Privacy Policy

Last updated: 16 September 2026

This policy explains what personal data are collected through consultingeverest.com, what they are used for, who they are shared with and what you can do about it. It is written to be understood: if something is unclear, write to us and we will clarify it.

1. Who processes your data

The controller is Consulting Everest LLC, based in Albuquerque, New Mexico (United States), a company that provides consulting, audit and software development services in Europe and the United States.

The contact channel for any matter relating to your data is info@consultingeverest.com. It is the same address through which the rights described below are exercised, and requests received there are handled.

2. What data we collect

Only what you give us and the minimum generated by submitting the form. There is no user registration, no profiling, no purchases, and no analytics or advertising tools on this site.

Contact form: name, and email address or telephone number — either is enough — together with the message you write and consent to this policy.
Technical submission data: the IP address from which the form is sent, the page language and the date. They are recorded in order to limit automated submissions and stop junk mail.

We do not ask for or want special-category data — health, ideology, trade-union membership and the like. Please do not include them in the message. You also do not need to send confidential company documentation for a first conversation.

3. Why we use them and on what legal basis

To answer your enquiry and prepare a quotation. Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
To stay in contact during a commercial relationship and to respond to what follows. Legal basis: performance of a contract, if one is entered into (Art. 6(1)(b)).
To protect the form from automated abuse. Legal basis: legitimate interest in keeping an open contact channel usable (Art. 6(1)(f)).

We do not take automated decisions that affect you, and we will not send you commercial communications you have not asked for.

4. How long they are kept

Enquiries that do not lead to a contract: for as long as needed to handle them and then for up to one year, in case you resume the conversation. After that they are deleted.
Contractual relationships: for the duration of the relationship and thereafter for the applicable statutory limitation and tax and accounting retention periods.
Technical submission logs: for the time strictly necessary for abuse control.

5. Who else sees them

We do not sell, rent or disclose personal data to third parties for their own purposes. We do work with providers who process them on our behalf and under our instructions, under a processing agreement:

The hosting and local mail provider for the site.
Where applicable, professional advisers and administrative service providers bound by confidentiality.

Data may also be disclosed to public authorities where there is a legal obligation.

6. International transfers

The owner operates in Europe and the United States, and hosting or mail may involve processing outside the European Economic Area. Where that happens, the transfer relies on one of the safeguards in Chapter V GDPR: an adequacy decision of the European Commission, standard contractual clauses, or the applicable adequacy framework for the destination country.

You may request information on the specific safeguards applied by writing to the email address above.

7. Your rights

You may exercise at any time, free of charge, the rights of access, rectification, erasure, objection, restriction of processing and portability, and you may withdraw consent you have given, without affecting the lawfulness of processing already carried out.

To do so, write to info@consultingeverest.com stating which right you wish to exercise. We may ask you to prove your identity, solely to prevent a third party from accessing your data by impersonating you.

If you consider that we have not handled your request properly, you have the right to lodge a complaint with the competent supervisory authority in your country of residence.

8. If you live in the United States

Regardless of the state in which you live, and on the terms recognised by the law that applies to you, you may ask what personal data of yours we hold, ask us to correct or delete them, and object to them being shared.

We do not sell personal data. Nobody pays us for them and we do not disclose them in exchange for anything. This site does not carry out cross-context advertising or share visit identifiers with advertising networks.

We also do not discriminate against anyone for exercising their rights.

9. Security

The site is served encrypted, access to the data is limited to those who need it to handle your request, and reasonable technical and organisational measures are applied to protect them. No system is infallible: if a breach occurs that may pose a risk to your rights, it will be notified as provided by law.

10. Minors

The site is aimed at businesses and professionals. It is not intended for minors and we do not knowingly collect data from minors. If you believe we have received a minor’s data, write to us and we will delete them.

11. Changes to this policy

This policy may be updated if the processing or the law changes. The current version is always the one published on this page, with its update date. If a change is material and affects you, notice will be given by a visible means on the site itself.