Privacy Policy

Introduction

Palo Colorado Software, LLC (operating as Palo Colorado, based at 6345 Pinehaven Rd, Oakland, California 94611-1242, United States) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://www.palocolorado.lol or engage our services.

This website and the services described on it are developed and operated by Palo Colorado Software, LLC, the developer of this platform. Please read this policy carefully to understand our views and practices regarding your personal data and how we handle it.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide to us when you interact with our website or communicate with us directly. This includes:

• Contact details such as your full name, email address, telephone number, and company name when you submit our contact form or send us an email
• Project information including technical requirements, system descriptions, and any other details you share during initial consultations or ongoing engagements
• Billing and payment information necessary for processing transactions and maintaining our business relationship, handled through secure payment processors
• Correspondence including any emails, messages, or documents you exchange with our team in the course of communicating about our services

Information Collected Automatically

When you visit our website, we automatically collect certain technical information to ensure the site functions properly and to understand how it is being used:

• Device and browser data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and device identifiers
• Usage data: Information about how you use our website, including pages viewed, page response times, download errors, length of visits, and page interaction data
• Cookie data: As described in the Cookies section below

How We Use Your Information

We use the personal data we collect for the following purposes. Each purpose is tied to a specific business need and your data is never used for anything beyond what is described here:

• To respond to your enquiries and provide the information or services you request from us
• To carry out our obligations arising from any contracts entered into between you or your organisation and Palo Colorado Software, LLC
• To provide, maintain, and improve our systems design and integration services
• To communicate with you about changes to our services, terms, or policies
• To ensure the security of our website and IT infrastructure
• To comply with legal and regulatory obligations applicable to our business operations
• To analyse and improve the performance and user experience of our website
• To detect, prevent, and address technical issues, fraud, or misuse of our platform

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our lawful bases for processing your personal data include:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as when you submit our contact form
• Contractual necessity: Where processing is necessary for the performance of a contract with you or your organisation
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms. Our legitimate interests include operating and improving our services, communicating with clients and prospects, and maintaining the security of our systems
• Legal obligation: Where we are required to process your data to comply with applicable laws and regulations

Data Sharing and Disclosure

We take your privacy seriously. We do not sell, trade, or rent your personal data to third parties. There is no circumstance under which we would sell your information, and that is not part of our business model now or in the future.

We may share your information in the following limited circumstances:

• Service providers: We engage trusted third-party service providers who assist us in operating our website and running our business. These include email delivery services, web analytics providers, and payment processors. Every provider is contractually obligated to keep your information confidential and may only process it in accordance with our instructions
• Legal compliance: If we are under a duty to disclose or share your personal data to comply with any legal or regulatory obligation, or to protect the rights, property, or safety of Palo Colorado Software, LLC, our clients, or others
• Business transfers: In connection with any merger, acquisition, or sale of assets, we may transfer your personal data to the acquiring entity, with notice provided to you
• With your consent: We may share your information for any other purpose with your explicit consent

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users, improve your browsing experience, and analyse website traffic to help us make the site better.

Cookies are small text files stored on your device by your web browser. We use the following categories of cookies:

• Essential cookies: Required for the website to function properly. These enable core functionality such as security, network management, and accessibility. These cannot be turned off without affecting how the site works
• Analytics cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve the site and prioritise features
• Functional cookies: Used to recognise you when you return to our website and remember your preferences, making your experience more personalised

You can control cookie preferences through your browser settings. Please note that blocking certain categories of cookies may affect the functionality of our website. For more detailed information about cookies and how to manage them, visit aboutcookies.org.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security practices include:

• Encryption of data in transit using TLS/SSL protocols across our entire website
• Secure server infrastructure with restricted access controls and authentication requirements
• Regular security assessments, vulnerability testing, and software updates
• Staff training on data protection principles and confidentiality obligations
• Strict access controls limiting data access to personnel who need it for their role

While we take these reasonable precautions, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data. We will honour these rights regardless of where you are located.

Under the GDPR (EEA and UK residents)

• Right of access: You have the right to request a copy of the personal data we hold about you, free of charge
• Right to rectification: You have the right to request correction of inaccurate or incomplete data
• Right to erasure: You have the right to request deletion of your personal data where there is no compelling reason for its continued processing
• Right to restrict processing: You have the right to request restriction of processing in certain circumstances
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format
• Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal

Under the CCPA (California residents)

• Right to know: You have the right to request disclosure of the categories and specific pieces of personal data we have collected about you
• Right to delete: You have the right to request deletion of personal data we have collected from you, subject to certain exceptions
• Right to opt-out: You have the right to opt out of the sale of your personal data. We do not sell personal data
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights

Childrens Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental consent, please contact us immediately, and we will take steps to remove that information and terminate any related records.

International Data Transfers

As a California-based company serving clients across the United States and occasionally internationally, your personal data may be transferred to, stored in, and processed in jurisdictions outside your state or country of residence. These jurisdictions may have data protection laws that differ from those in your home jurisdiction.

When we transfer your personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission where applicable
• Adequacy decisions recognising equivalent levels of data protection
• Data processing agreements that require the recipient to maintain the same level of protection

By submitting your personal data, you agree to this transfer, storing, and processing. We will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy.

Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices, content, or security. We encourage you to read the privacy policy of every website you visit.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.

In general, we retain contact form submissions and related correspondence for up to 24 months after the last communication between us, unless a longer retention period is required by law or a contractual obligation necessitates extended retention. If you become a client, data retention periods are defined in your service agreement.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or industry standards. We will notify you of any material changes by posting the updated policy on this page with a revised last updated date. For significant changes, we may also notify you through a notice on our website or by email if we have your contact information.

We encourage you to review this policy periodically for the latest information on our privacy practices. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us:

We aim to respond to all legitimate enquiries within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with your local data protection authority or, if you are in California, with the California Attorney General.