Privacy Policy

This Privacy Policy explains how Ignite Consulting LLC collects, uses, discloses, and protects personal data in connection with our website and services. It also describes the rights and choices available to you, including rights under the European Union and United Kingdom General Data Protection Regulation and under California privacy law.

This Privacy Policy works together with our Terms of Service. Where this Privacy Policy uses defined terms that also appear in the Terms of Service, those terms have the same meaning. In the event of any conflict between this Privacy Policy and the Terms of Service regarding the handling of personal data, this Privacy Policy controls on data matters.

1. Who we are and scope

Data controller. Ignite Consulting LLC, a limited liability company formed under the laws of the State of Wyoming, United States ("Ignite," "we," "us," or "our"), is the controller responsible for the personal data described in this Privacy Policy, except where we act as a processor on behalf of a client under a separate written agreement.

What this Policy covers. This Privacy Policy applies to the website at https://www.igniteconsulting.io and all related pages and services that link to this Policy (together, the "Site" or "Services"), and to personal data we collect from visitors to the Site and from people who contact us. It does not cover personal data we process strictly as a processor for a client, which is governed by our agreement with that client and by that client's own privacy notices.

Who this Policy is for. The Site serves visitors in the United States and internationally, including the European Economic Area, the United Kingdom, and China. This Policy is written to address each of these audiences, including data-protection rights that may apply to you depending on where you are located.

2. Categories of personal data we collect

We collect the following categories of personal data, depending on how you interact with the Site:

• Information you submit through forms. Through our current or future contact, inquiry, audit-request, or similar forms, you may provide your name, email address, company or organization name, website, the message or details you choose to include, and any other information you decide to send us.
• Analytics and usage data. When you use the Site, we and our analytics providers (such as Google Analytics) collect information about how you use the Site, including pages viewed, links clicked, referring and exit pages, approximate location derived from IP address, the date and time of your visit, and time spent on pages.
• Device and technical data. Internet protocol (IP) address, browser type and version, operating system, device type, language settings, screen characteristics, and similar technical identifiers.
• Cookies and similar identifiers. Identifiers stored through cookies, local storage, and similar technologies, as described in the section on cookies below.
• Correspondence. The content of any email or other communication you send to us, and our records of that correspondence.
• Future advertising and remarketing identifiers. We do not currently run advertising or remarketing pixels on the Site. If we add them in the future, we may collect advertising identifiers and related data as described in the cookies section, and we will update this Policy accordingly.

We do not intentionally collect special categories of personal data (such as health, biometric, or precise geolocation data) through the Site, and we ask that you do not submit such data through our forms.

3. How and from where we collect data

We collect personal data from the following sources:

• Directly from you, when you complete a form, request an audit, or otherwise contact us.
• Automatically, through cookies, analytics tools, server logs, and similar technologies when you visit and use the Site.
• From service providers, such as our analytics and hosting providers, who collect technical and usage data on our behalf.

4. Purposes of processing

We process personal data for the following purposes:

• To operate, maintain, secure, and improve the Site and Services.
• To respond to your inquiries, requests, and audit requests, and to communicate with you about them.
• To understand how visitors use the Site through analytics, and to improve content, performance, and user experience.
• To deliver and manage the Services to clients, including business and account administration.
• To detect, prevent, and address security incidents, fraud, abuse, and technical issues.
• To comply with legal obligations and to establish, exercise, or defend legal claims.
• With your consent or as otherwise permitted by law, to send marketing communications, and, if we add advertising or remarketing pixels in the future, to measure and improve marketing.

5. GDPR and UK GDPR lawful bases

Where the GDPR or UK GDPR applies, we rely on the following lawful bases under Article 6 of those regulations:

Where we rely on legitimate interests, we have considered and balanced those interests against your rights and freedoms. You may object to processing based on legitimate interests as described in the rights section below. Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

6. We do not sell personal information

Ignite does not sell personal information, and we do not sell or share the personal information of any individual, including any individual under 16 years of age, for monetary or other valuable consideration. We also do not currently "share" personal information for cross-context behavioral advertising as those terms are defined under California law, because we do not currently run advertising or remarketing pixels on the Site.

