Capital Edge Consulting Group LLC (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy explains how we collect, use, protect, and disclose information in connection with our consulting services, website, and client interactions.

1. Scope

This Privacy Policy applies to:

• Visitors to our website

• Prospective and current clients

• Users of client portals and forms

• Individuals who communicate with us electronically or in writing

This policy does not apply to information processed solely on behalf of clients where the client acts as the data controller.

2. Information We Collect

We may collect the following categories of information:

a. Business and Contact Information

• Name, job title, company name

• Business email address and phone number

• Mailing address

b. Client-Provided Information

• Information submitted through forms, portals, or engagement materials

• Documentation, records, or operational information provided in connection with services

c. Website and Technical Information

• IP address

• Browser type and device information

• Website usage data (via cookies or analytics tools)

We do not intentionally collect sensitive personal information unless explicitly required for the performance of contracted services.

3. How We Use Information

We use collected information for the following purposes:

• Providing and managing consulting services

• Responding to inquiries and requests

• Managing client relationships and engagements

• Maintaining internal records and documentation

• Improving service delivery and operational efficiency

• Complying with legal, contractual, or regulatory obligations

Where artificial intelligence tools are used, they operate under human oversight and in accordance with our Responsible AI Use & Information Governance Policy.

4. Legal Basis for Processing (Where Applicable)

Information is processed based on one or more of the following:

• Performance of a contract or pre-contractual request

• Legitimate business interests

• Compliance with legal obligations

• Consent, where required

5. Data Sharing and Disclosure

We do not sell personal information. Information may be shared only:

• With authorized personnel on a need-to-know basis

• With service providers supporting business operations (subject to confidentiality obligations)

• When required by law, regulation, or legal process

Client information is not shared with certification bodies or third parties without authorization.

6. Use of Artificial Intelligence and Third-Party Tools

• AI-enabled tools may be used to support research, consistency checks, and document alignment

• AI tools are not used to make automated decisions affecting individuals

• Client data is not used to train public or third-party AI models outside the service context

• All AI-assisted outputs are reviewed by qualified personnel

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. These safeguards are aligned with commonly accepted information security principles reflected in ISO/IEC 27001.

No system can be guaranteed to be completely secure; however, we take appropriate steps to reduce risk.

8. Data Retention

Information is retained only as long as necessary to:

• Fulfill the purposes outlined in this policy

• Comply with contractual obligations

• Meet legal or regulatory requirements

Information is securely disposed of when no longer required.

9. Client and Individual Rights

Depending on jurisdiction, individuals may have rights to:

• Access personal information

• Request correction of inaccurate information

• Request deletion, subject to legal or contractual obligations

• Restrict or object to certain processing activities

Requests may be submitted using the contact information below.

10. International Data Transfers

If information is transferred across jurisdictions, appropriate safeguards are applied consistent with contractual and legal requirements.

11. Cookies and Analytics

Our website may use cookies or similar technologies to improve functionality and understand usage patterns. Users may adjust browser settings to manage cookies.

12. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in practices or legal requirements. The effective date will be updated accordingly.

13. Contact Information

Questions or requests regarding this Privacy Policy may be directed to:

(214) 537-8430