1. Overview
This Privacy Policy describes how EVECS, LLC ("evecs," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our websites (including www.evecs.com and related subdomains such as staff.evecs.com), contact forms, tools we host, consulting engagements, and related online services (collectively, the "Services").
By accessing or using the Services, you acknowledge this Privacy Policy. If you do not agree, please do not use the Services. If you use the Services on behalf of an organization, you represent that you are authorized to accept this policy on that organization's behalf.
Core principles. We aim to collect only what we need to operate our business and deliver consulting work; to be transparent about our practices; to protect information you share with us; and to give you meaningful choices where applicable. We do not sell personal information for money or other valuable consideration as described in Section 6.
2. Scope
This policy applies to personal information we process as a business operating the Services.
- Website visitors and prospective clients. People who browse our sites, submit a contact form, email or call us, download materials, or use hosted tools.
- Clients and engagement contacts. People we work with in consulting, advisory, or related commercial engagements, including billing and project contacts.
- Third-party services. The Services may link to or integrate with third-party products (for example, payment processors or analytics tools). Those parties' privacy practices are governed by their own policies. We encourage you to review them.
Separate written agreements with clients (for example, a statement of work or confidentiality agreement) may impose additional obligations on how we handle project materials. Where those agreements conflict with this policy on a specific engagement, the agreement controls for that engagement to the extent permitted by law.
3. Information we collect
We collect information in three main ways: you provide it, we collect it automatically, and we receive it from others.
3.1 Information you provide
- Contact and inquiry data, such as name, email address, phone number, company, role, and the content of messages you send through our contact form, email, or other channels.
- Client and commercial data, such as billing contacts, invoicing details, tax identifiers where required, engagement scope, and related business correspondence needed to deliver consulting work.
- Billing and payment data. When you pay us, card numbers and other sensitive payment credentials are collected and processed by Stripe via Stripe-hosted Checkout or related Stripe payment services. We typically receive tokens, last-four digits, card brand, billing status, and similar limited payment metadata rather than full card numbers.
- Project materials you or your organization choose to share with us for an engagement (for example, business data, documents, or credentials needed to perform scoped work). We treat these as confidential business information subject to our engagement terms.
- Surveys and events: information you choose to provide in research, waitlists, webinars, or marketing forms.
3.2 Information collected automatically
- Device and log data: IP address, browser type and version, operating system, device identifiers, language, referring URLs, pages viewed, timestamps, request paths, and diagnostic or error logs.
- Usage and performance data: interactions with our sites and tools, latency and reliability metrics, and similar telemetry that help us operate and improve the Services.
- Security and bot-protection signals: when you submit forms, we may use Cloudflare Turnstile or similar challenges. Those services process technical signals needed to distinguish humans from automated abuse.
- Cookies and similar technologies: as described in Section 7.
- Approximate location: derived from IP address or similar signals (for example, city- or region-level), used for security, localization, analytics, and compliance.
3.3 Information from third parties
- Payment processors. From Stripe: confirmation of payment status, customer and billing identifiers Stripe shares with us, limited payment method metadata, receipts, refunds, and fraud-prevention or risk signals.
- Infrastructure and security providers: technical and operational data from our hosting and edge providers (primarily Cloudflare) as needed to deliver, protect, and measure the Services.
- Referrers, partners, and advertising platforms: campaign or referral parameters, conversion events, and similar marketing attribution data where you interact with our ads or partner links.
- Public or commercial sources: limited business contact information from publicly available sources or reputable data providers when we conduct B2B outreach, where permitted by law.
4. How we use information
We use personal information for the following purposes:
- Respond to inquiries and deliver consulting work: reply to contact form submissions; schedule discussions; perform engagements; and communicate about project status, deliverables, and support.
- Operate and improve the Services: host and maintain our websites and tools; diagnose bugs; measure performance; and design clearer content and experiences. We may use aggregated or de-identified insights for improvement.
- Process payments and manage billing: accept fees through Stripe; issue invoices and receipts; handle refunds; and maintain accounting records.
- Secure the Services and combat abuse: detect, prevent, and respond to fraud, spam, unauthorized access, and other harmful or illegal activity; enforce our terms; and protect evecs, our clients, and the public.
- Communicate with you: service notices, security alerts, administrative messages, and, where permitted, marketing communications. Transactional email related to the website contact form is sent via Cloudflare Email Sending (or a successor provider we configure). You may opt out of marketing emails as described in Section 12.
- Personalize and measure experiences: remember preferences, measure campaigns, attribute referrals, and understand how marketing channels perform (including cookies and analytics technologies described below).
- Comply with law and protect rights: meet legal, tax, accounting, and regulatory obligations; respond to lawful requests; establish, exercise, or defend legal claims; and enforce our agreements.
- Business operations: analytics, planning, audits, corporate transactions (see Section 6), and other legitimate business purposes consistent with this policy.
Where required by applicable law (for example, in the EEA/UK), we rely on one or more legal bases such as performance of a contract, legitimate interests (balanced against your rights), consent where we request it, and legal obligation.