If we add advertising or remarketing pixels in the future, certain disclosures of online identifiers to advertising partners could be treated as "sharing" for cross-context behavioral advertising under California law even when no money changes hands. If that happens, we will update this Policy, provide a "Do Not Sell or Share My Personal Information" mechanism as described below, and honor opt-out preference signals such as Global Privacy Control.

7. Cookies and similar technologies

We use cookies and similar technologies (such as local storage and pixels) to operate the Site, remember your preferences, and understand how the Site is used. We group these technologies into the following categories:

• Strictly necessary. Required for the Site to function, including security and basic preferences. These do not require consent.
• Analytics. Used to understand how visitors use the Site, such as Google Analytics. These are treated as non-essential.
• Advertising (future). We do not currently use advertising or remarketing cookies. If we add them, they would be treated as non-essential and would require consent where the law requires it.

Consent for visitors in the EEA and UK. Where required by the ePrivacy rules and the GDPR or UK GDPR, we will request your prior consent before setting non-essential cookies, will not set non-essential cookies until you opt in, and will provide a means to withdraw consent that is as easy to use as the means by which you gave it.

How to control cookies. You can control or delete cookies through your browser settings, and you can refuse non-essential cookies through any consent banner we present. Most browsers let you block or delete cookies and notify you when a cookie is set. Disabling certain cookies may affect how the Site functions. You can also opt out of Google Analytics using the Google Analytics opt-out browser add-on. We may publish a separate, more detailed cookie notice and link it here.

8. Do Not Track and Global Privacy Control

Do Not Track. Some browsers offer a "Do Not Track" (DNT) signal. There is no common industry standard for how to interpret DNT signals, so we do not currently respond to them. We will update this Policy if that changes.

Global Privacy Control. We recognize the Global Privacy Control (GPC) and similar opt-out preference signals as a valid request to opt out of the "sale" or "sharing" of personal information where applicable law requires us to honor such signals. Because we do not currently sell or share personal information, there is presently nothing to opt out of, but we will treat a GPC signal as an opt-out if and when we add advertising or remarketing pixels that could constitute "sharing."

9. How and with whom we share data

We disclose personal data only in the following ways, and never in exchange for money:

• Service providers and processors. We share personal data with vendors that process it on our behalf and under our instructions, such as hosting, analytics (for example, Google Analytics), email, and security providers. These providers are bound by contract to use the data only to provide services to us and to protect it.
• Legal, compliance, and safety. We may disclose personal data when we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request, to enforce our Terms of Service, or to protect the rights, property, or safety of Ignite, our clients, or others.
• Business transfers. If Ignite is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal data may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy with comparable protections.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as described above.

10. International data transfers

Ignite is based in the United States, and our service providers may also be located in the United States or other countries. If you are located in the European Economic Area, the United Kingdom, or another region with data-transfer restrictions, your personal data may be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (2021), and, for transfers from the United Kingdom, the UK International Data Transfer Addendum to those clauses, together with supplementary measures where appropriate. You may request more information about these safeguards using the contact details below.

Depending on the scale and nature of our processing of personal data of individuals in the EEA or the UK, we may be required to appoint a representative under Article 27 of the GDPR or the UK GDPR. See the section on the EU and UK representative below.

11. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, and then delete or anonymize it. To decide how long to keep data, we consider:

• How long we need the data to provide the Services or respond to your inquiry.
• Whether we have a legal, accounting, or reporting obligation to retain it.
• Whether retention is advisable in light of our legal position, such as applicable limitation periods.

Analytics data is generally retained for a limited period in accordance with our analytics provider's settings. Correspondence and form submissions are retained for as long as needed to handle your request and for a reasonable period afterward.

12. Data security

We maintain reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, and alteration. These measures include access controls, encryption in transit where appropriate, and limiting access to personal data to those who need it.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot and do not guarantee absolute security. You provide personal data to us at your own risk, and you are responsible for keeping any credentials you use confidential.

13. Your rights under GDPR and UK GDPR

If you are located in the EEA or the UK, you have the following rights, subject to conditions and exceptions in the applicable law:

• Access. The right to obtain confirmation of whether we process your personal data and a copy of it.
• Rectification. The right to have inaccurate or incomplete personal data corrected.
• Erasure. The right to have your personal data deleted in certain circumstances.
• Restriction. The right to ask us to restrict processing in certain circumstances.
• Portability. The right to receive certain personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
• Objection. The right to object to processing based on legitimate interests, and to object to direct marketing at any time.
• Withdraw consent. Where we rely on consent, the right to withdraw it at any time, without affecting prior processing.
• Complaint. The right to lodge a complaint with your local data-protection supervisory authority. In the UK, this is the Information Commissioner's Office.

