This privacy policy explains how GOTTWALD LAW PLLC, a professional limited liability company located at 34 S 500 E Ste 105, Salt Lake City - 84102-1037, United States (US), collects, uses, protects and shares personal information in connection with the computer systems design and computer integrated systems design services described on this website. The services available through this site are developed and operated by the developer Gottwald on behalf of GOTTWALD LAW PLLC. We are committed to handling personal information responsibly and transparently, and we ask the same care from every partner we work with. We encourage you to read this policy in full so that you understand our practices and the choices available to you. This policy applies to information we collect through this website, through email and telephone contact, and through the delivery of professional services. If you have any questions after reading, the quickest way to reach us is by email at order@gottwald.lat.
This policy covers personal information we collect when you visit this website, when you contact us by email, by telephone or through a form, and when we provide systems design, engineering, integration, security or managed support services to clients. It does not cover the practices of third parties that operate their own websites or systems, even where those systems are linked from our site. Where we process information on behalf of a client as part of a professional engagement, that client remains responsible for the information, and we act only under their written instructions. The policy is written in plain English and organised by topic so that you can find the parts that matter to you. Reading it takes only a few minutes and we believe it is time well spent.
We collect information in three broad categories. The first category is information that you provide to us directly, such as your name, your email address and the contents of a message you send. The second category is information that is collected automatically when you use this website, such as your internet protocol address, browser type and the pages you view. The third category is information we receive about you from other sources, such as public business records or professional references, where that information is relevant to a prospective engagement. We collect only the information that is reasonably necessary to provide our services or to answer the questions you bring to us. We do not collect information in bulk for its own sake, and we do not build profiles of visitors for advertising purposes. If we later identify a genuine need for a further category of information, we will explain the purpose to you before we collect it.
You provide information to us when you submit an enquiry through our contact form, send us email, telephone our office or correspond with us during an engagement. That information typically includes your name, your professional or business email address, the name of your organisation, a subject line and the body of your message. We may also receive information that you choose to share about your systems, workflows, vendors and staffing as part of a design or support discussion. We treat any technical detail you share as confidential and use it only for the purpose you intended when you shared it. We will not sell the information you provide to us, and we will not share it for marketing purposes. Providing information is entirely voluntary, although without basic contact details we cannot respond to your enquiry. The more accurately you describe a problem, the more useful our first reply will be.
When you visit this website, our servers and supporting tools may automatically record technical data about your visit. This data can include your internet protocol address, the type of browser and operating system you use, the pages you open, the time of your visit and the website that referred you to us. We use this technical data to keep the site working correctly, to understand which pages are useful to visitors and to protect the site against abuse and attack. In most cases this data is used in aggregate and does not identify you personally. Where the data could be tied to a specific device, we keep it for a limited period and use it only for security or operational purposes. You can limit the collection of technical data by using the privacy settings in your browser, although some parts of the site may then function less smoothly.
We sometimes receive information about prospective or existing clients from sources other than the individual concerned. This can include information from public registers of companies and professionals, from professional directories, from referral partners and from published business records. We may also receive information from you through a colleague who asks us to consider working with your organisation. We use such information only to decide whether we can be of service, to prepare for an initial discussion and to maintain accurate records for the practice. When we combine information from another source with information you have given us, the combined record is treated under this policy in the same way as information you gave us directly. We expect those who refer information to us to have authority to do so, and we trust that authority unless we have reason to question it.
We use personal information for the purposes for which it was provided. That means we use your contact details to respond to enquiries, to prepare proposals, to deliver services and to provide ongoing support. We use records of our correspondence to keep our professional obligations and to make sure that what was agreed is what actually happens. We use technical data from the website to maintain security, to measure performance and to improve the usefulness of the site. We use information from other sources to evaluate whether we can serve a prospective client. We do not use personal information for marketing, and we do not sell it. Where we wish to use information for a purpose beyond the original one, we will tell you clearly and, where the law requires it, ask for your consent before we proceed.
We process personal information only where we have a lawful basis to do so. The principal bases we rely on are the performance of a contract, where processing is necessary to provide the services you have asked for; the pursuit of legitimate interests, where our interest in running a professional practice is balanced fairly against your rights; and consent, where you have agreed to a specific use and have not withdrawn that agreement. Where we are required by law to retain records or to respond to lawful requests, we rely on that legal obligation. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing that happened before your withdrawal. We document the basis for each significant category of processing so that the reasoning behind our decisions is always available for examination.
