Data Protection & Your Rights.

Privacy Policy

Effective Date January 27, 2025
Last Updated January 27, 2025

Alden Consulting, LLC (“Alden Consulting,” “we,” “us,” or “our”) is committed to protecting the privacy of individuals who engage with our services. This Privacy Policy outlines how we collect, process, and share personal data in compliance with the Oregon Consumer Privacy Act (OCPA), effective July 1, 2024.

This policy applies to Oregon residents who use our services, including website visitors, clients, and business partners. By accessing our website or utilizing our services, you acknowledge and consent to the data practices described herein.

We periodically update this policy to reflect legal and operational changes. Updates will be posted on our website, and material modifications will be communicated via email or other appropriate means.

Definitions

  1. Personal Data – Any information linked or reasonably linkable to an identified or identifiable individual, excluding de-identified or publicly available data.

  2. Sensitive Data – Information concerning racial or ethnic origin, religious beliefs, health conditions, sexual orientation, and precise geolocation data.

  3. Sale of Data – The exchange of personal data for monetary or other valuable consideration, as defined by applicable privacy laws.

Collection of Personal Data

We collect personal data to provide services, comply with legal obligations, and improve user experience.

Categories of data collected include:

  1. Identifiers – Name, mailing address, phone number, and email address.

  2. Financial Information – Credit and debit card details for payment processing.

  3. Commercial Information – Records of services requested or purchased.

  4. Internet Activity – IP addresses, cookies, browsing behavior, and interactions with our website.

  5. Demographic Information – Age and gender, where applicable.

We do not collect biometric data, sensitive personal information, or data related to individuals under 18.

Use of Personal Data

Personal data is processed exclusively for the following purposes:

  1. Managing and administering customer accounts.

  2. Processing transactions and fulfilling service requests.

  3. Responding to inquiries and providing customer support.

  4. Conducting research, analytics, and service optimization.

  5. Marketing and advertising, subject to applicable opt-out rights.

  6. Ensuring security, fraud prevention, and legal compliance.

Processing of Sensitive Data

We do not collect or process sensitive data unless explicitly required for legal or regulatory compliance.

Where processing occurs, we will obtain explicit consent before collecting or using such information.

Disclosure of Personal Data

We disclose personal data only when necessary for business operations or to comply with legal obligations.

Categories of data shared include:

  1. Identifiers – Shared with payment processors and cloud storage providers.

  2. Financial Information – Shared with secure payment processors.

  3. Internet Activity – Shared with marketing platforms for analytics.

  4. Commercial Information – Shared with research and analytics partners to improve service offerings.

Sale of Personal Data

We do not sell personal data. A "sale" occurs when personal data is exchanged for monetary or other valuable consideration. Alden Consulting does not transfer personal data for financial gain or allow third parties to use it for their own purposes.

Third Parties with Access to Personal Data

We disclose personal data to:

  1. Service Providers – External vendors that facilitate payment processing, data hosting, and digital marketing.

  2. Regulatory and Legal Authorities – Government agencies, courts, or law enforcement entities when required by law, subpoena, or a legally binding request.

Third parties are prohibited from processing data beyond the scope defined in this policy.

Your Rights Under the OCPA

Oregon residents have the following rights regarding personal data:

  1. Right to Access – Confirm whether we process your data and obtain a copy of the information collected.

  2. Right to Correction – Request rectification of inaccurate or outdated personal information.

  3. Right to Deletion – Request removal of personal data, subject to legal retention requirements.

  4. Right to Opt-Out – Decline targeted advertising, data sharing, or profiling.

  5. Right to Appeal – Contest the denial of a privacy-related request.

Exercising Your Rights

You may submit a privacy-related request through:

Privacy Portal: https://www.aldenconsulting.org/privacy
Email: samuelalden@aldenconsulting.org
Phone: 541-206-0347

Requests will be processed within 45 days.

If additional time is required, we will provide an update on your request status.

Opting Out of Targeted Advertising and Profiling

We may process personal data for targeted advertising and analytics to improve service offerings.

You may opt out at any time through our Privacy Portal at https://www.aldenconsulting.org/privacy.

Universal Opt-Out Mechanism

Starting January 1, 2026, Alden Consulting will recognize universal opt-out mechanisms for data sales and targeted advertising, in compliance with the OCPA.

Data Retention

Personal data is retained only as long as necessary to fulfill its intended purpose, comply with legal obligations, or resolve disputes.

Specific retention periods vary based on:

  1. Statutory obligations requiring data retention.

  2. Contractual obligations with clients or third parties.

  3. Business needs related to fraud prevention or security.

Upon expiration of the retention period, data is securely deleted or anonymized in accordance with industry standards.

Security Measures

We implement industry-standard security measures, including:

  1. Restricted access to personal data through authentication protocols.

  2. Encryption and secure storage of sensitive information.

  3. Regular security audits and compliance reviews.

While we employ rigorous safeguards, no system is entirely immune to security risks.

If you suspect unauthorized access, notify us immediately.

Children’s Data Protection

Alden Consulting does not knowingly collect personal data from children under 13 years of age.

If a child’s data is inadvertently collected, we will promptly delete it upon discovery.

Parental or guardian consent is required before collecting data from children under 13.

Data Protection Assessments

For processing activities that may present a heightened risk of harm, such as targeted advertising or profiling, we conduct and document data protection assessments to ensure compliance with applicable laws.

Policy Updates

We may amend this Privacy Policy to reflect changes in legal or operational requirements.

Updates will be published on our website, and material changes will be communicated via email.

Continued use of our services after an update constitutes acceptance of the revised terms.

Data Breach Notification

In the event of a data breach affecting personal data, we will notify impacted individuals in accordance with applicable laws and regulatory requirements.

Appeals Process

If a privacy-related request is denied, you may appeal by:

  1. Email: samuelalden@aldenconsulting.org

  2. Phone: 541-206-0347

Appeals will be reviewed by our compliance team, and a response will be provided within 45 days.

Non-Discrimination Assurance

We do not engage in discriminatory practices against individuals who exercise their privacy rights under the Oregon Consumer Privacy Act.

Contact Information

For inquiries regarding this policy or to exercise your privacy rights, contact us via:

  1. Email: samuelalden@aldenconsulting.org

  2. Phone: 541-206-0347

  3. Privacy Portal: https://www.aldenconsulting.org/privacy

 

Have a Privacy Request?