Privacy Policy

A legal disclaimer

Effective Date: June 2, 2026

1. Introduction

Foundry Lane ("we," "us, ”I”, or "our") operates the website www.foundrylane.co (the "Site"). This Privacy Policy explains how we collect, use, and protect information you provide when you visit our Site or engage with our consulting services. By using the Site, you agree to the practices described in this policy.

This policy applies to all visitors and users of the Site, including residents of California (subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act, "CCPA/CPRA") and individuals in the European Union or United Kingdom (subject to the General Data Protection Regulation, "GDPR").

2. Information We Collect

We collect only the information necessary to respond to inquiries and provide consulting services:

• Name and contact information (e.g., first and last name, company name, job title)

• Email address

• Information you voluntarily provide in contact forms, emails, or other communications

We do not collect payment information directly through the Site. We do not collect sensitive personal information such as Social Security numbers, financial account details, or government-issued ID numbers.

We may also automatically collect limited technical data when you visit the Site, such as browser type, IP address, pages visited, and referring URLs, through cookies and analytics tools. See Section 5 for details.

3. How We Use Your Information

We use the information you provide to:

• Respond to your inquiries and service requests

• Communicate with you about our consulting services

• Send follow-up information you have requested

• Analyze and improve our Site and services

• Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Union or United Kingdom, we process your personal data under the following legal bases as defined by the GDPR:

• Legitimate interests: To respond to business inquiries and operate our consulting services, where those interests are not overridden by your rights.

• Consent: Where you have expressly provided consent, such as opting into communications.

• Contractual necessity: Where processing is necessary to fulfill a consulting engagement or pre-contractual steps.

• Legal obligation: Where we are required to process data to comply with applicable law.

You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Information Sharing

We do not share your personal information with third parties except in the following limited circumstances:

• Service providers: We may use trusted third-party tools (e.g., email platforms, scheduling tools, analytics providers) that process data on our behalf under confidentiality and data processing obligations.

• Legal compliance: We may disclose information if required by law, court order, or governmental authority.

• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to equivalent privacy protections.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

6. Cookies and Tracking

Our Site may use cookies and similar technologies to understand how visitors interact with the Site (e.g., page views, session data, analytics). Cookies are small text files stored in your browser.

You can disable or manage cookies through your browser settings. If you are located in the EU/UK, we will seek your consent before placing non-essential cookies in accordance with applicable ePrivacy rules.

We do not use cookies for targeted or behavioral advertising.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy or as required by law. Contact information from inquiries that do not result in an engagement is typically deleted within 12 months. Data related to active or completed consulting engagements may be retained longer for legal and contractual purposes.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or misuse. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

9. Children's Privacy

Our Site and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

10. Your Privacy Rights

All Users

Regardless of location, you may:

• Request access to the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information, subject to legal obligations

• Opt out of future marketing or promotional communications

California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and any third parties with whom it has been shared.

• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.

• Right to Correct: Request correction of inaccurate personal information.

• Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out mechanism is required at this time, but we will honor any such requests.

• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To submit a CCPA request, contact us at the information in Section 13. We will respond within 45 days, with an extension of up to 90 days when reasonably necessary.

EU/UK Residents (GDPR)

If you are located in the European Union or United Kingdom, you have the following additional rights:

• Right of access (Article 15 GDPR)

• Right to rectification (Article 16 GDPR)

• Right to erasure / right to be forgotten (Article 17 GDPR)

• Right to restriction of processing (Article 18 GDPR)

• Right to data portability (Article 20 GDPR)

• Right to object to processing (Article 21 GDPR)

• Right to lodge a complaint with your local supervisory authority

To exercise these rights, contact us at the information in Section 13. We will respond within 30 days. If you are located in the EU/UK and we process your data, we act as the data controller. We do not currently have a formal EU/UK representative but will appoint one if required by applicable law.

11. International Data Transfers

Our operations are based in the United States. If you access the Site from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

If you are located in the EU or UK, we will ensure that any transfer of personal data outside the European Economic Area is subject to appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or another lawful transfer mechanism.

12. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the effective date at the top of this page. Material changes will be communicated via a notice on the Site. Continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

To exercise your privacy rights, submit a request, or ask questions about this Privacy Policy, please contact us at:

Foundry Lane

Website: www.foundrylane.co

Email: contact@foundrylane.co