To exercise any of these rights, contact us at info@igniteconsulting.io. We may need to verify your identity before acting on your request.

14. EU and UK representative

Where Article 27 of the GDPR or the UK GDPR requires it, Ignite will appoint a representative in the European Union and a representative in the United Kingdom and will name them here. If a representative has been appointed, their contact details will appear in this section. If no representative is currently named, you may contact us directly at info@igniteconsulting.io regarding processing of personal data of individuals in the EEA or the UK, and we will respond.

15. California privacy rights (CCPA and CPRA)

This section applies to California residents and supplements the rest of this Policy. It is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA").

Categories collected and disclosed. In the past twelve months, we have collected the categories of personal information described in the section on categories of personal data above, which may include identifiers (such as name, email, and IP address), internet or other electronic network activity (such as analytics and usage data), commercial information (such as inquiries about Services), and information you choose to provide in forms or correspondence. We collect this information from the sources described above, for the business purposes described above, and we disclose it to the categories of recipients described in the sharing section above (service providers, and recipients for legal or business-transfer purposes). We do not collect or process sensitive personal information for purposes that would trigger the right to limit its use.

Your California rights. Subject to the CCPA, California residents have the right to:

• Know and access. Request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom it was disclosed.
• Delete. Request deletion of personal information we collected from you, subject to exceptions.
• Correct. Request correction of inaccurate personal information.
• Opt out of sale or sharing. Direct us not to sell or share your personal information. As stated above, we do not sell or share personal information.
• Limit use of sensitive personal information. Direct us to limit the use of sensitive personal information to permitted purposes. We do not use sensitive personal information for purposes that would require this option.
• Non-discrimination. Not be discriminated against for exercising any of these rights.

How to submit a request. Submit a request by email to info@igniteconsulting.io. We will verify your request by matching the information you provide against information we hold. You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may require you to verify your own identity directly with us.

16. Do Not Sell or Share My Personal Information

Ignite does not sell or share personal information, so there is currently no sale or sharing to opt out of. If we add advertising or remarketing pixels in the future that could constitute a "sale" or "sharing" under the CCPA, we will provide a clear "Do Not Sell or Share My Personal Information" mechanism, will honor opt-out preference signals such as Global Privacy Control as described above, and will update this Policy. In the meantime, you may direct any opt-out request to info@igniteconsulting.io and we will honor it.

17. California Shine the Light

Under California Civil Code Section 1798.83, California residents may request, once per calendar year and free of charge, information about the categories of personal information (if any) we disclosed to third parties for those third parties' own direct marketing purposes during the prior calendar year, along with the names and addresses of those third parties. Ignite does not disclose personal information to third parties for their own direct marketing. To make a Shine the Light request, email info@igniteconsulting.io with "Shine the Light" in the subject line.

18. Children's privacy

The Site and Services are not directed to children. We do not knowingly collect personal data from children under 16 years of age, and under 13 years of age within the meaning of the U.S. Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal data, please contact us at info@igniteconsulting.io, and we will take reasonable steps to delete it.

19. Third-party links

The Site may contain links to third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties. We are not responsible for their content or privacy practices, and we encourage you to review the privacy policies of any third-party site you visit.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will take reasonable steps to provide notice, such as posting a prominent notice on the Site. Your continued use of the Site after an update means you accept the revised Policy. We encourage you to review this Policy periodically.

21. How to exercise rights and contact us

For all privacy, data-protection, and data-rights inquiries, and to exercise any right described in this Policy, contact us by email at info@igniteconsulting.io. This is our sole contact channel for privacy matters. Please include enough detail for us to understand and respond to your request, and the email address or other identifier we should use to locate your data. We may need to verify your identity before responding.

22. Language and controlling version

This Privacy Policy is provided in English and in a Simplified Chinese translation for convenience. We have tried to make the translation faithful and accurate. However, in the event of any conflict or inconsistency between the English version and the Chinese version, the English version controls.

Ignite Consulting LLC, a Wyoming limited liability company. This Privacy Policy is effective as of June 14, 2026.