Public Document — Website and Business Contacts

Privacy Policy
& Cookie Notice

This document describes only the processing of personal data for which DataMomentum acts as Data Controller. Rules governing data processing within client projects are regulated by a separate Data Processing Agreement (DPA).

Version 1.0  |  Effective: May 13, 2025
CCPA / CPRA · NY SHIELD Act
§1

Data Controller

The controller of your personal data is:

Company
DataMomentum
Address
1756 Hanshaw Rd, Ithaca, New York 14850

For privacy-related inquiries, please contact us at: office@datamomentum.com

§2

What Data We Collect and Why

2.1 Contact Form and Sales Inquiries

When you fill out a contact form or send us an email, we process: your name (or username), email address, phone number (if provided), message content, and the name of the company you represent.

Legal Basis
Performance of a pre-contractual relationship (where applicable) and our legitimate interest in handling business correspondence
Retention Period
For the duration of correspondence and negotiations; if a contract is signed, for the duration of the contract and 3 years thereafter

2.2 Contract Performance

When we become your service provider, we process: identifying data (name, company, tax ID), contact data (email, phone, address), and billing information.

Legal Basis
Performance of a contract; compliance with tax and accounting obligations under applicable law
Retention Period
For the duration of the contract, and thereafter: accounting records — 7 years from end of tax year; contractual records — 6 years (statute of limitations)

2.3 Marketing and Newsletter

If you consent to marketing communications, we process your email address and first name to send information about our services and products.

Legal Basis
Consent. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal
Retention Period
Until consent is withdrawn

2.4 Recruitment

If you submit a resume or job application, we process the personal data contained in your application documents.

Legal Basis
Pre-employment actions and, where applicable, consent for data exceeding statutory requirements
Retention Period
Until the recruitment process concludes (max. 3 months); if you consent to future recruitment, up to 12 months or until consent is withdrawn
§3

Cookies

3.1 What Are Cookies

Cookies are small text files stored on your device by your browser. They do not contain viruses or malicious software.

3.2 Types of Cookies We Use

You can manage cookie consent via the banner displayed on your first visit and at any time through privacy settings in the website footer or your browser settings.

3.3 Google Analytics

We use Google Analytics (Google LLC, USA). Data is transferred to the USA on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission. Google Analytics is configured with IP anonymization. More information: policies.google.com/privacy

§4

Who We Share Your Data With

Your data may be shared only with:

  • Service providers essential to our operations (hosting, email, office tools) — under data processing agreements
  • Public authorities, when required by law (e.g., IRS, SSA)
We do not sell your personal data. We do not share it with third parties for marketing purposes without your consent.
§5

California Residents — CCPA/CPRA

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

California Rights
  • Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you
  • Right to Delete — request deletion of personal information we have collected, subject to certain exceptions
  • Right to Correct — request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing — we do not sell or share personal information for cross-context behavioral advertising
  • Right to Limit Use of Sensitive Personal Information — we do not use sensitive personal information beyond permitted purposes
  • Right to Non-Discrimination — exercising your privacy rights will not result in discriminatory treatment

To exercise these rights, contact us at: office@datamomentum.com or (607) 257-1282.

We will respond to verifiable consumer requests within 45 days. Responses are provided free of charge.
§6

New York Residents — SHIELD Act

We maintain reasonable safeguards to protect private information of New York residents in compliance with the New York SHIELD Act, including administrative, technical, and physical safeguards appropriate to the size and complexity of our business.

§7

Your Rights (All Users)

Regardless of your location, you have the right to:

Access Your Data

Request information about what data we hold and receive a copy of it.

Correct Your Data

Request correction of inaccurate or incomplete information we hold about you.

Request Deletion

Ask us to delete your personal data where permitted by applicable law.

Restrict Processing

Request that we limit how we use your data in certain circumstances.

Withdraw Consent

Withdraw consent at any time where processing is based on your consent.

Object to Processing

Object to processing based on our legitimate interest.

Lodge a Complaint

File a complaint with a competent supervisory authority in your jurisdiction.

To exercise your rights, contact us at: office@datamomentum.com

§8

International Transfers

If you are located in the European Economic Area (EEA), your data may be transferred to the United States. We rely on Standard Contractual Clauses (SCCs) or other approved mechanisms to ensure an adequate level of protection for such transfers.

§9

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. Access to personal data is limited to authorized personnel who need it to perform their duties.

§10

Changes to This Privacy Policy

We may update this Policy from time to time. We will notify you of material changes on our website or by email. The date of the last update appears in the document header.

This document is effective as of May 13, 2025 and supersedes all previous versions.