Privacy
Policy

1. Introduction

Draviont Advisory LLC ("Draviont Advisory," "we," "our," or "us") is committed to protecting the privacy and security of the personal information we collect from our clients, prospective clients, website visitors, and other individuals we interact with. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in connection with our strategy consulting services and our website.

This Privacy Policy applies to personal information collected through our website, through direct communications with our team, and in connection with the provision of our services. By engaging with our services or using our website, you consent to the practices described in this Privacy Policy.

Draviont Advisory is headquartered at 7300 Turfway Rd, Florence, KY 41042, United States. If you have any questions or concerns about this Privacy Policy, please contact us using the information provided at the end of this document.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us when you:

• Submit an inquiry or contact form through our website, including your name, email address, company name, role, and the nature of your consulting inquiry.
• Execute a Statement of Work or engagement agreement with us, which may include business contact details, billing information, and organizational information.
• Communicate with us via email, telephone, video conferencing, or other means, including meeting notes, correspondence, and project communications.
• Participate in our consulting engagements, which may involve sharing organizational data, employee information, business strategies, financial information, and other proprietary information.
• Subscribe to any newsletters, briefings, or publications we may offer.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information about your device and browsing behavior, including:

• IP address and approximate geographic location derived therefrom.
• Browser type, version, and operating system.
• Pages visited, time spent on pages, and navigation paths within our website.
• Referring URLs and exit pages.
• Date and time of your visit.
• Device identifiers and screen resolution.

2.3 Business Contact Information

In the context of our services, we may collect and process business contact information of individuals within client organizations, including names, titles, business email addresses, and business telephone numbers. This information is used solely for the purpose of delivering our consulting services.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

Purpose	Description
Service Delivery	Providing strategy consulting services, delivering project deliverables, and fulfilling our contractual obligations to clients.
Client Communication	Responding to inquiries, scheduling consultations, providing project updates, and general client relationship management.
Billing & Administration	Processing invoices, managing payments, maintaining financial records, and managing client accounts.
Legal Compliance	Complying with applicable laws, regulations, and legal processes, including tax and accounting requirements.
Website Improvement	Analyzing website usage patterns to improve functionality, content, and user experience.
Security	Detecting and preventing fraudulent activity, unauthorized access, and other security threats.
Business Development	With consent or as permitted by law, informing you about our services, case studies, and thought leadership content.

4. Legal Basis for Processing

Where applicable under data protection laws, including the Kentucky Consumer Data Protection Act (KCDPA) and other applicable regulations, we process personal information on the following legal bases:

• Contractual Necessity: Processing required to enter into or perform a contract with you, such as delivering our consulting services and managing billing.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, ensuring security, and managing our business operations, provided these interests are not overridden by your rights and interests.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including financial reporting and tax compliance.
• Consent: Processing based on your freely given, specific, informed consent, such as sending marketing communications. You may withdraw consent at any time.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our business and delivering our services, including cloud storage providers, project management platforms, accounting software providers, communication tools, and payment processors. These service providers are contractually required to protect your information and use it only as directed by us.

5.2 Professional Advisors

We may share information with our legal counsel, accountants, auditors, and other professional advisors where necessary for them to provide their professional services to us, subject to professional confidentiality obligations.

5.3 Legal Requirements

We may disclose information when required by law, regulation, legal process, or governmental request; to enforce our Terms of Service or protect our legal rights; to protect the safety, rights, or property of our clients or the public; or in connection with an investigation of suspected or actual illegal activity.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor entity. We will provide notice of any such transfer and any material changes to privacy practices in accordance with this Privacy Policy.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to provide our services, to comply with applicable legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Specific retention periods include:

• Client engagement records and project files: seven (7) years following the conclusion of the engagement, in accordance with applicable legal and tax retention requirements.
• Billing and financial records: seven (7) years in accordance with applicable accounting and tax regulations.
• Inquiry and correspondence records: three (3) years from the date of the last communication.
• Website analytics data: typically aggregated and retained for no more than twenty-six (26) months.
• Employee and contractor records: as required by applicable employment law.

Upon expiration of the applicable retention period, personal information will be securely deleted or anonymized so that it can no longer be linked to a specific individual.

7. Data Security

Draviont Advisory takes the security of your personal information seriously and implements appropriate technical and organizational measures to protect it against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption of data in transit using industry-standard TLS/SSL protocols.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Access controls limiting access to personal information to authorized personnel on a need-to-know basis.
• Regular security assessments and reviews of our data handling practices.
• Employee training on data protection and information security.
• Contractual security requirements for third-party service providers.

While we take significant steps to protect your information, no security system is impenetrable. We cannot guarantee the absolute security of your information. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

8. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and collect usage information. Cookies are small data files stored on your device when you visit a website.

Types of Cookies We May Use

• Essential Cookies: Required for the website to function properly. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous aggregated data.
• Preference Cookies: Remember your preferences and settings to provide a more personalized experience.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, accept only certain types of cookies, or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.

9. Your Privacy Rights

Subject to applicable law, you may have the following rights with respect to your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Restriction: You may request that we restrict the processing of your personal information in certain circumstances.
• Right to Data Portability: Where applicable, you may request a copy of your personal information in a structured, machine-readable format.
• Right to Object: You may object to certain types of processing, including processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the information provided at the end of this Privacy Policy. We will respond to your request within thirty (30) days. We may request verification of your identity before processing your request.

10. Children's Privacy

Our services are directed exclusively to business professionals and organizations. We do not knowingly collect personal information from individuals under the age of eighteen (18). If we become aware that we have inadvertently collected personal information from a minor, we will promptly delete such information. If you believe we have collected information from a minor, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites, tools, or resources. These links are provided for convenience only. Draviont Advisory is not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

12. California Residents — CCPA Notice

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights include the right to know about the categories of personal information collected about you, the right to delete personal information collected from you, the right to opt-out of the sale of personal information (we do not sell personal information), the right to non-discrimination for exercising your privacy rights, and the right to limit the use and disclosure of sensitive personal information.

To exercise your California privacy rights, please contact us using the information provided at the end of this Privacy Policy. We will respond to verifiable consumer requests within forty-five (45) days.

13. International Users

Draviont Advisory is based in the United States. If you are located outside of the United States, please be aware that the information you provide to us will be transferred to, processed, and stored in the United States. US data protection laws may differ from the laws in your country of residence. By using our services, you consent to this transfer and processing. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, provide you with additional notice. Your continued use of our services following any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

15. Contact Us