1. Data We Collect

We collect information in three primary ways: information you choose to provide, information collected automatically, and information shared as part of a consulting engagement.

• Contact and enquiry data: details you submit via forms or email, such as your name, company, role, email address, and a description of your needs.
• Usage and analytics data: technical information collected via cookies and similar tools (for example, pages visited, time on page, device and browser type, and approximate location based on IP address).
• Engagement materials: documents, data exports, and other assets you voluntarily share with us during an engagement so we can perform diagnostic work and implementation.

2. How We Use Your Information

We use the information we collect only for legitimate business purposes, including:

• Responding to enquiries and scheduling discovery or audit conversations.
• Preparing proposals, scopes of work, and architecture recommendations tailored to your company.
• Delivering consulting, implementation, and advisory services as agreed in a contract or statement of work.
• Improving our website, content, and services based on aggregated analytics and feedback.
• Maintaining appropriate business records and complying with applicable legal or regulatory obligations.

3. Cookies and Analytics

Our website may use cookies and similar technologies to understand how visitors use the site and to improve performance.

We use tools such as Google Analytics to generate aggregated statistics about traffic and behaviour. These tools rely on cookies and anonymised identifiers. You can control or delete cookies through your browser settings, and you can use browser add-ons to opt out of certain analytics tracking.

4. How We Share Information

We do not sell your personal information. We may share limited data with:

• Service providers who assist with hosting, analytics, communications, or project delivery and who are bound by appropriate confidentiality and data protection obligations.
• Professional advisors such as legal, financial, or compliance partners, where reasonably necessary for our operations.
• Authorities if required by law, regulation, or a valid legal process, or to protect our rights or the rights and safety of others.

5. Data Retention and Security

We retain information only for as long as it is necessary for the purposes described above, or as required by law. Engagement-related materials are typically stored for the duration of the engagement and a reasonable period afterwards in case of follow-up work or audit requirements.

We use a combination of technical and organisational measures to help protect information from unauthorised access, alteration, or disclosure. No system can be guaranteed to be fully secure, but we work to ensure that appropriate safeguards are in place for the type and sensitivity of data we handle.

6. Your Rights and Choices

Depending on where you are based, you may have rights over your personal information, such as the right to request access, correction, deletion, or restriction of processing.

If you would like to exercise these rights, or if you have questions about how we handle your data, you can contact us at hello@atfro.com. We may need to verify your identity before responding to certain requests.

7. International Transfers

ATFRO works with clients in multiple regions. Your information may be processed in countries that have different data protection standards than your home jurisdiction. Where required, we take steps to ensure that appropriate safeguards are in place for such transfers.

8. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this page periodically.

9. Contact

If you have questions about this Privacy Policy or how ATFRO handles data, please contact us at hello@atfro.com or via the contact form on this website.

This overview is provided for general information only and does not constitute legal advice. You should seek independent legal counsel to review and adapt this policy for your specific circumstances.