Privacy Policy
1. Who We Are (Data Controller)
Pure Expertz™ LLC ("Pure Expertz™," "we," "us," or "our") is a limited liability company organized under the laws of the State of Illinois. We are the data controller responsible for the personal information you provide when visiting or using this website and its associated services.
PO Box 868, Glenview, IL 60025
Email: [email protected]
Phone: (847) 991-9985
Website: https://pureexpertz.pro
2. What We Collect
We collect personal information through several channels on this website. The categories below describe what is collected at each touchpoint.
2.1 Engagement Form (/engage/)
When you complete our Engagement Agreement form, we collect:
- Full legal name
- Email address
- Job title or professional role
- Company or organization name
- Engagement category selected (e.g., AI Strategy, Workshop, Independent Contractor Program)
- Notes or project description you provide
- Typed digital signature (your name as typed in the signature field)
- IP address (captured automatically at time of submission)
- Submission timestamp
2.2 AI Readiness Survey (/surveys/ai-readiness/)
When you complete the AI Readiness Assessment, we collect:
- Your responses to the ten (10) AI readiness questions
- Your computed readiness score
- Email address (optional — only if you choose to provide it for results delivery)
- Submission timestamp
2.3 Cohort Calculator Form (/cohort/)
When you interact with the cohort calculator and submit contact information, we collect:
- Name and email address (as provided)
- Any cohort-related preferences or inputs you enter
- Submission timestamp
2.4 Standard Server Logs
Our web server automatically records standard access log data, including:
- IP address of the requesting device
- Browser type and version (user-agent string)
- Pages visited and URLs requested
- Date and time of each request
- HTTP status codes and response sizes
2.5 Information We Do Not Collect
We do not collect payment card numbers, bank account information, Social Security numbers, biometric identifiers, or geolocation data beyond the approximate location inferred from your IP address. Payment processing for our services is handled exclusively through GoHighLevel on a separate platform; this website does not process payments.
3. Why We Collect It (Legal Basis)
We process personal data only where we have a lawful basis to do so. The following table summarizes the basis for each category of data processing.
| Data Category | Purpose | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Engagement form data | Formation and performance of a service engagement agreement; pre-contractual steps at your request | Art. 6(1)(b) — Contract / pre-contractual |
| Digital signature and IP address (engagement) | Establishing legal validity of signed agreement under UETA and E-SIGN Act | Art. 6(1)(b) — Contract; Art. 6(1)(c) — Legal obligation |
| AI readiness survey responses | Delivering your assessment results; improving our service methodology; aggregate research | Art. 6(1)(f) — Legitimate interests |
| Survey email address (optional) | Sending you your readiness report by email | Art. 6(1)(a) — Consent (you voluntarily provide it for this purpose) |
| Cohort calculator contact info | Responding to your inquiry about cohort programs; pre-sales communication | Art. 6(1)(b) — Pre-contractual steps; Art. 6(1)(a) — Consent |
| Server logs | Security monitoring, abuse prevention, and site performance analysis | Art. 6(1)(f) — Legitimate interests |
4. How We Use Your Information
We use collected information strictly for the following purposes:
- Service delivery: Processing engagement agreements, communicating with you about your project, and administering your participation in workshops, programs, or community memberships.
- Business communications: Sending confirmations, invoices, project updates, and follow-up correspondence related to your engagement or inquiry.
- Internal records: Maintaining accurate business records as required by applicable law and standard accounting practices.
- Site security and integrity: Monitoring server logs to detect and prevent unauthorized access, fraud, or abuse.
- Service improvement: Aggregating and anonymizing survey data to refine our AI readiness methodology (we do not use individual responses for marketing profiling).
We do not sell, rent, license, or trade your personal information to any third party for their own marketing or commercial purposes.
5. Who We Share Your Information With
We share personal information only to the extent necessary to operate our services. Our current third-party processors are limited to:
5.1 Google LLC (Email Delivery)
Outbound emails (confirmations, follow-ups, reports) are sent via Google Workspace using SMTP relay at smtp.gmail.com. Google acts as a data processor under our Google Workspace agreement and its Data Processing Amendment. Email content and recipient addresses transit through Google's servers. Google's privacy practices are governed by the Google Privacy Policy.
5.2 No Other Third-Party Sharing
We do not use third-party analytics platforms (e.g., Google Analytics), advertising networks, data brokers, or CRM services that receive your personal data. We do not share your information with affiliates, partners, or any other organizations except as expressly stated in this policy.
5.3 Legal Requirements and Business Transfers
We may disclose personal information if required to do so by law, court order, or government authority, or in connection with any merger, acquisition, or sale of business assets (in which case the successor entity would be bound by this policy or a policy at least as protective).
6. Data Retention
We retain personal information only as long as necessary for the purposes for which it was collected, or as required by law:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Engagement agreement records (form data, signature, IP, timestamp) | 7 years from date of agreement | Business and legal recordkeeping; contract performance documentation; Illinois statute of limitations considerations |
| Survey responses and scores | 2 years from submission date | Service improvement and aggregate research; limited commercial relevance beyond 2 years |
| Cohort calculator form submissions | 2 years, or until engagement agreement is executed (whichever comes first) | Pre-sales follow-up; converted to engagement records if agreement is signed |
| Server access logs | 90 days from date of capture | Security monitoring; routine log rotation |
Upon expiration of the applicable retention period, data is deleted from active databases and from backup media within the next scheduled backup cycle.
