Privacy Policy & Rights Center

1. Introduction & Scope

BKR Group Consulting LLC ("BKR", "we", "us", "our") is a technology consulting practice incorporated in Delaware, United States. We respect your privacy and are committed to safeguarding personal information collected through our website (bkrgroupconsulting.com), client portals, and communication channels.

2. Information We Collect

We collect information you directly submit to us and technical telemetry generated when you navigate our site:

• Contact & Project Information: Full name, corporate email address, telephone number, company name, project specifications, and budget ranges submitted via our proposal forms.
• Technical & Usage Telemetry: Anonymized IP addresses, browser specifications, operating system, pages visited, Core Web Vitals telemetry, and referring URLs collected through privacy-focused analytics if consented.
• Client Communications: Correspondence, email records, and meeting notes conducted during technical discovery and delivery.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our processing of your personal data is grounded in the following lawful bases under Article 6 of the General Data Protection Regulation (GDPR):

• Consent: Where you have opted in to analytics or requested project communications.
• Contractual Necessity: To prepare fixed-scope statements of work, deliver software engineering services, and fulfill commercial contracts.
• Legitimate Interests: To protect our website infrastructure from cyber threats, spam attacks, and unauthorized intrusions.
• Legal Obligation: To satisfy corporate accounting, tax compliance, and United States statutory requirements.

4. Your Privacy Rights

Depending on your jurisdiction (including GDPR, UK GDPR, and CCPA/CPRA), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal records.
• Erasure ("Right to Be Forgotten"): Request deletion of your personal data where no overriding legal obligation exists.
• Data Portability: Receive your data in a structured, machine-readable format.
• Opt-Out of Sharing/Sale: California residents can opt out of any non-essential data sharing.
• Non-Discrimination: We will never deny services or charge different rates for exercising your privacy rights.

To exercise any of these rights, contact our Data Protection Officer at privacy@bkrgroupconsulting.com. We verify and respond to all verified requests within 30 days.

5. Cookies and Tracking Technologies

Our website uses cookies and similar storage technologies strictly necessary for security, session management, and CSRF token validation. Optional performance and analytics cookies are loaded only after your explicit consent. You can modify your choices at any time via the Cookie Preferences panel in our footer.

6. Data Security & International Transfers

We employ industry-standard administrative, physical, and technical defenses, including TLS 1.3 encryption in transit and AES-256 encryption at rest. Where personal data is transferred from the EEA/UK to the United States, we rely on Standard Contractual Clauses (SCCs) and robust adequacy mechanisms.

7. Contact Information

For questions regarding this policy or our data practices, please reach us at: