Privacy Policy

Who is responsible

The controller is Altiora Group LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA (mailing address). Contact for any privacy question: info@consultingaltiora.com.

What we collect

• Contact form: your name, email address, the topic you choose and your message. We ask you not to include passwords, financial details, health data or confidential documents.
• Emails you send to info@consultingaltiora.com: the content of the email and its technical headers.
• Server logs: when you load a page or submit the form, the web server records technical data such as IP address, date and time, requested address, browser user agent and response code. The mail server records similar technical data for each message it handles.
• Rate limiting: to slow down abuse of the form, the server keeps a salted hash of your IP address (for IPv6, of its network prefix) together with the time of each submission that passes validation. A hash with a salt is pseudonymous data, not anonymous data.
• Language preference: if you click the language switch, your browser stores your choice locally. It is not sent to us. See the Cookies and storage page.

Why we use it

• To read and answer your inquiry and, if you ask for it, to prepare a proposal.
• To keep the website and the mail system secure and working, and to prevent spam and abuse of the form.
• To keep records needed for an engagement you agree with us, or to meet a legal obligation.

Where data protection law such as the EU or UK GDPR applies, our legal bases are: steps you ask us to take before a possible contract (answering your inquiry), the performance of a contract once agreed, our legitimate interest in running a secure website and replying to business messages, and compliance with legal obligations. We do not use your data for automated decision-making or profiling, and we do not add you to any newsletter.

Who is involved

• Hosting: the website and the email for consultingaltiora.com run on a server managed for us by AMAI (our website and hosting provider) with HestiaCP, located in a data center of Hetzner Online GmbH in Germany (European Union).
• Email: messages from the form are delivered by the PHP mail function of that same server to the info@consultingaltiora.com mailbox on that server (Exim and Dovecot). No external form or email service is used.
• People at Altiora Group LLC who handle inquiries, and the server administrators at AMAI when maintenance requires it.

The website loads no analytics, advertising pixels, social media plugins, maps, videos or other third-party embeds. Fonts are served from our own server. We do not sell personal information and we do not share it for advertising.

International transfers

The server is in Germany. Altiora Group LLC is a United States company, so your message may be read and answered from the United States or other countries outside the European Union. We do not claim that a specific transfer mechanism, such as standard contractual clauses or a certification framework, is in place. If you have concerns about this, please contact us before sending personal data.

How long we keep it

• Form messages and emails stay in the info@consultingaltiora.com mailbox until Altiora Group LLC deletes them; there is no automatic deletion. We keep them as long as needed to answer your inquiry and follow up, delete inquiries that do not lead to an engagement when they are no longer needed, and you can ask us to delete yours at any time. After deletion, a copy can remain in the latest daily server backup until that backup is replaced (about one day).
• Web server logs (nginx and Apache): rotated weekly; the last 4 weekly files are kept, so an entry is deleted after about 4–5 weeks.
• Mail server logs: the Exim main log is rotated daily and the last 10 days are kept; the mail and Dovecot logs are rotated weekly and the last 4 weeks are kept.
• Backups: one full backup of the hosting account (website, mailbox and form-protection data) is made every day at about 05:10 on the same server in Germany; only the most recent backup is kept, and it is replaced by the next day's backup.
• Rate-limit entries: each entry expires one hour after the submission it records. Expired entries are removed the next time anyone submits the form, so an entry can remain on disk past one hour until that next submission.
• Language preference: in your browser until you clear it.

Your rights

Depending on the law that applies to you, you may ask us for access to your data, correction, deletion, restriction or objection to processing, and a copy of data you provided in a portable format. Residents of some US states have similar rights to know, delete and correct personal information, and to not be discriminated against for using them. Write to info@consultingaltiora.com; we may need to confirm your identity before acting. If you are in the EU or UK, you can also complain to your data protection authority.

Security

The site is served over HTTPS. Access to the server and mailbox is restricted. No method of transmission or storage is completely secure, which is why we ask you not to send sensitive information through the form.

Children

This website is for businesses and is not directed at children.

Changes

If the website starts using another tool or provider, this policy will be updated before that change goes live. The date at the top of this page shows the latest version.