Privacy Policy

Who we are

This Privacy Policy applies to Octus Technology LLC, operating as Octus Consulting ("Octus", "we", "us"), a company incorporated in the State of Delaware, United States, with registered address at 900 Foulk Rd Suite 201, Wilmington, DE 19803.

Octus Consulting provides regulatory structuring, compliance coordination, corporate architecture and related advisory services to businesses operating in regulated markets. This policy governs how we collect, use and protect personal data in connection with our website (octusconsulting.com) and services delivered to clients.

What data we collect

We collect personal data you provide directly when interacting with our website or contacting us:

• Identification and contact information: name, company name, job title, email address, phone number. • Operational context: jurisdiction of operation, type of regulated business, and any information you choose to share when you contact us. • Communications: the content of emails, WhatsApp messages or other messages you send to us.

As of this update, the public website does not host an HTML contact form that posts data to our servers. Primary contact channels are WhatsApp and email (mailto). We do not invent website usage analytics collection that is not active on the current static export. If analytics tools are enabled later, this policy and the Cookie Policy will be updated.

We do not collect sensitive personal data (such as health information, racial or ethnic origin, or biometric data) in the ordinary course of our business.

How we use your data

We use personal data for the following purposes:

• To respond to enquiries and diagnostic requests you send via WhatsApp, email or other channels we publish. • To assess your operational situation and prepare for an initial consultation. • To fulfil our contractual obligations to clients. • To comply with applicable legal requirements. • To maintain and improve our website and services. • To send service-related communications where you have engaged with us.

We do not use your personal data for marketing purposes without your explicit consent. We do not sell personal data to third parties under any circumstances.

Legal bases for processing

We process personal data on the following legal grounds:

• Contractual necessity: where processing is required to fulfil or prepare for a contract with you. • Legitimate interests: where processing is necessary for our legitimate business purposes, provided these are not overridden by your rights. • Legal obligation: where processing is required to comply with applicable law. • Consent: where you have given explicit consent, which you may withdraw at any time.

Data sharing and disclosure

We do not sell, rent or trade personal data. We may share data in the following limited circumstances:

• Service providers: third parties who assist us in operating our business (such as hosting or communication platforms), bound by confidentiality obligations. • Legal requirements: where disclosure is required by applicable law, regulation, court order or regulatory authority. • Business transfers: in connection with a merger, acquisition or transfer of assets, subject to standard confidentiality protections.

Where we engage jurisdiction-specific partners in the execution of client mandates, data sharing is governed by appropriate agreements and applicable data protection law. This policy does not invent a list of subprocessors.

International data transfers

Octus Consulting operates across multiple jurisdictions. Personal data may be transferred to and processed in countries outside your country of residence, including the United States. Where such transfers occur, we apply safeguards required by applicable data protection law. References to GDPR or LGPD describe regimes that may apply depending on your location and the processing context; they are not a claim of certification.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact and diagnostic correspondence is retained for the duration of any engagement and for a reasonable period thereafter for operational and legal record-keeping purposes. You may request deletion of your data at any time, subject to legal retention requirements.

Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: to obtain confirmation of whether we hold your data and receive a copy. • Right to rectification: to have inaccurate or incomplete data corrected. • Right to erasure: to request deletion of your data where no legal basis for retention applies. • Right to restriction: to request that we limit processing in certain circumstances. • Right to portability: to receive your data in a structured, machine-readable format. • Right to object: to object to processing based on legitimate interests. • Right to withdraw consent: where processing is based on consent, to withdraw it at any time.

To exercise any of these rights, contact us at the details below.

Cookies

Our website uses essential site functions only as of this update. The public site sets a first-party localStorage flag when you dismiss the essential-cookie notice. We do not currently load advertising SDKs or Meta Pixel. For full details, see our Cookie Policy, which is aligned with the on-site CookieBanner.

Data protection contact

For data protection enquiries, including requests to exercise your rights or lodge a complaint, contact:

Email: compliance@octusconsulting.com Postal: Octus Technology LLC, 900 Foulk Rd Suite 201, Wilmington, DE 19803, United States

This page does not invent a named Data Protection Officer appointment. If you are located in the European Union or United Kingdom, you also have the right to lodge a complaint with your local supervisory authority.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be indicated by an updated date at the top of this page. We encourage you to review this policy periodically.