1. Introduction
JacJac Consulting LLC ("JacJac Consulting," "we," "us," or "our") is a DCAA compliance and nonprofit consulting firm. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through our website (jacjacconsulting.com), how we use it, and your rights with respect to that information.
By using our website, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the website.
2. Information We Collect
2.1 Information You Provide Directly
We collect information you voluntarily submit, including when you:
- Complete a contact or inquiry form (name, email address, phone number, company name, message)
- Subscribe to our newsletter or email list
- Request a consultation or proposal
- Communicate with us via email or other channels
2.2 Information Collected Automatically
When you visit our website, we and our third-party service providers may automatically collect:
- IP address and general geographic location
- Browser type and version, operating system
- Pages visited, time spent on pages, referring URLs
- Device identifiers and session data
- Cookie identifiers and similar tracking technologies
2.3 Cookies and Tracking Technologies
We use cookies and similar technologies to operate the website and understand how visitors use it. You may control cookies through your browser settings; however, disabling cookies may affect certain functionality. We use:
- Essential cookies – required for basic website operation
- Analytics cookies – to measure traffic and usage patterns (e.g., Google Analytics)
- Preference cookies – to remember your settings
3. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide requested services
- Send newsletters, updates, and marketing communications (with your consent where required)
- Improve our website content, functionality, and user experience
- Analyze traffic and usage trends
- Comply with legal obligations and enforce our policies
- Prevent fraud and protect the security of our website
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
4. How We Share Your Information
We may share your information in the following limited circumstances:
Service Providers: We engage trusted third-party vendors (e.g., email platforms, analytics providers, hosting services) who process data on our behalf under confidentiality obligations.
Legal Requirements: We may disclose information when required by law, subpoena, court order, or to protect the rights, property, or safety of JacJac Consulting, our clients, or others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.
With Your Consent: We may share your information for any other purpose with your explicit consent.
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Contact form submissions and inquiry records are generally retained for up to three (3) years. You may request deletion at any time (see Section 7).
6. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no transmission over the Internet or electronic storage system is completely secure. We cannot guarantee absolute security.
7. Your Rights and Choices
7.1 General Rights (All Users)
Regardless of your location, you may:
- Opt out of marketing emails by clicking the unsubscribe link in any email we send
- Request access to, correction of, or deletion of your personal information
- Withdraw any consent you have previously given
To exercise any of these rights, contact us at the address in Section 10.
7.2 California Residents – CCPA Rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA):
- Right to Know – request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell
- Right to Delete – request deletion of your personal information, subject to certain exceptions
- Right to Correct – request correction of inaccurate personal information
- Right to Opt-Out – we do not sell or share personal information for cross-context behavioral advertising
- Right to Non-Discrimination – we will not discriminate against you for exercising your CCPA rights
To submit a verifiable consumer request, contact us using the information in Section 10. We will respond within 45 days (extendable by an additional 45 days with notice).
7.3 EEA, UK & Swiss Residents – GDPR Rights
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information on the following lawful bases: your consent, performance of a contract, compliance with a legal obligation, or our legitimate interests (e.g., improving our website). You have the right to:
- Access – obtain a copy of your personal data
- Rectification – correct inaccurate or incomplete data
- Erasure ("Right to be Forgotten") – request deletion under certain circumstances
- Restriction – request that we limit processing of your data
- Data Portability – receive your data in a structured, machine-readable format
- Object – object to processing based on legitimate interests or for direct marketing
- Withdraw Consent – where processing is based on consent, withdraw it at any time without affecting prior processing
You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national data protection authority in the EU).
We do not transfer personal data outside the EEA/UK unless appropriate safeguards are in place (e.g., Standard Contractual Clauses or an adequacy decision).
8. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of third-party websites.
9. Children's Privacy
Our website is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
JacJac Consulting LLC
Website: jacjacconsulting.com
Email: jm.desouza@jacjacconsulting.com
11. Updates to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. We encourage you to review this page periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.
© 2026 JacJac Consulting LLC. All rights reserved.