To deliver our services we rely on a small number of trusted service providers. These include providers of website hosting, email delivery, document storage, accounting tools and security monitoring. Each provider is chosen with attention to their data protection practices, and each is bound by a written contract that defines how they may handle personal information. We limit the information we give to providers to the minimum needed to perform the task in question. Providers may process information only on our instructions and may not use it for their own purposes. We review the providers we use on a regular basis and we expect them to notify us promptly of any security incident. If a provider cannot meet our standards, we stop using them. You can ask us which categories of providers we currently use, and we will answer honestly.
We keep personal information only for as long as it is needed for the purpose for which it was collected. Correspondence about an enquiry is kept while the enquiry is active and for a reasonable period afterwards in case you return with a further question. Records relating to a professional engagement are kept for the period required by professional, accounting and legal obligations, and then securely disposed of. Technical data from the website is retained in a form that can identify a device for only a limited period, after which it is aggregated or removed entirely. When information is no longer needed, we delete it or render it anonymous by a method that cannot be reversed. Our retention periods are reviewed regularly and are documented internally so that the decisions remain consistent.
We apply a range of measures to protect personal information against loss, misuse, unauthorised access and alteration. These measures include encryption of data in transit and at rest, control of access on a need-to-know basis, monitoring of systems for suspicious activity and regular testing of our safeguards. Access to information is restricted to people within our practice who need it to perform their work. We train our staff in the importance of confidentiality and we review their access rights on a regular basis. No system is perfectly secure, and we therefore cannot guarantee absolute protection against every possible attack. If a security incident is found to affect personal information, we will investigate it promptly and notify the people and authorities affected in accordance with our legal obligations.
This website and our professional services are directed to businesses, professionals and adults. They are not intended for children, and we do not knowingly collect personal information from children. If we learn that information about a child has been provided to us without the consent of a parent or guardian, we will delete it promptly and confirm the deletion to the person who reported it. Parents or guardians who believe their child has provided information to us should contact us using the details at the end of this policy so that we can remove it without delay. We do not offer any content or features that would appeal specifically to children. Where a client asks us to process information that relates to a child, we do so only under the written instructions and responsibility of that client.
Our practice is based in the United States (US) at 34 S 500 E Ste 105, Salt Lake City - 84102-1037. Information you provide to us may be stored on servers located in the US or in other countries where our service providers operate. Where information is transferred across borders, we take steps to ensure that it receives an appropriate level of protection under the laws that apply to that transfer. We rely on recognised safeguards, such as standard contractual clauses approved for international transfer, to protect your information. By providing information to us you understand that it may be stored and processed outside your own country. If you have questions about where your information is stored or how a transfer is protected, we will be happy to answer them.
You have rights over the personal information we hold about you. You may ask us for a copy of the information we hold, ask us to correct information that is inaccurate, and ask us to delete information where there is no lawful reason to keep it. You may also ask us to restrict how we use your information and to object to processing that is based on legitimate interests. To exercise any of these rights, contact us using the details below and we will respond within the period required by law. We may ask you to confirm your identity before we act, so that we do not give your information to someone else. Where your request conflicts with a legal obligation to retain records, we will explain the position to you honestly and tell you what we can do. You may also complain to a data protection authority in your jurisdiction at any time.
We review this privacy policy regularly and may update it when our practices, technology or legal obligations change. The date at the top of the policy shows when it was last revised. When we make a material change, we will draw attention to it on this website rather than hiding it among other updates. Continued use of the website after a change has been published means that you accept the updated policy. If a change requires your consent under the law that applies to you, we will obtain that consent before applying the change to information we already hold. We keep earlier versions of this policy in our records so that the basis of any past decision can be examined. Questions about a particular version of the policy can be directed to us at any time.
This privacy policy is governed by the laws of the State of Utah and, where applicable, the federal laws of the United States (US). Our practice is established in Salt Lake City, Utah, and operates under the name GOTTWALD LAW PLLC at 34 S 500 E Ste 105, Salt Lake City - 84102-1037, United States (US). Any dispute relating to this policy will be handled in accordance with the dispute process described in our terms of service. Nothing in this section limits your ability to make a complaint to a supervisory authority where the law grants you that right. By providing information to us you do not waive any right that you hold under the law of your own jurisdiction. We will always seek to resolve concerns by discussion before any formal process is begun.
Questions, requests and complaints about this privacy policy or about the handling of personal information should be addressed to our practice. Our contact person is Ou Chaofu. You can reach us by email at order@gottwald.lat or by telephone at +19797662421. Our postal address is GOTTWALD LAW PLLC, 34 S 500 E Ste 105, Salt Lake City - 84102-1037, United States (US). We will acknowledge every data protection enquiry within two business days and will provide a full response as quickly as the circumstances allow. If you are not satisfied with our response, you may raise the matter with a relevant data protection authority. We treat every enquiry seriously and we welcome the chance to put things right.