Privacy Policy

We process personal and telemetry data only where permitted under applicable data protection laws (including EU/UK GDPR, California CCPA/CPRA, and global equivalents) under the legal bases of contractual necessity, legitimate business interests, and legal compliance:

• Inquiry & Consultation Details: Name, professional corporate email, phone number, company name, project specifications, and communications submitted through our contact and consultation scheduling interfaces.
• Technical System Telemetry: Anonymized server logs, browser user-agents, IP addresses, network routing information, and session timestamps collected automatically for the legitimate interest of network defense, DDoS mitigation, and system availability.
• Engineering Engagement Credentials: Access keys, version control tokens, and cloud infrastructure credentials provided under signed Non-Disclosure Agreements (NDAs), encrypted at rest and in transit.

Information collected by Empire Dots is utilized strictly for defined, legitimate purposes:

• Fulfilling contracted engineering deliverables, Sprint 0 scoping blueprints, and consulting milestones.
• Scheduling discovery workshops, technical demos, and communicating critical service advisories.
• Protecting digital assets against unauthorized intrusion, cyber attacks, fraud, and intellectual property theft.
• Complying with statutory, tax, export control, and regulatory audit mandates.

In accordance with our strict intellectual property protocols and contractual standards:

• Zero Foundational Model Training: Client proprietary source code, private datasets, schema designs, internal embeddings, and API responses are NEVER utilized to train, retrain, or fine-tune public or third-party foundational machine learning models.
• Client Repository Isolation: All commits, Infrastructure as Code (IaC) manifests, and technical documentation reside exclusively within client-controlled private version repositories.
• Segregated Preview Sandboxes: Ephemeral staging containers and sandbox databases operate under strict Role-Based Access Control (RBAC) and are scrubbed upon sprint acceptance.

Empire Dots does not sell or lease personal information. We may disclose data only under rigorous legal and security guardrails to:

• Vetted Infrastructure Sub-Processors: Tier-1 cloud infrastructure and hosting providers (e.g., AWS, Cloudflare) operating under verified Data Processing Agreements (DPAs) with standard contractual clauses.
• Legal & Regulatory Authorities: Where strictly required by a court of competent jurisdiction, subpoena, or applicable statutory warrant, after giving notice to affected parties where legally permitted.
• Corporate Restructuring: In the event of a merger, acquisition, or asset transfer, subject to the acquiring entity assuming identical confidentiality protections.

We maintain industry-standard physical, organizational, and technological safeguards to protect personal data from accidental loss, unauthorized access, alteration, and disclosure:

• Cryptographic Controls: Mandatory TLS 1.3 encryption in transit and AES-256 encryption at rest for sensitive data repositories.
• Zero-Trust Access: Hardware-token Multi-Factor Authentication (MFA), least-privilege role separation, and automated access revocation upon project milestone completion.
• Audit Logging & Intrusion Detection: Comprehensive audit logs tracking administrative activities, backed by automated anomaly detection.

Notice of Inherent Risk: While we implement state-of-the-art security, no method of electronic transmission over the internet or cloud storage is 100% impervious to breach; consequently, we cannot guarantee absolute security against all unforeseen zero-day events.

Personal data is retained only for the duration necessary to satisfy the purposes for which it was gathered, including fulfilling contractual engineering milestones, resolving disputes, and adhering to statutory retention requirements (such as financial audit logs).

Upon expiration of applicable retention windows or upon verified client request, personal data and staging credentials are permanently expunged or anonymized using secure electronic destruction standards.

Depending on your jurisdiction, you possess statutory rights concerning your personal data, including the right to:

• Access & Portability: Request confirmation of processing and obtain a portable copy of personal information held by Empire Dots.
• Rectification: Request correction of inaccurate, incomplete, or obsolete personal data.
• Erasure & Restriction: Request deletion ("Right to be Forgotten") or restriction of data processing, subject to overriding statutory compliance obligations.
• Opt-Out: Exercise rights to opt-out of non-essential data processing or lodge a complaint with your competent supervisory data protection authority.

To exercise any statutory data subject right, submit a verified request to our privacy desk:

Empire Dots Global reserves the unrestricted right to modify, amend, update, or replace this Privacy Policy at any time, at its sole discretion, to accommodate technological developments, legal interpretations, or business workflow enhancements.

Any revisions become effective immediately upon posting to this URL, evidenced by the updated "Effective Date" at the top of this document. Continued interaction with our websites, software portals, or services after updates are posted constitutes your explicit acknowledgment and acceptance of the revised Privacy Policy.