newsletters, case studies, and industry insights
• Conducting market research and surveys
• Personalizing your experience on our Website
• Displaying targeted advertisements

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Contacting us directly at [your email address]
• Updating your communication preferences in your account settings (if applicable)

4.4 For Legal and Security Purposes

• Complying with legal obligations and regulations
• Protecting our legal rights and interests
• Detecting, preventing, and addressing fraud, security issues, or technical problems
• Enforcing our Terms of Use and other agreements
• Responding to law enforcement requests and legal proceedings

4.5 For Business Operations

• Managing our business relationships
• Conducting internal administration
• Performing accounting, auditing, and other business functions
• Analyzing business performance and strategy

5. HOW WE SHARE YOUR INFORMATION

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We engage third-party companies and individuals to perform services on our behalf, including:

• Website hosting and maintenance
• Data storage and cloud services
• Email service providers
• Analytics providers (e.g., Google Analytics)
• Payment processors
• CRM and marketing automation platforms
• Technology implementation partners
• Professional advisors (lawyers, accountants, consultants)

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information and use it only for the purposes we specify.

5.2 Business Transfers

If we are involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid requests by public authorities (e.g., law enforcement, regulatory agencies)
• Court orders or legal processes
• Protection of our rights, property, or safety, or that of others
• Investigation of fraud or security issues
• Enforcement of our Terms of Use

5.4 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5.5 Aggregated or Anonymized Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you, including:

• Statistical information about Website usage
• Industry benchmarks and trends
• Case study data (with identifying information removed)

6. INTERNATIONAL DATA TRANSFERS

As we are incorporated in Seychelles and may engage service providers globally, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home country.

When we transfer personal data outside the European Economic Area (EEA) or the UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses: Approved by the European Commission
• Adequacy Decisions: Transfers to countries deemed to provide adequate protection
• Binding Corporate Rules: For transfers within corporate groups
• Your Consent: Where appropriate and lawful

We take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws.

7. COOKIES AND TRACKING TECHNOLOGIES

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and provide information to website owners.

7.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Website to function properly (e.g., security, authentication)
• Performance Cookies: Collect information about how visitors use our Website (e.g., Google Analytics)
• Functionality Cookies: Remember your preferences and personalize your experience
• Marketing Cookies: Track your browsing activity to deliver targeted advertisements

7.3 Third-Party Cookies

We use third-party services that may place cookies on your device:

• Google Analytics: For website analytics and performance monitoring
• Marketing Platforms: For advertising and retargeting campaigns
• Social Media Plugins: If you interact with social media features on our Website

7.4 Managing Cookies

You can control and manage cookies through your browser settings. You can:

• Block all cookies
• Accept or reject cookies on a case-by-case basis
• Delete cookies already stored on your device

Please note that disabling cookies may affect the functionality of our Website.

8. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Periods

• Contact Inquiries: Retained for up to 3 years after your last interaction with us
• Client Data: Retained for the duration of our business relationship and up to 7 years thereafter for legal and accounting purposes
• Marketing Data: Retained until you withdraw consent or request deletion
• Website Usage Data: Typically retained for up to 26 months (Google Analytics default)

8.2 Deletion Criteria

When determining retention periods, we consider:

• The purpose for which we collected the data
• Our legal obligations to retain data
• Whether we need the data to defend legal claims
• Industry best practices and regulatory requirements

9. YOUR PRIVACY RIGHTS

Under UK GDPR, EU GDPR, and other applicable data protection laws, you have the following rights:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you.

9.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal information.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request that we delete your personal information in certain circumstances, such as:

• The data is no longer necessary for the purposes it was collected
• You withdraw your consent (where processing was based on consent)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

9.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal information in certain circumstances.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

9.6 Right to Object

You have the right to object to:

• Processing based on legitimate interests
• Direct marketing (including profiling)
• Processing for scientific, historical research, or statistical purposes

9.7 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, place of work, or where an alleged infringement occurred.

9.9 Exercising Your Rights

To exercise any of these rights, please contact us at [your email address]. We will respond to your request within one month, though this may be extended by two additional months in complex cases.

