Draft. This page is a draft. Items in [[double brackets]] are still to be filled in.
Privacy Policy
Effective date: [[DATE]] · Last updated: [[DATE]]
1. Who we are
Transatlantic Technology Research ("we", "us") is a research publication at transatlantictechresearch.com. We publish research for U.S. technology companies selling in European markets. We don't provide engineering, legal, certification or compliance services.
This site is run by [[LEGAL NAME OF ROBERT'S BUSINESS / ENTITY]], [[POSTAL ADDRESS: a PO box or virtual mailbox is fine]], United States. Privacy contact: [[privacy@domain]]
Our introduction service is only for businesses based in the United States. It's not offered to people or companies in the EU, EEA or UK.
2. The short version
- You can read the site and use our tools without giving us your name or email.
- If you ask for an introduction, we use your details to review your request. If you tick the sharing box, we pass your request and contact details to a partner engineering firm we choose, and then email you the firm's name.
- The introduction form is in test mode right now. When you send it, we check your entries and then discard them. Nothing you enter is saved, emailed or shared, and no introduction is made.
- If you're introduced to a partner firm and hire them, that firm may pay us a referral fee.
- Our tools run in your browser, and their downloads are made on your device. We don't email tool files, and we don't receive your answers.
- Our analytics doesn't use cookies, and it doesn't track you across sites.
- We don't sell your personal information, and we don't share it for cross-context behavioral advertising.
- You can ask us to see, fix or delete your data at any time: [[privacy@domain]].
3. What we collect and why
| What | When | Why we use it |
|---|---|---|
| Introduction request: name, work email, company, company website, U.S. state and ZIP, revenue and employee band, role, product type, EU timeline, project scope, product lines, timeline, decision role, your free-text summary, and your confirmation that your company is based in the U.S. | You fill in "Request an introduction" | To review your request, contact you about it, and, if you tick the sharing box, introduce you to a partner firm. If you tell us your company isn't based in the U.S., we don't store anything you entered. While the form is in test mode, we don't store anything you enter: we check it, count that a form was sent (with no details about you), and discard it. |
| Newsletter: email, and optionally your name | You sign up and confirm (double opt-in). Signups aren't open yet | To send the newsletter |
| Tool answers and results (Secure Update Readiness Assessment, Partner Scorecard, other tools) | You use a tool | Tools run in your browser. We don't receive or store your answers just because you use a tool |
| Tool downloads (PDF, CSV or XLSX) | You download a file from a tool | The PDF and CSV are made in your browser, and the XLSX is a blank template. We don't receive your answers, and we don't ask for your email address |
| Messages you send us | You email us | To reply |
| Technical data: the request details any website receives (IP address, browser) | Automatically, when you visit | To deliver the site and keep it secure. Our host, Cloudflare, processes these details to do that. We don't save them in our own records or logs. See section 7 for analytics |
Please don't put trade secrets, export-controlled technical data, passwords or credentials in any form. We don't need them, and we'll delete them if we receive them.
The site isn't meant for children, and we don't knowingly collect data from anyone under 16. We don't ask for sensitive data (health, religion, and so on), and you shouldn't send it.
4. Who we share it with
- A partner engineering firm, only with your consent. If you tick the sharing box, we send your request and contact details to a partner engineering firm we choose because it may fit your project. We don't name the firm before we share your details. We email you its name, website and location after we pass your details on. Each introduction goes to one firm only. Each firm uses your details under its own privacy policy. If you're introduced to a partner firm and hire them, that firm may pay us a referral fee. Partner firms may be based outside the United States.
- Service providers who help us run the site and act only on our instructions:
- hosting, security and analytics (Cloudflare)
- email and newsletter, including sending tool files ([[EMAIL PROVIDER]])
- form storage ([[FORM / CRM TOOL]])
- If the law requires it, or to protect our rights or someone's safety.
- If the business is sold or merged, to the new owner, under this same policy.
