Who we are
FullTrust Compliance Consulting ("FullTrust", "we", "us") is a compliance consulting firm based in the United States. This policy applies to information we collect through fulltrust.ai, our marketing channels, and during the course of client engagements.
What we collect
- Contact information you submit through our website (name, company, work email, target framework, message).
- Engagement information shared during scoping and delivery — limited to what is necessary to advise you.
- Usage data from the website (pages viewed, referrer, anonymized IP) for analytics.
- Communications — email and call records related to active engagements.
We do not request, store, or process your end customers' personal data. We do not sell information about you to third parties.
How we use it
- To respond to inquiries and schedule scoping calls.
- To deliver consulting services under a signed engagement letter.
- To maintain records required for our own SOC 2 and contractual obligations.
- To send occasional firm updates (you may opt out at any time).
Your rights
You may request access to, correction of, or deletion of personal information we hold about you by emailing [email protected]. We respond within 30 days.
If you are located in California, the EU, or the UK, you have additional rights under CCPA, GDPR, and UK GDPR respectively. We honor all such rights.
Retention
Inquiry data is retained for 24 months. Engagement records are retained for seven years to satisfy professional and tax obligations. We will delete sooner on request where retention is not legally required.
Changes to this policy
We update this policy when our practices change. Material changes are announced on the website at least 30 days before they take effect.