We may request specific information from you to help us verify your identity before processing your request.

10. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

10.1 Technical Measures

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Secure authentication and access controls
• Regular security assessments and penetration testing
• Firewall protection and intrusion detection systems
• Secure backup and disaster recovery procedures

10.2 Organizational Measures

• Staff training on data protection and security
• Confidentiality agreements with employees and contractors
• Access controls limiting data access to authorized personnel only
• Data protection impact assessments for high-risk processing
• Incident response and breach notification procedures
• Regular policy reviews and updates

10.3 Third-Party Security

We conduct due diligence on third-party service providers to ensure they maintain appropriate security standards and comply with data protection regulations.

10.4 Limitations

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that you provide information at your own risk.

11. CHILDREN'S PRIVACY

Our Website and services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from children without parental consent, we will take steps to delete that information.

12. THIRD-PARTY LINKS

Our Website may contain links to third-party websites, applications, or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

13. DO NOT TRACK SIGNALS

Some web browsers have a "Do Not Track" (DNT) feature that signals websites you visit that you do not want to have your online activity tracked. Our Website does not currently respond to DNT signals or similar mechanisms.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our Website with a new "Last Updated" date
• Sending you an email notification (if you have provided your email address)
• Displaying a prominent notice on our Website

We encourage you to review this Privacy Policy periodically. Your continued use of our Website and services after changes are posted constitutes your acceptance of the updated Privacy Policy.

15. SPECIFIC PROCESSING ACTIVITIES

15.1 Consulting Services and Audits

When you engage our consulting services, we may process:

• Business operational data and process workflows
• Employee and organizational structure information
• Financial and performance metrics
• Technology infrastructure and system details
• Customer data (where relevant to service delivery)

We process this information under our contractual relationship with you and to provide the services you have requested.

15.2 Technology Implementation

When implementing technology solutions (CRM, automation tools, payment systems, etc.), we may:

• Access your existing systems and data
• Integrate with third-party platforms
• Configure systems based on your specifications
• Process data for testing and optimization

We implement appropriate security measures and confidentiality protections during these activities.

15.3 AI and Automation Services

When providing AI-powered solutions or automation tools, we may:

• Process data to train and optimize algorithms
• Use anonymized data for machine learning improvements
• Monitor system performance and accuracy

We do not use your data to train AI models for other clients without your explicit consent.

15.4 Communication Platforms

If we implement communication systems on your behalf, we may process:

• Customer interaction data
• Chatbot conversations
• Email and messaging content
• Call recordings (where legally permitted and disclosed)

We process this data only as a data processor on your behalf, following your instructions.

16. DATA PROCESSING AGREEMENTS

For clients engaging our consulting and implementation services, we enter into separate Data Processing Agreements (DPAs) that specify:

• The scope and purpose of data processing
• Our obligations as a data processor
• Your rights and obligations as a data controller
• Security measures and breach notification procedures
• Sub-processor arrangements
• Data transfer mechanisms
• Audit rights and compliance requirements

These DPAs ensure compliance with UK GDPR, EU GDPR, and other applicable data protection regulations.

17. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

17.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, as well as the categories of sources, purposes, and third parties with whom we share personal information.

17.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

17.3 Right to Opt-Out

You have the right to opt out of the sale of your personal information. We do not sell personal information.

17.4 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your CCPA rights.

17.5 Authorized Agent

You may designate an authorized agent to make requests on your behalf.

To exercise these rights, please contact us at [your email address].

18. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

TEMPORAL Consulting Ltd
House of Francis, Room 303
Ile Du Port, Mahe
Seychelles

Email: info@temporalconsultingltd.com
Website: temporalconsultingltd.com

For UK/EU GDPR matters:
You may also contact our representative in the UK/EU (if appointed) at [representative contact details].

19. CONSENT

By using our Website and services, you consent to the collection, use, and processing of your personal information as described in this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use our Website or services.

For processing activities that require explicit consent, we will obtain your consent separately before processing your personal information.

This Privacy Policy is effective as of the date stated at the top of this document.