Privacy Policy_

This Privacy Policy describes how Leviathan Systems Group LLC, a Delaware limited liability company (“Leviathan Systems,” “we,” “us” or “our”), handles personal information in connection with https://www.leviathansystems.co (the “Site”), business inquiries, meeting arrangements and related correspondence.

“Personal information” means information that identifies or relates to an identifiable individual, including personal data and similar terms under applicable privacy law. Business contact information can be personal information even when supplied in a professional capacity.

We determine the purposes for which the information described in this policy is used. Where applicable data protection law uses the term, we act as the controller of that information. A customer or facility operator may separately control information handled under an engagement. Any processing we undertake on a customer’s behalf must be addressed in the applicable written agreement.

Separate notices or contractual terms may apply to a particular activity. They supplement this policy for that activity, subject to applicable law. This policy does not grant access to customer systems, replace project confidentiality requirements or constitute consent to processing that requires a separate choice.

Email links prepare a draft in your email application. We receive the message when you send it. The public Site does not offer a customer account, payment checkout or customer-data upload facility.

You may browse public pages without submitting an inquiry, although delivery, security and analytics requests still occur. Information you choose to provide should be limited to what is relevant. If you do not provide the contact or project details needed to evaluate a request, we may be unable to respond, arrange a meeting or prepare a proposal.

Provide information you are authorized to share. Initial inquiries should contain high-level requirements. Arrange a suitable exchange method before providing credentials, restricted drawings, sensitive personal information or customer datasets.

We use personal information to respond to requests, arrange meetings, assess project requirements, manage agreed engagements and business records, review applications, operate and improve the Site, prevent misuse and meet legal obligations.

Where applicable law requires a legal basis, the basis depends on the activity:

• Requested or contracted services: taking requested steps toward a contract with you or performing that contract; legitimate interests in managing a relationship with the organization you represent where you are its contact.
• Business and website operations: legitimate interests in communicating with business contacts, maintaining service records, securing the Site and understanding readership, subject to the protections required by applicable law.
• Legal and regulatory requirements: compliance with an applicable obligation, or establishing, exercising or defending legal claims where permitted.
• Consent: processing for which consent is required. You may withdraw consent through the contact below without affecting the lawfulness of prior processing.

A project inquiry or booking does not enroll you in a newsletter. If we propose a materially different use of personal information, applicable notice, lawful-basis and consent requirements continue to apply.

Personal information may be disclosed to the following recipients for the purposes described in this policy:

• Personnel and engagement support: people involved in responding to your request or performing an agreed engagement, to the extent relevant to their responsibilities.
• Technology and business providers: hosting, security, website analytics, email, scheduling, calendar and administrative services. Website providers include Vercel, Cloudflare and Cal.com, as described below.
• Professional advisers: legal, accounting, insurance or other advisers where relevant to a business or legal matter.
• Authorities and other parties: where disclosure is required by law, necessary to address unlawful conduct or protect legal rights, or made at your direction, subject to applicable law.
• Business transactions: parties involved in a proposed or completed reorganization or transfer of the business, subject to applicable confidentiality and legal requirements.

Providers may process information on our behalf or for purposes for which they are independently responsible. Their separate notices describe those activities. Referring you to a provider’s notice does not reduce our responsibilities for information under our control.

Vercel Web Analytics supplies website traffic statistics. Vercel describes its default service as using a short-lived request-derived identifier and aggregated reporting without analytics cookies. Hosting and security processing is separate and may involve identifiable request information.

Vercel hosts the Site, and Cloudflare provides an additional layer for website delivery and security. Requests pass through these providers and may include IP address, requested URL, browser details and traffic information. Cloudflare also protects email addresses displayed on public pages. This processing is distinct from the cookie-free analytics described above.

The Contact page loads a Cal.com calendar automatically. Your browser connects to Cal.com when the calendar loads, including before a booking is completed. Project links may pass the requested service and referring public page into the booking flow; details entered in that flow are handled by Cal.com and made available for meeting arrangements.