6. Sale of personal data and business transfers
We do not sell personal information. We do not sell, rent, or lease your personal information to third parties for their independent marketing or commercial exploitation. We also do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) for cross-context behavioral advertising for monetary or other valuable consideration, except to the limited extent that certain advertising or analytics cookies could be interpreted as "sharing" under some state laws, in which case we will honor applicable opt-out mechanisms and disclosures as we implement them.
Business transfers and change of control. We may sell, transfer, or otherwise dispose of some or all of our business or assets, including a sale of the evecs business, a sale or transfer of all or substantially all assets of EVECS, LLC, or a merger, acquisition, financing, reorganization, or bankruptcy involving EVECS, LLC. In those transactions, personal information associated with the Services and our client relationships may be among the assets transferred to the acquirer or successor, subject to appropriate confidentiality and continued use consistent with this Privacy Policy (or a successor policy providing at least comparable protections, with notice where required by law). If a transfer would materially change how your personal information is processed in a way that is less protective, we will provide notice and any choices required by applicable law.
This section is intended to make clear that while we do not sell user data as a product, a future sale or transfer of the evecs business and/or EVECS, LLC (or its assets) may include the personal information we hold as part of operating the business.
8. Analytics
We use analytics to understand how the Services are used, improve performance, and inform product and marketing decisions.
- Cloudflare (platform and analytics). We run evecs on Cloudflare's infrastructure (including Workers, edge delivery, and related Cloudflare products) and we use Cloudflare Analytics and related platform telemetry. Cloudflare may process technical and operational data (such as request metadata, IP address, and performance metrics) as needed to provide those services, in accordance with Cloudflare's privacy commitments and our configuration. Learn more at Cloudflare's Privacy Policy and Cloudflare's Trust Hub.
- Google Analytics (optional / future). We may use Google Analytics (including Google Analytics 4 or successor Google measurement products) to collect usage statistics via cookies or similar technologies. If we enable Google Analytics, Google may process data as described in Google's Privacy Policy and related Google Analytics documentation. You may be able to use Google's opt-out browser add-on or other controls Google provides. We may also configure available privacy controls (such as IP anonymization or limited data retention) where appropriate.
- First-party usage analytics. We may also collect first-party site or tool analytics on our own systems to understand feature use and reliability.
Analytics providers act as service providers / processors for these purposes, subject to their terms. Analytics data is used for measurement, troubleshooting, security, and improving the Services, not for selling your personal information.
9. Retention
We retain personal information for as long as reasonably necessary to provide the Services, complete engagements, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business needs (including security and backups). Retention periods vary by data type:
- Contact form and inquiry records: for a reasonable period needed to respond, follow up, and maintain business records, then deleted or de-identified unless a longer retention is required.
- Client and engagement records: for the life of the relationship and a reasonable period afterward for backup, audit, tax, and legal purposes.
- Logs and security records: for periods appropriate to security investigation and operational analysis.
- Billing records: as required by tax and accounting rules.
When information is no longer needed, we delete or de-identify it, except where retention is required or permitted by law.
10. Security
We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. Measures may include encryption in transit, access controls, form abuse protection (such as Turnstile), logging, and infrastructure hardening on Cloudflare.
No method of transmission or storage is 100% secure. We cannot guarantee absolute security. Please notify us promptly of suspected unauthorized access or misuse at info@evecs.com.
11. International transfers
EVECS, LLC is based in the United States. The Services are operated primarily on Cloudflare's global network. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate (including edge locations used to deliver the Services). Those jurisdictions may have data protection laws different from those in your country.
Where required, we use appropriate safeguards for cross-border transfers (such as standard contractual clauses or other lawful transfer mechanisms) with relevant vendors.
12. Your choices and rights
12.1 Marketing and cookie choices
- Marketing emails. You can opt out of promotional emails via the unsubscribe link in those messages when we send them. Operational, security, and transactional messages are not marketing and may still be sent.
- Cookies and analytics. See Sections 7 and 8 for browser and provider controls, including Google Analytics opt-out tools where available.
12.2 Privacy rights
Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, or objection to certain processing, or to withdraw consent where processing is consent-based. California and other U.S. state residents may have additional rights to know, delete, correct, and opt out of sale/share of personal information, and not to be discriminated against for exercising those rights.
To exercise applicable rights, contact us at info@evecs.com. We may need to verify your identity and, if you act on behalf of another person or organization, your authority. Some requests may be limited by law or by our need to retain information for security, fraud prevention, legal compliance, or contractual reasons.
EEA/UK individuals may lodge a complaint with their local supervisory authority. We encourage you to contact us first so we can try to resolve your concern.
13. Children's privacy
The Services are designed for businesses, professionals, and adult individuals. They are not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 where a higher age is required by local law for consent-based processing).
If you believe a child has provided us personal information, contact info@evecs.com and we will take appropriate steps to delete the information.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last modified" date at the top and, for material changes, provide additional notice as required by law (for example, by email or a prominent notice on our website). Continued use of the Services after an updated policy becomes effective constitutes acceptance of the updated policy to the extent permitted by law. If you do not agree, you should stop using the Services.
15. Contact us
For privacy questions, requests, or concerns, contact: