Privacy Policy

We sell governance and compliance services. It would be strange to write a privacy policy nobody can read, so this one is in plain language. If anything here is unclear, email us and we will explain it.

This policy explains how [LEGAL ENTITY NAME], doing business as Jecovia ("Jecovia," "we," "us"), handles personal information collected through jecovia.com and through direct correspondence with us.

Jecovia is a technology consultancy based in [STATE], United States. You can reach us at [PRIVACY EMAIL] or [MAILING ADDRESS].

Back to top

If you become a client, the data we handle inside an engagement — your systems, your employee records, your patient or customer data, your contracts — is not governed by this policy. That information is covered by your engagement agreement, any non-disclosure agreement, and where applicable a Business Associate Agreement under HIPAA or a data processing agreement.

In those engagements Jecovia typically acts as a service provider or business associate processing data on your instructions, not as an independent controller. Nothing on this page overrides those agreements. Where the terms conflict, the engagement agreement wins.

This policy also does not cover third-party websites we link to. Their practices are their own.

Back to top

We only ask for what we need to respond to you.

• Through the contact form: your name, company name, email address, optional phone number, company size range, the reason you're reaching out, and whatever you write in the message field.
• Through email or a scheduled call: anything you choose to send us, including attachments. If you email us a copy of a contract, an audit request list, or a system inventory, we treat it as confidential and we do not retain it beyond what's described in Section 8.

Please don't send us sensitive data through the website. Do not submit Social Security numbers, financial account numbers, health or patient information, credentials, API keys, or copies of identification through the contact form or by unencrypted email. If an engagement requires that kind of material, we will set up a secure channel first.

Back to top

When you visit the site, our hosting and analytics providers record standard technical data: IP address, browser type and version, device type, operating system, referring URL, the pages you viewed, and timestamps.

We use this to keep the site working, understand which pages are useful, and detect abuse. We do not use it to build advertising profiles, and we do not attempt to identify individual visitors from it.

Back to top

We keep this minimal.

We do not use advertising cookies, retargeting pixels, social media trackers, or session-recording tools.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may break the contact form. We honor Global Privacy Control (GPC) signals where your browser sends them.

Back to top

We use personal information only to:

• Respond to your inquiry and schedule a conversation
• Prepare and send a scoped proposal if there's a fit
• Deliver services you've engaged us for, and communicate about them
• Send occasional written material you specifically asked to receive, such as a checklist or a newsletter — never without your request
• Maintain security, prevent fraud and spam, and keep records of our own business decisions
• Meet legal, tax, insurance, and professional obligations

We do not use your information to train machine learning models, and we do not feed client or prospect material into public AI tools.

Back to top

Our whole business model is that we're paid by clients and nobody else. That extends to data.

• We do not sell personal information.
• We do not rent, trade, or license contact lists.
• We do not share your information with software vendors, resellers, or referral partners — not as a lead, not as an introduction, not for a fee.
• We do not use your inquiry as an example, case study, or reference without your written permission.

If a vendor ever contacts you claiming Jecovia referred you, that did not come from us. Tell us and we will look into it.

Back to top

Back to top

We share personal information only with service providers who help us operate, and only to the extent they need it. Each is bound by contract to protect it and to use it for no other purpose.

We will also disclose information where we are legally required to — a subpoena, a court order, a regulatory demand — or where necessary to protect our rights or someone's safety. If we receive a legal demand for your information, we will notify you unless we are prohibited from doing so.

If Jecovia is ever acquired or merged, information may transfer as part of that transaction. You would be notified before your information became subject to a different policy.

All of our current service providers store data in the United States.

Back to top

• Encryption in transit (TLS) across the site and in our email
• Encryption at rest for stored form submissions
• Multi-factor authentication on every account that touches client or prospect data
• Least-privilege access — people get only what their role requires
• Secrets held in a dedicated secrets manager, never in source code
• Logging and review of access to systems holding client data
• Vendor security review before we adopt any tool that will hold your information

No system is perfectly secure, and we won't claim otherwise. If a breach affects your personal information, we will notify you and any required regulator within the timeframes the law sets.

Back to top

Wherever you live, you may ask us to:

• Access — tell you what personal information we hold about you
• Correct — fix anything inaccurate
• Delete — remove your information, subject to legal retention requirements
• Port — send you a copy in a portable format
• Opt out — stop receiving any communication from us
• Object or restrict — limit how we use your information

Email [PRIVACY EMAIL] with your request. We will confirm receipt within 10 business days and respond substantively within 45 days. There is no charge, and we will not treat you differently for asking.

We may need to verify your identity before acting, which usually means confirming you control the email address on file. An authorized agent may act for you with written permission.

Back to top

Under the CCPA as amended by the CPRA, California residents have the rights listed in Section 11, plus the right to know the categories of personal information collected, the sources, the business purpose, and the categories of third parties it's disclosed to — all of which are described in Sections 3, 4, 6, and 9 above.

Jecovia does not sell personal information and does not share it for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the preceding twelve months. We do not knowingly collect the personal information of anyone under 16.

We do not use or disclose sensitive personal information for any purpose beyond what is permitted without a right to limit.

Back to top

You have substantially the rights described in Section 11, including the right to appeal a denial. To appeal, reply to our decision with the word "Appeal" and a brief explanation. We will respond within 45 days. If we deny the appeal, you may contact your state Attorney General.

Back to top

Jecovia operates in the United States and our providers store data here. If you contact us from outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your country.

Where the GDPR or UK GDPR applies, our lawful bases are: legitimate interests (responding to a business inquiry, securing our site), performance of a contract (delivering engaged services), consent (any material you asked to receive, which you may withdraw at any time), and legal obligation (tax and regulatory records). You may lodge a complaint with your supervisory authority.

Back to top

The site is meant for business audiences. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email [PRIVACY EMAIL] and we will delete it.

Back to top

If we change this policy we will update the "last updated" date at the top. For changes that materially affect how we handle information already collected, we will notify anyone with an active engagement or an open inquiry by email before the change takes effect.

Back to top

Questions, requests, or complaints:

We answer privacy inquiries ourselves. There is no ticketing system and no form.

Contact us

Back to top