Privacy Statement

Ladd Partners Privacy Statement – updated 31 March 2023

Ladd Partners, LLC and Ladd Software Development, Inc (“Ladd Partners”, “LP”, “We”, “we”, “us”) work closely with our clients and respect the privacy of everyone we work with. Please read this Privacy Statement, also referred to as our Privacy Policy, to learn more about the ways in which we use and protect the personal information that is provided through our relationship.

This Privacy Policy reflects LP’s compliance with General Data Protection Regulation (GDPR) in the European Union for our EEA based relationships. You can always reference our contact information, below, if you have any questions or concerns. Key aspects are:

1. Readability and Transparency: LP tries to provide simple language around the personal information we collect from our clients, why we collect such information, and how we use such information.
2. Control over your data: you always have a choice in how we utilize your data and we urge you to exercise your right to correct or remove any information that we maintain about your company.

Except as otherwise stated in this Privacy Policy, we do not sell, rent, or release for free any information about you or your company of employment to third parties.

This Privacy Policy describes the choices you can make about how Ladd Partners collects and uses your information. You may opt out of any information sharing by contacting us in accordance with this policy.

To do so, please contact us: email privacymatters@laddpartners.com; or write to us at:

Ladd Partners
Attn: Privacy Concerns
PO Box 8593
San Jose, CA  95155 
United States of America

For companies based in the European Economic Area (UK, EU, EEA) you can refer to our contact information, above, if you have any concerns regarding your privacy rights.

Modifications to this Privacy Policy

If our data-related practices change in the future, we will post updates on this website. See the revision date that appears near the top of this policy. Where required by law, we will seek your consent to any material changes made to our Privacy Policy. Please refer to the contact information above if you wish to exercise your rights.

How does Ladd Partners collect and use data about our clients?

We collect information about your company if you:

1. hire LP to engage in any of our consulting services;
2. purchase LP software applications;
3. use our website;
4. if you communicate directly with Ladd Partners

The data provided to LP is used to execute the services we offer, verify and carry out financial transactions, and to fulfill our legal obligations. This often entails gaining administrator-level access to multiple systems that are used to operate your business. We understand that this means we may have full access to all data, sensitive and non-sensitive in nature. We use this information solely for the purposes of carrying out the services that you have hired Ladd Partners to perform. We take the fact that we have access to your data, as it is stored in your company’s systems, very seriously. We may collect and store the following about the people that are employed at your company: first and last name, email address, and titles and/or roles. We collect and store this information solely to maintain communications with active employees within your company.

Information that is provided to Ladd Partners about your business and its employees may be used to conduct investigations and report abuse in order to comply with our legal obligations.

Use of our Website

When using our website, we collect the following data that results from your usage of the website: date and time of access, referral page, IP-address, browser type, language and version of browser software, geographic location (determined by your IP address), operating system.

Our website offers what is commonly referred to as a “web-to-lead” form in our Contact Us section of the website. If you choose to submit this form, you will be asked to provide the following personal information about you: first and last name, email address, and place of employment.

We will process your personal information in order to respond to your requests, verify the legitimacy of your request, and comply with legal and contractual obligations, and defend, establish and exercise legal claims.

Lawful bases

Where GDPR applies to how or why we process your personal information, we will only collect and process any personal information where we are satisfied that there is a lawful basis to do so. We carry out the processing of personal information on the following lawful bases:

• processing is necessary to perform within the bounds of a contract to which you are a party;
• processing is necessary for compliance with a legal obligation to which we are subject to comply. For example, in order to provide our consulting services we are obliged to carry out certain know-your-customer checks to prevent fraudulent activities or engagements with fraudulent entities. This will involve the collection and verification of personal information and business representatives directly related to your company;
• you have provided your explicit consent to receive communications or important updates about industry trends or innovations. We will send you such communications on the basis of your agreement;
• processing is necessary for the purposes of protecting the vital interests of a data subject or the legitimate interests pursued by us, except where such interests are overridden by fundamental rights and freedoms.

Unless otherwise specified, not providing your personal information will not result in legal consequences to you. You are always welcome to contact us about the lawful basis for which we process personal information. Refer to our contact information above.

Ladd Partners contracts with third party technology vendors to help us execute our services and our business operations, to process client information in order to fulfill contractual obligations and to communicate with our clients. We take much care in choosing the technology providers that we use to store and process your information including, but not limited to, Google (Workspace), Salesforce.com, 1Password for Business, Atlassian (Jira, Bitbucket, and Confluence). Ladd Partners does not authorize any third party provider to make any other use of your information.

We limit employee access to personal information to those who have a business reason to know this information. We believe your data must be protected against loss and unauthorized access. We use procedural and technical safeguards provided to us by the vendors in which we choose to store your data including encryption, firewalls, and secure communication protocols to protect your personal information against loss, theft, accidental, and unauthorized access, erasure, use, processing, and disclosure.

