#ClientCentric
Privacy Policy
What Centric3, LLC collects, why, and the choices you have. When you contact us we use your details to reply; marketing email and analytics run only with your consent — and you can reject as easily as accept. We honor GPC signals.
On this page
What we collect
We collect only what we need to respond to you and run this site:
- Information you give us. Your name, email, company, and message when you use the contact form, request a project, take the AI Readiness Assessment, or subscribe.
- Technical and usage data. Anonymous, aggregated usage — only if you allow analytics cookies.
- Consent state. A pseudonymous record of your cookie and marketing choices, so we can honor them.
No accounts or logins. We do not sell your personal data or build advertising profiles.
Lawful basis for processing
We rely on two distinct bases, depending on what you do:
- Contract & legitimate interest — inbound requests
- When you submit the contact or project form, we forward your details to our CRM to reply to the request you started — this proceeds regardless of your cookie choice. We do not start any marketing sequence without your consent.
- Consent — marketing & analytics
- Our newsletter (double opt-in) and non-essential analytics run only with your explicit consent. Withdraw any time — from the cookie manager below, an unsubscribe link, or by contacting us.
How we use your information
- To reply to inbound questions and project enquiries.
- To deliver your AI Readiness Assessment result link (expires after 24 hours).
- To send Centric3 insights — only if you opt in (double opt-in).
- To understand site usage in aggregate — only with your analytics consent.
- To keep a pseudonymous record of your consent choices and honor them.
Cookies & consent
We use Cookiebot with Google Consent Mode v2. Non-essential cookies are denied by default until you choose:
- Necessary — always on; required for the site to work.
- Analytics — off by default; anonymous, only with consent.
- Marketing — off by default; only with consent.
Rejecting is as easy as accepting. We also honor the Global Privacy Control (GPC) signal as an opt-out of analytics and marketing (a CCPA/CPRA “Do Not Sell or Share” request).
Third parties & sub-processors
We share data only with vetted providers who process it on our behalf under a data processing agreement. International transfers are covered by Standard Contractual Clauses (SCCs).
Scroll the table horizontally →
| Sub-processor | Purpose | Region |
|---|---|---|
| HubSpot | CRM — system of record for enquiries | US (SCCs) |
| Cookiebot | Consent management (CMP) | EU |
| Cal.com | Meeting scheduling (on intent) | EU/US |
| Resend | Transactional email | US (SCCs) |
| Vercel | Hosting & delivery | Global edge |
| Upstash | Ephemeral key-value store | US/EU |
| Cloudflare Turnstile | Bot protection on forms | Global edge |
| Google Analytics 4 | Consent-gated, server-side measurement | US (SCCs) |
The full register, SCCs, and security posture are on our Trust & data-handling page.
Data retention
- CRM contact data is kept while our relationship is active and as required by law, then deleted or anonymized. HubSpot is the system of record.
- Assessment result tokens are non-identifying and auto-delete after 24 hours.
- Delivery queue. If a CRM write needs retrying, one encrypted entry (AES-256-GCM) is held transiently for about an hour, then drained — only to make sure no enquiry is lost.
- Consent records are kept as an append-only log so we can prove and honor your choices.
Your rights & data requests
Depending on where you live, you have the right to:
- Access the data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Port your data to another provider.
- Withdraw consent for marketing or analytics at any time.
- Opt out of sale/sharing — honored automatically with GPC.
- Lodge a complaint with your data protection authority.
Request your data or its deletion
Use either route below. We verify your identity first, keep a PII-free audit reference, and respond within about 30 days. Erasure is carried out in our CRM (HubSpot).
Children’s privacy
This site is intended for businesses and is not directed to children under 16. We do not knowingly collect children’s data. If you believe a child has provided us data, email hello@centric3.com and we will delete it.
Changes to this policy
We may update this policy as our practices or the law evolve. When we do, we revise the “Last updated” date above. For material changes we give a more prominent notice.
Contact us
Questions about this policy or your data? Reach us at hello@centric3.com.
Centric3, LLC — founded 2022. Written requests can be sent to the same address.