Privacy Policy

01

Who we are

CastleBridge CX, LLC is a customer education and content enablement consultancy based in the United States. We operate the website at castlebridgecx.com and any associated pages.

For the purposes of the GDPR, CastleBridge CX, LLC is the data controller for personal information collected through this website.

Questions about this policy can be directed to: info@castlebridgecx.com

02

What information we collect

We collect only the personal information you voluntarily provide when you submit our contact form:

• First and last name
• Company name
• Email address
• Your message (if you choose to include one)

We do not use cookies, tracking pixels, analytics scripts, or any other automated data collection tools on this website. We do not collect IP addresses, browsing history, device identifiers, or any other technical or behavioral data.

The only third-party service that loads on this site is Google Fonts, which serves typeface files from Google's servers. Google's own privacy policy governs any data Google may collect in connection with that service.

03

Why we collect it and our legal basis

We collect contact form submissions for one purpose only: to respond to your inquiry and, if appropriate, to discuss a potential engagement.

Under the GDPR, our lawful basis for processing this information is legitimate interests — specifically, the legitimate interest of responding to business inquiries directed to us. We have assessed that this interest is not overridden by your privacy rights, given the minimal data involved, the direct relevance of our response to your inquiry, and the fact that you chose to contact us.

We do not use your information for marketing, advertising, profiling, automated decision-making, or any purpose beyond responding to your inquiry.

04

How long we keep it

We retain contact form submissions for as long as is reasonably necessary to manage our business relationship with you — typically no longer than three years from the date of your last contact, unless a longer retention period is required by law or ongoing engagement.

You may request deletion at any time (see Section 06 below), and we will delete your information promptly unless we are legally required to retain it.

05

Who we share it with

We do not sell, rent, or share your personal information with any third party for marketing or commercial purposes.

Your information may be accessed by:

• Our email service provider, which processes messages sent to and from info@castlebridgecx.com, solely for the purpose of delivering correspondence.
• Our contact form processor (if applicable), which routes form submissions to our inbox. We use only reputable providers and do not permit them to use your data for any other purpose.

We will disclose personal information if required to do so by law, court order, or lawful request from a government authority.

06

Your rights

Depending on where you are located, you may have some or all of the following rights regarding your personal information:

• Right to access — you can ask us what information we hold about you.
• Right to correction — you can ask us to correct inaccurate information.
• Right to deletion — you can ask us to delete your information.
• Right to object — you can object to our processing of your information.
• Right to data portability — you can ask us to provide your information in a portable format.

These rights apply to residents of the European Union (under the GDPR), the United Kingdom (under the UK GDPR), California (under the CCPA/CPRA), and other jurisdictions with similar laws. Regardless of where you are located, we will honor deletion requests to the best of our ability.

To exercise any of these rights, please contact us at info@castlebridgecx.com. We will respond within 30 days (45 days for CCPA requests). There is no charge for reasonable requests.

We will never discriminate against you for exercising your privacy rights.

07

Do we sell personal information?

No. We do not sell, share for advertising purposes, or otherwise transfer personal information to any third party for commercial gain. This applies to all visitors, including California residents under the CCPA/CPRA.

08

Data security

We take reasonable technical and organizational precautions to protect your personal information against unauthorized access, loss, or misuse. Our website is served over HTTPS. Contact form data is transmitted securely and accessed only by authorized personnel.

No method of electronic transmission or storage is 100% secure. If you have concerns about the security of your information, please contact us.

09

International transfers

CastleBridge CX is based in the United States. If you are located in the European Union or another jurisdiction with data transfer restrictions, please be aware that your personal information will be processed in the United States. By submitting a contact form, you acknowledge this transfer. We handle all data with the same standard of care regardless of origin.

10

Children's privacy

This website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11

Changes to this policy

We will update this policy if our data practices change or if the law requires it. The "Last updated" date at the top of this page will reflect any changes. We recommend reviewing this policy periodically. Continued use of the website after an update constitutes acceptance of the revised policy.

12

Contact us

For any questions, requests, or concerns regarding this policy or your personal information, please contact us: