Privacy Policy

Engalla Consulting("Engalla," "we," "us," or "our") is committed to protecting personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit engalla.com(the "Site").

This policy is intended for visitors in the European Economic Area (EEA), the United Kingdom, and the United States, including California and other states with consumer privacy laws. By using the Site, you acknowledge this policy. Optional analytics cookies are used only after you give explicit consent via our cookie banner.

The data controller for personal information collected through this Site is:

• Engalla Consulting
• San Francisco, California · +1 925 875 8138
• Manila, Philippines · +63 917 887 0017
• Email: hello@engalla.com
• Privacy requests: Contact form or hello@engalla.com

Depending on how you interact with the Site, we may collect:

• Identity and contact data — name, email address, phone number, and other details you submit via forms (for example, contact or coaching inquiry).
• Inquiry content — messages and preferences you provide when requesting information or booking a conversation.
• Usage and technical data — IP address, browser type, device information, pages visited, referring URL, and approximate location derived from IP, collected automatically when you use the Site and, for analytics cookies, only if you Accept.
• Cookie and similar technology data — essential cookies needed to operate the Site, and optional Google Analytics cookies if you consent.

Notice at collection (California / US)

• Directly from you — when you fill out forms, email us, or otherwise contact us.
• Automatically — server logs and, if you Accept analytics cookies, Google Analytics.

We do not buy personal information from data brokers.

• To operate, maintain, and secure the Site
• To respond to your inquiries and provide requested services
• To understand how visitors use the Site (Google Analytics, only with consent)
• To improve our content, products, and services
• To communicate with you about updates or offerings when you have asked us to, or where permitted by law
• To detect, prevent, and address fraud or abuse
• To comply with legal obligations

Where GDPR or UK GDPR applies, we rely on:

• Consent — optional analytics cookies (Google Analytics); you may withdraw consent at any time via Cookie preferences or browser settings.
• Performance of a contract / steps prior to contract — processing inquiries and arranging coaching or related services you request.
• Legitimate interests — securing the Site, preventing abuse, and improving our services in ways that do not override your rights.
• Legal obligation — where we must retain or disclose information to comply with law.

We use essential cookies necessary for the Site to function (for example, storing your cookie preference). These do not require consent under GDPR.

We use optional analytics cookies only if you click Accept on our cookie banner. The analytics provider is Google Analytics 4 (Google LLC), measurement ID G-HQ37XPE6KL. We do not use Microsoft Clarity, advertising pixels, or Google reCAPTCHA on this Site.

Until you Accept, Google Analytics Consent Mode keeps analytics_storage denied. If you Reject, analytics remain off. You can change your choice anytime using Cookie preferences in the footer.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising as those terms are used under the CCPA/CPRA.

We may disclose information to:

• Service providers / processors — notably Google LLC (Google Analytics), only when you have consented to analytics cookies, to help us understand Site usage under our instructions.
• Hosting and infrastructure providers — who process Site traffic and form submissions to deliver the Site.
• Legal authorities — when required by law or to protect rights, safety, or property.

We do not share personal data with business partners or affiliates for their independent marketing.

Engalla operates from the United States and the Philippines. Personal data may be processed in the United States and other countries where our service providers operate (including Google). Where GDPR requires safeguards for transfers from the EEA/UK, we rely on appropriate mechanisms such as Standard Contractual Clauses or other lawful transfer tools offered by our providers, together with contractual and technical measures.

• Form submissions and correspondence — retained as long as needed to respond to your request and for a reasonable period afterward for follow-up, record-keeping, or legal compliance (typically up to 24 months unless a longer period is required).
• Analytics data — retained according to our Google Analytics property settings (typically up to 14 months) when you have consented to analytics.
• Cookie preference — stored in your browser (localStorage) until you clear it or change preferences.

We implement administrative, technical, and physical measures designed to protect personal data. No method of transmission over the Internet or electronic storage is 100% secure; we cannot guarantee absolute security.

If you are in the EEA or UK, you may have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data (in certain circumstances)
• Restrict processing (in certain circumstances)
• Object to processing based on legitimate interests
• Data portability (in certain circumstances)
• Withdraw consent at any time (without affecting prior lawful processing) — including via Cookie preferences
• Lodge a complaint with your local supervisory authority

To exercise these rights, contact us via the contact form or hello@engalla.com. We will respond within the timeframes required by applicable law.

Depending on your state of residence (including California under the CCPA/CPRA, and similar laws in states such as Virginia, Colorado, Connecticut, and others), you may have rights to:

• Know / access — the categories and specific pieces of personal information we have collected about you
• Delete — request deletion of personal information, subject to legal exceptions
• Correct — request correction of inaccurate personal information
• Opt out of sale / sharing— we do not sell personal information. To the extent analytics cookies could be considered "sharing" under some laws, you can opt out by choosing Reject on the cookie banner or using Cookie preferences
• Non-discrimination — we will not discriminate against you for exercising your privacy rights

California residents may submit requests via the contact form or hello@engalla.com. We may need to verify your identity before fulfilling a request. You may use an authorized agent where permitted by law.

We do not use sensitive personal information for purposes that require a right to limit under the CPRA beyond what is necessary to provide the services you request.

The Site is not directed at children under 13 (COPPA) or under 16 where GDPR age rules apply. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. Changes are effective when posted on this page. The "Last updated" date at the top reflects the latest revision. We encourage you to review this page periodically.

For questions about this policy or to exercise your privacy rights, please:

• Submit a request through our contact form, or
• Email hello@engalla.com