Privacy Policy

Effective Date: December 28, 2025

NOTE: This Privacy Policy is provided for informational purposes. We recommend having a qualified attorney review this policy to ensure compliance with all applicable laws and regulations in your jurisdiction.

1. Introduction

IVYSH Consulting ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (ivysh.com) and use our services.

By accessing or using our website, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the website.

2. Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you voluntarily provide to us when you:

Fill out our contact form (name, email address, phone number)
Subscribe to our newsletter or mailing list
Request information about our advisory services
Communicate with us via email or other channels
Engage our consulting services

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

IP address and browser type
Device information and operating system
Pages visited and time spent on pages
Referring website addresses
Cookies and similar tracking technologies

3. How We Use Your Information

We may use the information we collect for purposes including:

Responding to your inquiries and providing requested information
Delivering our advisory and consulting services
Sending administrative information, updates, and marketing communications (with your consent)
Improving our website and services
Analyzing usage patterns and trends
Complying with legal obligations

4. Disclosure of Your Information

We may share your information in the following situations:

With service providers who assist in operating our website and delivering services
To comply with legal obligations, court orders, or government requests
To protect our rights, privacy, safety, or property
In connection with a merger, acquisition, or sale of assets
With your consent or at your direction

We do not sell your personal information to third parties.

5. Cookies and Tracking Technologies

We may use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. You can control cookie preferences through your browser settings. Note that disabling cookies may affect website functionality.

We may use the following types of cookies:

Essential Cookies: Required for basic website functionality
Analytics Cookies: Help us understand how visitors interact with our website
Preference Cookies: Remember your settings and preferences

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods include:

Contact form submissions: 3 years from last contact
Marketing communications: Until you unsubscribe
Client engagement records: 7 years after engagement ends (for legal/tax purposes)
Website analytics: 26 months

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

Right to access your personal information
Right to correct inaccurate information
Right to delete your personal information
Right to restrict or object to processing
Right to data portability
Right to withdraw consent

To exercise these rights, please contact us using the information provided below.

8.1 California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected

In the past 12 months, we may have collected the following categories of personal information:

Identifiers: Name, email address, phone number, IP address
Commercial Information: Records of services requested or considered
Internet/Network Activity: Browsing history, interactions with our website
Professional Information: Business contact information, job title, employer
Inferences: Preferences, interests based on website activity

Sources of Personal Information

We collect personal information from:

Directly from you (contact forms, email communications)
Automatically from your device (cookies, analytics)
From third-party business partners (referrals)

Business Purposes for Collection

We collect and use personal information for the following business purposes:

Responding to inquiries and providing requested information
Delivering advisory and consulting services
Marketing and communications (with consent)
Website analytics and improvement
Legal compliance and fraud prevention

Sale or Sharing of Personal Information

IVYSH Consulting does NOT sell your personal information. We do NOT share your personal information for cross-context behavioral advertising purposes.

Your California Privacy Rights

As a California resident, you have the right to:

Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties with whom we share it.
Right to Delete — Request deletion of your personal information, subject to certain exceptions.
Right to Correct — Request correction of inaccurate personal information.
Right to Opt-Out — Opt out of the sale or sharing of your personal information. Note: We do not sell or share your personal information.
Right to Limit Use of Sensitive Personal Information — Limit our use of sensitive personal information to purposes necessary to provide our services.
Right to Non-Discrimination — We will not discriminate against you for exercising any of your privacy rights.

How to Exercise Your Rights

To exercise your California privacy rights, you may:

Email us at: [email protected]
Submit a request through our contact form

We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf by providing written authorization.

Response Timing

We will respond to verifiable consumer requests within 45 days. If we need additional time (up to 90 days total), we will notify you of the reason and extension period.

8.2 European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) and related data protection laws.

Data Controller

IVYSH Consulting is the data controller responsible for your personal data.

Contact information:

IVYSH Consulting
Email: [email protected]

Legal Basis for Processing

We process your personal data only when we have a valid legal basis to do so:

Responding to inquiries: Legitimate interests (providing information you requested)
Providing consulting services: Performance of a contract
Sending marketing communications: Consent (which you may withdraw at any time)
Website analytics: Legitimate interests (improving our services)
Legal compliance: Legal obligation

Legitimate Interests

Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You may request information about this assessment by contacting us.

Your Data Protection Rights

Under the GDPR, you have the following rights:

Right of Access — You have the right to request a copy of the personal data we hold about you.
Right to Rectification — You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten") — You have the right to request deletion of your personal data in certain circumstances.
Right to Restriction of Processing — You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object — You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent — Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Right to Lodge a Complaint — You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law.

International Data Transfers

Your personal data may be transferred to and processed in the United States, where our servers and central database are located. The United States may not have data protection laws equivalent to those in your country.

When we transfer personal data outside the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Transfers to countries with an adequacy decision
Other legally approved transfer mechanisms

You may request a copy of the safeguards we use by contacting us.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, typically:

Contact form submissions: 3 years from last contact
Marketing communications: Until you unsubscribe
Client engagement records: 7 years after engagement ends (for legal/tax purposes)
Website analytics: 26 months

Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of your rights, please contact us at:

Email: [email protected]

We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months, in which case we will notify you.

We may request specific information from you to verify your identity before processing your request.

Supervisory Authority

If you are located in the EEA, you have the right to lodge a complaint with your local data protection authority. A list of EU data protection authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en

If you are located in the United Kingdom, you may contact the Information Commissioner's Office (ICO): https://ico.org.uk/

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at: