Privacy Policy

1. Who We Are

Project Apollo LLC ("Project Apollo", "we", "us", "our") provides outsourcing and technology development services. Our principal address is 11020 N Saguaro Blvd, Fountain Hills, AZ 85268, USA with a satellite office at LKG Building, Makati, Philippines. Contact: privacy@projectapollo.tech.

2. Scope

This Policy applies to visitors and users of our websites (including projectapollo.tech), our contact forms, and any products or services we provide that link to this Policy (collectively, the "Services").

3. Key Roles (GDPR)

• Data Controller: Project Apollo LLC (for marketing site, contact submissions, client onboarding).
• Data Processor: When we process personal data on behalf of clients under written instructions.

4. Personal Data We Collect

• Provided by you: name, email, company, phone (optional), message content, and any files you upload or send.
• Automatically collected: device and browser info, IP address, timestamps, pages viewed, and basic analytics.
• From clients (processor role): data elements specified in a client contract or data processing agreement (DPA).

5. Purposes & Legal Bases

• Responding to inquiries and providing support (Legitimate Interests / Contract).
• Service delivery to clients, including outsourcing and technology solutions (Contract).
• Security & fraud prevention (Legitimate Interests / Legal Obligation).
• Compliance with applicable laws and requests by authorities (Legal Obligation).
• Marketing (limited, respectful) with consent where required (Consent/Legitimate Interests).

6. Do We Use Cookies or Similar Tech?

We may use strictly necessary cookies and essential telemetry to operate the site and secure forms. If additional categories are introduced (e.g., analytics, advertising), we will update this Policy and — where required — obtain consent.

7. Data Sharing & Disclosures

We may share personal data with:

• Service providers/processors (e.g., email delivery, hosting, error logging) bound by confidentiality and DPAs.
• Professional advisors (legal, accounting) under duty of confidentiality.
• Authorities where required by law or to protect rights, safety, or property.
• Business transfers (merger, acquisition) with appropriate safeguards.

We do not sell personal information and do not share it for cross-context behavioral advertising as defined under the CPRA.

8. International Transfers

We may transfer personal data to the United States and the Philippines and other locations where our service providers operate. We implement appropriate safeguards such as Standard Contractual Clauses (SCCs) where required.

9. Retention

We retain personal data only as long as necessary for the purposes set out in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Contact submissions are typically retained for up to 24 months, unless a longer period is required for ongoing client work or legal obligations.

10. Security

We implement administrative, technical, and physical safeguards appropriate to risk, including access controls, encryption in transit, least-privilege practices, and vendor due diligence. No method is 100% secure; we cannot guarantee absolute security.

11. Your Rights

Depending on your location, you may have rights to:

• Access, rectify, or delete your personal data;
• Portability of your data;
• Object to or restrict processing;
• Withdraw consent at any time (where processing is based on consent);
• Lodge a complaint with a supervisory authority (e.g., your local DPA in the EEA/UK).

To exercise rights, contact privacy@projectapollo.tech. We may need to verify your identity and jurisdiction. For EEA/UK residents, we will respond within applicable statutory timelines.

12. US State Disclosures (CCPA/CPRA and similar)

• We do not sell or share personal information as defined by CPRA.
• We honor verifiable consumer requests (access/correction/deletion) and non-discrimination provisions.
• Categories collected: identifiers (e.g., name, email), internet/activity data (site usage), professional information (company), user content (messages).
• Sensitive data: we do not seek to collect sensitive personal information via the marketing site.

13. Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal data from children.

14. Automated Decision-Making / Profiling

We do not perform automated decisions that produce legal or similarly significant effects about individuals using marketing-site data.

15. Third-Party Links

Our Services may contain links to third-party sites. We are not responsible for their privacy practices.

16. Acting as Processor for Clients

When engaged by a client, we process data per their instructions, our contract, and a Data Processing Agreement where required. Clients are responsible for providing adequate notice and obtaining necessary consents from data subjects.

17. Data Breach Notification

In the event of a data breach affecting personal data, we will notify affected clients and/or individuals and relevant authorities in accordance with applicable law.

18. Changes to This Policy

We may update this Policy. The "Last Updated" date will reflect changes. Material changes will be highlighted on the site.

19. Contact Us