As the security of information depends in part on the security of the device you use to communicate with us and the security you use to protect user usernames and passwords, please take appropriate measures to protect this information.

How long is my information stored for?

Personal information about your or the company for which you are employed will be retained as long as it is required for the purposes for which it was collected e.g. as necessary to provide the services requested. Once our contractual relationship with you comes to an end or in case of the service recipient, following the termination of the contractual relationship for which your personal information was processed, we will delete the personal information unless statutory retention requirements apply e.g. for taxation purposes or in order to fulfill regulatory requirements. We retain your contact details and interests in our services for a longer period of time if we are allowed to send you salient communications. We also retain your personal information if needed to establish, exercise or defend a claim.

Cookies and similar technologies

Cookies are small text files that are often placed on your computer’s file system to store data that can be recalled by a server in the domain that stored the cookie. We use cookies and similar technologies on our sites in order to improve your online experience. Through our use of cookies, we also track and maintain the identity of the website you visited immediately prior to visiting our website. We do not otherwise track any information about your use of other websites.

You have a variety of tools to control the data collected by cookies and similar technologies. For example, you can use the controls in your internet browser to limit how the websites you visit are able to use cookies and to withdraw your consent by clearing or blocking cookies.

Reporting Requirements

In the unfortunate event we become aware of any unauthorized access or use of personal information stored by us as a result of actions taken by Ladd Partners or any outside party, we will report this to the appropriate authorities, as required by law. These actions might result in the direct notification to any individual whose personal information is involved in the incident. The exact steps taken to report and notify of any such event will be guided by paid, third party, legal services where deemed necessary or prudent.

Rights applicable to European Union, UK, and California Data Subjects

European Union, UK, and California data subjects have further rights in addition to those mentioned above:

1. Right of access: you have the right to obtain from us confirmation as to whether or not personal information concerning you, or (for parents / guardians) the Service User, is being processed, and where that is the case, to request access to the personal information. The accessed information includes – among others – the purposes of the processing, the categories of personal information concerned, and the recipients or categories of recipients to whom the personal information have been or will be disclosed. You have the right to obtain a copy of the personal information undergoing processing. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
2. Right to rectify and complete personal information: you can request the rectification of inaccurate data and the completion of incomplete data. We will inform relevant third parties to whom we have transferred your data about the rectification and completion if we are legally obliged to do so.
3. Right to erasure (right to be forgotten): You have the right to obtain from us the erasure of personal information concerning you in limited circumstances where:
   1. compliance with a legal obligation; or
   2. the establishment, exercise or defense of legal claims.
1. it is no longer needed for the purposes for which it was collected; or
2. you have withdrawn your consent (where the data processing was based on consent); or
3. following a successful right to object; or
4. it has been processed unlawfully; or
5. the data has to be erased in order to comply with a legal obligation to which Ladd Partners is subject. We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for:
4. Right to restriction of processing: You have the right to request restrictions to the processing of your personal information. In this case, the respective data will be marked and can only be processed by us for certain purposes. This right can only be exercised where:
1. the accuracy of your personal information is contested, to allow us to verify its accuracy; or
2. the processing is unlawful, but you do not want the personal information erased; or
3. it is no longer needed for the purposes for which it was collected, but you still need it to establish, exercise or defend legal claims; or you have exercised the right to object, and verification of overriding grounds is pending. We can continue to use your personal information following a request for restriction, where:
   1. we have your consent; or
   2. to establish, exercise or defend legal claims; or
   3. to protect the rights of another natural or legal person.
5. Right to data portability: You have the right to receive the personal information concerning you, or (in relation to parents/guardians) the Service User, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another entity without hindrance from us, but in each case only where:
1. the processing is based on your consent or on the performance of a contract with you; and
2. the processing is carried out by automated means.
6. Right to object: you have a right to object at any time to the processing of your personal information which has our legitimate interests as its lawful basis. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms. The right to object does not exist, in particular, if the processing of your personal information is necessary to take steps prior to entering into a contract or to perform a contract already concluded.
7. Right to object to how we use your personal information for direct marketing purposes: you can request that we change the manner in which we contact you for marketing purposes. You can request that we not transfer your personal information to unaffiliated third parties for the purposes of direct marketing or any other purposes.
8. Right to withdraw consent: if you have given us your consent for the processing of your personal information, or (as a parent/guardian) the information of a Service User, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
9. Right to obtain a copy of personal information safeguards for transfer of data outside your jurisdiction: if you are a resident or citizen of the EU or UK (as applicable), you can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside the EU or the UK (as applicable). We may redact data transfer agreements to protect commercial terms.
10. Right to lodge a complaint with your local data protection authority: if you have concerns about how we process your personal information, you have a right, at any time, to lodge a complaint with your local data protection supervisory authority (i.e. your place of habitual residence, place or work or place of alleged infringement).