7. Security of Your Information
We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Specifically:
- Storage location: All collected data is stored in a SQLite database on a Synology DS1522+ NAS device located at our controlled facility in Glenview, Illinois. Physical access to this device is restricted.
- Encrypted transit: All data transmissions between your browser and our web server are encrypted using HTTPS/TLS. Outbound email is sent over TLS-secured SMTP connections.
- Access controls: Administrative access to the database and server is restricted to authorized personnel only and protected by strong credentials.
- No cloud storage of personal data: We do not store personal data on public cloud platforms (AWS, Azure, GCP, etc.). Data remains on our locally controlled hardware.
No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected individuals in accordance with applicable law.
8. Your Rights Under GDPR (EU/EEA Residents)
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR) with respect to your personal data:
You may request a copy of the personal data we hold about you.
You may request correction of inaccurate or incomplete personal data.
You may request deletion of your personal data where grounds apply (e.g., data no longer necessary, withdrawal of consent).
You may request that we restrict processing of your data under certain circumstances.
You may request your data in a structured, machine-readable format where processing is based on consent or contract.
You may object to processing based on legitimate interests, including for direct marketing purposes.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.
You also have the right to lodge a complaint with a supervisory authority. In the EU, this is the data protection authority in your country of residence. You may also contact the EU Data Protection Authorities network at edpb.europa.eu.
9. Your Rights Under CCPA/CPRA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
- Right to Delete: You may request that we delete personal information we have collected about you, subject to certain exceptions (e.g., information necessary to complete a transaction or comply with a legal obligation).
- Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
- Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. Therefore, no opt-out mechanism is required, but we honor requests to confirm this practice.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny services, charge different prices, or provide a different quality of service because you exercised a privacy right.
- Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes other than those permitted under CPRA.
To submit a CCPA/CPRA request, contact us at [email protected] or by phone at (847) 991-9985. We will respond within 45 days of receipt of a verifiable consumer request.
10. Illinois Residents — BIPA Notice
Illinois residents may be aware of the Illinois Biometric Information Privacy Act (BIPA), 740 ILCS 14/1 et seq., which governs the collection, use, and storage of biometric identifiers and biometric information.
We do not collect biometric identifiers or biometric information. The typed digital signature collected through our Engagement Agreement form is a text string — your name as typed — and does not constitute a "biometric identifier" or "biometric information" as defined under BIPA (740 ILCS 14/10). A typed name is not a fingerprint, retinal scan, hand geometry, facial geometry, or voiceprint. Accordingly, BIPA does not apply to our signature collection process.
We have no current or anticipated plans to collect biometric data. If this changes, we will update this policy and implement the required BIPA disclosures, written releases, and retention schedules prior to any such collection.
11. Children's Privacy
Our website and services are directed to business professionals and are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our records.
If you believe we may have collected information from a child under 13, please contact us promptly at [email protected].
12. Cookies and Similar Technologies
We use a minimal, privacy-respecting approach to cookies:
- Session cookies: We use session-only functional cookies that are strictly necessary for the website to operate (e.g., maintaining your state as you navigate the site or complete a multi-step form). These cookies are automatically deleted when you close your browser.
- No tracking cookies: We do not use third-party tracking cookies, advertising cookies, or persistent behavioral profiling cookies.
- No analytics cookies: We do not use Google Analytics, Facebook Pixel, or similar analytics/advertising cookies that would transmit your behavior to third-party platforms.
You may configure your browser to refuse all cookies or to alert you when a cookie is being sent. Because we use only session-essential cookies, refusing cookies may affect the functionality of interactive features on this site.
13. International Data Transfers
Pure Expertz™ LLC is based in the United States. All personal data we collect is stored on hardware physically located in Glenview, Illinois, USA.
If you are accessing this website from the European Union, European Economic Area, United Kingdom, or other regions with data protection laws that may differ from US law, please be aware that your information will be transferred to and processed in the United States.
For transfers of personal data from the EU/EEA to the United States, we rely on the following transfer mechanism where applicable: Standard Contractual Clauses (SCCs) as adopted by the European Commission, incorporated into our agreement with Google LLC for email delivery services. We remain committed to implementing appropriate safeguards for any international data transfers involving personal data originating from the EU/EEA.
By using our website and submitting information through our forms, you acknowledge that your information may be transferred to and processed in the United States.
14. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or service offerings. When we make material changes, we will update the "Last Revised" date prominently displayed at the top of this page.
We encourage you to review this policy each time you visit our website. For significant changes that materially affect how we process your personal data, we will make reasonable efforts to notify affected individuals directly (e.g., by email where we have your address on file).
Your continued use of our website or services after the effective date of any updated policy constitutes your acknowledgment of the changes.
15. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:
Attn: Privacy Inquiries
PO Box 868
Glenview, IL 60025
Email: [email protected]
Phone: (847) 991-9985
We aim to acknowledge all privacy inquiries within five (5) business days and to resolve them within thirty (30) days. For complex requests or those involving rights under GDPR, we will confirm receipt and provide an estimated response timeline.