Privacy policy
Last updated: March 12, 2026
This policy explains what Auzimuth Group LLC collects when you use this website or talk to us about an engagement, why we collect it, and what you can ask us to do about it.
It covers our own marketing and business operations. Data we process inside a client's systems on their behalf is governed by the agreement with that client, not by this policy.
1. What we collect
1.1 What you send us. If you fill in the contact form, we receive your name, work email, company, optional job title, and whatever you write in the message field.
1.2 What your browser sends. Standard request data — IP address, user agent, referring page, and pages viewed. We use it to understand which parts of the site are useful and to keep the site available.
1.3 What we don't collect. We don't run advertising trackers, we don't sell data, and we don't build profiles of you for anyone else's benefit.
2. Why we use it
2.1 To reply to you. The contact form exists so a person can get back to you. That's its only purpose.
2.2 To improve the site. Aggregate analytics tell us which pages people actually read. We look at patterns, not individuals.
2.3 To meet our obligations. We keep records where accounting, tax, or contractual obligations require it.
3. Legal bases
3.1 Legitimate interests. Running and securing a business website, and responding to enquiries from prospective clients.
3.2 Contract. Where processing is necessary to negotiate or perform an agreement with you or your organisation.
3.3 Consent. Where we ask for it — you can withdraw it at any time without affecting processing already carried out.
4. Sharing
4.1 Service providers. We use a small number of processors for hosting, analytics, and email. They act on our instructions and are bound by written terms.
4.2 Legal requests. We disclose data when legally compelled, and we tell the affected person where we're permitted to.
4.3 Business transfers. If the business is acquired, data may transfer as part of it, subject to this policy.
5. Retention
5.1 Enquiries. Contact form submissions are kept for 24 months from last contact, then deleted.
5.2 Analytics. Aggregate usage data is retained for 14 months.
6. Security
6.1 Controls. Encryption in transit and at rest, least-privilege access, audit logging, and annual independent testing. Our SOC 2 Type II report is available under NDA.
6.2 Incidents. If a breach affects your data, we'll notify you and any required regulator within the timeframes the law sets.
7. Your rights
7.1 Access and correction. You can ask what we hold about you and have inaccuracies fixed.
7.2 Deletion and objection. You can ask us to delete your data or to stop processing it, subject to obligations that require us to keep certain records.
7.3 How to ask. Email tomot20t@gmail.com. We respond within 30 days, and we don't charge for it.
8. International transfers
8.1 Where data sits. Our infrastructure is hosted in the United States. Where data moves from another region, we rely on standard contractual clauses or an equivalent safeguard.
9. Changes and contact
9.1 Updates. We'll post revisions here with a new date. Material changes get a clearer notice than a date change.
9.2 Contact. Write to tomot20t@gmail.com with anything this policy doesn't answer.