Privacy Policy

What we collect

We collect only what we need to respond to you and run this site:

• Information you give us. Your name, email, company, and message when you use the contact form, request a project, take the AI Readiness Assessment, or subscribe.
• Technical and usage data. Anonymous, aggregated usage — only if you allow analytics cookies.
• Consent state. A pseudonymous record of your cookie and marketing choices, so we can honor them.

No accounts or logins. We do not sell your personal data or build advertising profiles.

Lawful basis for processing

We rely on two distinct bases, depending on what you do:

Contract & legitimate interest — inbound requests

When you submit the contact or project form, we forward your details to our CRM to reply to the request you started — this proceeds regardless of your cookie choice. We do not start any marketing sequence without your consent.

Consent — marketing & analytics

Our newsletter (double opt-in) and non-essential analytics run only with your explicit consent. Withdraw any time — from the cookie manager below, an unsubscribe link, or by contacting us.

How we use your information

• To reply to inbound questions and project enquiries.
• To deliver your AI Readiness Assessment result link (expires after 24 hours).
• To send Centric3 insights — only if you opt in (double opt-in).
• To understand site usage in aggregate — only with your analytics consent.
• To keep a pseudonymous record of your consent choices and honor them.

Cookies & consent

We use Cookiebot with Google Consent Mode v2. Non-essential cookies are denied by default until you choose:

• Necessary — always on; required for the site to work.
• Analytics — off by default; anonymous, only with consent.
• Marketing — off by default; only with consent.

Rejecting is as easy as accepting. We also honor the Global Privacy Control (GPC) signal as an opt-out of analytics and marketing (a CCPA/CPRA “Do Not Sell or Share” request).

Third parties & sub-processors

We share data only with vetted providers who process it on our behalf under a data processing agreement. International transfers are covered by Standard Contractual Clauses (SCCs).

Scroll the table horizontally →

The full register, SCCs, and security posture are on our Trust & data-handling page.

Data retention

• CRM contact data is kept while our relationship is active and as required by law, then deleted or anonymized. HubSpot is the system of record.
• Assessment result tokens are non-identifying and auto-delete after 24 hours.
• Delivery queue. If a CRM write needs retrying, one encrypted entry (AES-256-GCM) is held transiently for about an hour, then drained — only to make sure no enquiry is lost.
• Consent records are kept as an append-only log so we can prove and honor your choices.

Your rights & data requests

Depending on where you live, you have the right to:

• Access the data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”).
• Port your data to another provider.
• Withdraw consent for marketing or analytics at any time.
• Opt out of sale/sharing — honored automatically with GPC.
• Lodge a complaint with your data protection authority.

Children’s privacy

This site is intended for businesses and is not directed to children under 16. We do not knowingly collect children’s data. If you believe a child has provided us data, email hello@centric3.com and we will delete it.

Changes to this policy

We may update this policy as our practices or the law evolve. When we do, we revise the “Last updated” date above. For material changes we give a more prominent notice.

Contact us

Questions about this policy or your data? Reach us at hello@centric3.com.

Centric3, LLC — founded 2022. Written requests can be sent to the same address.