We don't sell personal information or share it for cross-context behavioral advertising (as those terms are defined in California law), and we haven't done so in the past 12 months.
5. Where your data is kept
We're based in the United States, and our service providers mainly store data in the U.S. A partner firm we introduce you to may be based in another country. If so, it handles your details under the laws that apply to it and its own privacy policy, which we'll link in the email that names the firm.
6. How long we keep it
| Data | How long |
|---|---|
| Introduction requests that don't lead to an introduction | 12 months after our last contact, then deleted |
| Introduction requests that do lead to an introduction | [[24]] months after the introduction, or longer if we need it for business or tax records (then only the minimum: company, date, partner, outcome) |
| Introduction form entries while the form is in test mode | Not stored |
| Entries from non-U.S. companies | Not stored |
| Newsletter | Until you unsubscribe. Then we keep only a suppression entry so we don't email you again |
| Contact messages | 12 months |
| Work email and company name from tool-file requests | [[e.g., 12 months from your last request]], or sooner if you ask us to delete them |
| Tool answers | Not stored. Our tools run in your browser |
| Email provider's delivery records for tool files (address, time, delivered or bounced) | [[Provider's default, e.g., 30 days]] |
| Server and security logs | [[30–90]] days |
| Analytics | Aggregate counts only. No personal data is stored. Event counts (event name, page and time) are kept in Cloudflare's analytics storage for its standard retention period |
7. Cookies and analytics
- Analytics. We use Cloudflare Web Analytics, which doesn't use cookies or track you across sites. We also count a few simple events with our own tool: a tool finished, a PDF or spreadsheet downloaded, and an introduction form sent. It records only the event name, the page and the time. No IP address, browser details, identifier or cookie is stored.
- No cookies. We don't use cookies, and we don't store anything else on your device, such as local storage.
- No advertising cookies. We don't run ad trackers or retargeting pixels.
Do Not Track. Your browser may send a "Do Not Track" signal. Our analytics doesn't track you across sites whether or not you send one, so the signal doesn't change anything here. We also honor Global Privacy Control (GPC) signals as an opt-out of any sale or sharing, though we don't sell or share in the first place.
8. Your rights
Everyone. Email [[privacy@domain]] to see, correct or delete your data, or to stop marketing. Every email we send has an unsubscribe link. If you withdraw consent after we've passed your details to a partner firm, we'll stop sharing, tell the firm, and give you its contact details so you can ask it to delete them too.
California residents (CCPA/CPRA) have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing (we don't sell or share); to limit use of sensitive personal information (we don't collect it for that purpose); and not to be discriminated against for using these rights. You can use an authorized agent. We'll verify requests by matching the email you used with us.
- Categories collected in the last 12 months: identifiers (name, email); professional or employment information (company, role); and inferences (project fit). Sources: you. Purposes: those in section 3. Disclosed for business purposes to: service providers and, with your consent, partner firms.
Other U.S. states (e.g., Virginia, Colorado, Connecticut, Texas, Oregon) give similar rights once a business meets their thresholds. We honor the same requests from anyone.
Visitors outside the U.S. Our site is for U.S. readers and U.S. businesses, and our introduction service isn't offered in the EU, EEA or UK. If you're reading from elsewhere and want to see or delete anything we hold about you, email [[privacy@domain]] and we'll help.
We'll respond within 45 days.
9. Security
We keep data in access-controlled systems with two-factor sign-in, encrypt it in transit, and limit access to people who need it. No system is perfect. If a breach affects you, we'll tell you and the authorities as the law requires.
10. Aggregated research
We may publish anonymous, aggregated statistics from introduction requests and tool use (for example, "40% of respondents plan EU sales within 12 months"). We only do this when groups are big enough that no company or person can be identified ([[minimum 50 responses]]).
11. Changes
If we change this policy, we'll update the date at the top. For important changes, we'll put a notice on the site or email the people affected.
12. Contact
[[LEGAL NAME]], [[POSTAL ADDRESS]] · [[privacy@domain]]