Privacy Policy

1. Introduction

Calafia Group, LLC ("Calafia," "we," "us," or "our") respects your privacy and is committed to protecting the personal data we collect. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website calafiagroup.com and affiliated sites (collectively, the "Site").

This policy applies to residents of all jurisdictions, including the European Economic Area ("EEA"), United Kingdom ("UK"), and the State of California, and complies with the General Data Protection Regulation ("GDPR"), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA").

2. Information We Collect

Information you provide directly:

• Name, email address, phone number, and company affiliation when you submit a contact form or request an introduction
• Any additional information you voluntarily include in messages or correspondence

Information collected automatically:

• IP address, browser type, operating system, referring URL, and pages visited
• Device identifiers and general geolocation data (country/region level)
• Cookies and similar tracking technologies (see Section 8)

3. Legal Basis for Processing (GDPR)

For individuals in the EEA and UK, we process personal data under the following legal bases:

• Consent: Where you have given explicit consent for a specific purpose (e.g., subscribing to communications)
• Legitimate Interest: To operate our business, respond to inquiries, improve our services, and ensure website security
• Contractual Necessity: To perform a contract or take steps at your request before entering into a contract
• Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and facilitate introductions
• Send relevant communications about our platform and services (with your consent)
• Analyze website usage to improve functionality and user experience
• Comply with legal obligations and protect our legitimate business interests
• Prevent fraud and ensure the security of our systems

5. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share information with:

• Service providers: Third parties that perform services on our behalf (e.g., website hosting, email delivery, analytics)
• Affiliates: Calafia Group entities for internal business purposes, subject to this Privacy Policy
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights Under GDPR (EEA & UK Residents)

If you are located in the EEA or UK, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local supervisory authority

To exercise these rights, contact us at privacy@calafiagroup.com. We will respond within 30 days.

7. Your Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of personal information we have collected
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information beyond what is necessary for the purposes disclosed
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@calafiagroup.com or submit a request through our contact form. We will verify your identity and respond within 45 days.

Categories of personal information collected in the preceding 12 months: Identifiers (name, email, IP address); Internet activity (browsing history on our Site); Professional information (company, title). We have not sold personal information in the preceding 12 months.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to analyze Site traffic and optimize your experience. You can control cookie preferences through your browser settings or our cookie consent banner.

Essential cookies: Required for basic Site functionality. Cannot be disabled.

Analytics cookies: Help us understand how visitors use our Site. Deployed only with your consent where required by law.

We do not use advertising or third-party tracking cookies.

9. International Data Transfers

If you are located in the EEA or UK, your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

10. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Contact form submissions are retained for up to 24 months unless you request earlier deletion.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via a notice on our Site.

14. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights:

Calafia Group, LLC
Email: privacy@calafiagroup.com
Dallas, Texas, United States

For EEA/UK inquiries, you may also contact your local data protection authority.