Read the Cookie Policy, Vercel analytics documentation, Cloudflare privacy notice and Cal.com privacy notice for the relevant technologies and controls. Independently operated sites reached through social or reference links apply their own privacy practices.

Retention is determined by the purpose of the record, the relationship involved, applicable legal and contractual requirements, and the need to address security issues or legal claims. Different records have different retention needs.

Retention is limited to a continuing purpose or requirement under these criteria. Deletion requests remain subject to legal exceptions, including required business records and the rights of other people. Provider backup or deletion cycles may affect when removal is completed. Contact us about a particular record.

The public Site uses HTTPS. Initial website and booking communications are intended for business contact and high-level requirements. Restricted drawings, facility access instructions and other sensitive project information require an agreed exchange method and appropriate project-specific confidentiality and access requirements.

No internet transmission or storage method provides absolute security. If you believe information sent to us has been exposed or misdirected, contact us using the details below without including additional sensitive material. Any notification obligations arising from an incident are governed by applicable law and the relevant agreement.

The rights available to you depend on your location, the information and activity involved, and the law applicable to our business. They may include:

• Confirmation that information is processed, access to it and a portable copy.
• Correction of inaccurate information and deletion, subject to applicable exceptions.
• Restrictions on processing, objections to certain uses and withdrawal of consent where consent is the basis.
• Opting out of sale, sharing for cross-context behavioral advertising, targeted advertising or specified profiling.
• Limits on certain uses of sensitive personal information, where the relevant law provides them.
• Using an authorized agent, appealing a decision or complaining to a competent regulator where available.

We will not unlawfully discriminate against you for exercising a privacy right. Some requests may be limited by legal recordkeeping duties, confidentiality, the rights of other individuals or other exceptions under applicable law.

Where applicable law provides a right to object to processing based on legitimate interests, you may explain the circumstances supporting your objection. Where it provides an unconditional right to object to direct marketing, you may exercise that right at any time. A withdrawal of consent applies prospectively and does not invalidate processing lawfully undertaken before withdrawal.

Email a privacy request to info@leviathansystems.co. A “Privacy request” subject helps route your message; it is not a condition for exercising a right.

1. Describe the request. Identify your relationship with us and the information or activity concerned. Share enough detail for us to locate relevant records.
2. Verification. We may ask for proportionate information to verify identity or an agent’s authority. Do not send identity documents unless we have arranged a suitable method.
3. Response. We respond within the period required by applicable law, explain any permitted extension and provide reasons where a request cannot be fulfilled, to the extent required or permitted. Requests are handled without charge unless applicable law permits a fee, in which case we will explain it before charging.
4. Review or complaint. To seek review, email a privacy appeal and identify the original request. You may also contact your state attorney general or another competent privacy regulator, including your local data protection authority where applicable. You do not have to contact us before exercising a right to complain to a regulator.

You may ask us to stop promotional communications by replying to the message or contacting us below. We may continue communications needed to handle a request, perform an engagement or meet a legal obligation.

The Site’s current implementation does not install advertising pixels or use website visitor information for sale, cross-context behavioral advertising or targeted advertising. Global Privacy Control communicates a browser-level opt-out preference for such activities. It does not block ordinary requests required to deliver a page or load an embedded provider. Browser and embedded-content controls are explained in the Cookie Policy.

Leviathan Systems operates in the United States. Personal information may be processed in the United States and other locations used by relevant providers. The protections available in those locations may differ from those in your country.

Where a transfer is subject to additional legal requirements, the required safeguards must be addressed for the relevant processing. Visiting the Site or contacting us does not waive your mandatory rights or provide consent to a transfer that requires a separate lawful mechanism. Contact us to discuss applicable requirements before providing information subject to transfer restrictions.

The Site is intended for professional and business use and is not directed to children. We do not knowingly solicit personal information from children. If you believe a child has provided personal information, contact us so the matter can be reviewed and addressed.

The date above identifies the latest revision. We may update this policy as activities, technology or legal requirements change. Material changes are subject to applicable notice and consent requirements. A revision does not itself provide consent to a new use that requires it.