Privacy Policy

This Privacy Policy ("Policy") describes how Bursaly Group LLC, a Delaware limited liability company with principal operations in Miami, United States ("Bursaly", "we", "us", "our"), handles information in connection with the website located at bursaly.group (the "Site").

The Site is purely informational. We do not operate contact forms, accounts, newsletters, advertising, or analytics. The design of the Site reflects a deliberate choice to minimize data collection.

1. Data controller

The entity responsible for any processing of personal information described in this Policy is Bursaly Group LLC, reachable at hello@bursaly.group.

2. Information we do not collect

We do not use cookies for analytics, advertising, retargeting, or profiling. We do not operate contact forms, comment systems, account registration, newsletters, or e-commerce. The Site does not request personal data from visitors.

3. Information we may process

Even though the Site is informational, limited processing may occur in the following narrow situations:

• Emails you voluntarily send us. If you email us at hello@bursaly.group, we receive your email address, the content of your message, and any attachments you choose to include. We use this information solely to respond to your inquiry and for the ordinary maintenance of business correspondence records.
• Server access logs. Our hosting provider, IONOS, automatically logs standard technical information such as IP address, user-agent string, timestamp, and requested URL for security, abuse prevention, and reliability. We do not use these logs for profiling, advertising, or analytics.
• Local storage — language preference. We store a single key (preferred-locale) in your browser's local storage to remember whether you last viewed the Site in English or Spanish. This data never leaves your device and is not transmitted to our servers or to any third party. See the Cookie Policy for details.

4. Legal basis for processing

Where applicable law requires a legal basis for processing personal information, we rely on the following bases:

• Legitimate interest in maintaining a secure, reliable website and responding to business inquiries initiated by you.
• Consent where expressly required, which you provide by sending us an email or interacting with the Site.
• Legal obligation where we must retain correspondence for compliance, audit, or defense of legal claims.

5. Retention

Emails sent to us are retained for the duration of the active correspondence plus a reasonable period consistent with our record-keeping practices, typically not exceeding five (5) years unless a longer retention is required by law or to defend a legal claim. Server logs are retained according to IONOS's standard retention policies. The local storage language key persists until you clear it from your browser.

6. International data transfers

Bursaly Group LLC is established in the United States. Hosting for this Site is provided by IONOS, whose infrastructure may involve servers located in the European Union or other regions. If you are located outside the United States and interact with us, your information may be transferred to, stored in, and processed in the United States or in other jurisdictions where we or our service providers operate. These jurisdictions may have data protection laws different from those in your country. Where required by applicable law, appropriate safeguards (such as Standard Contractual Clauses) are in place with our service providers.

7. Your rights

Depending on your jurisdiction, you may have rights regarding any personal information we hold about you, including the rights to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of personal information;
• Object to or restrict certain processing;
• Request portability of data you have provided to us;
• Withdraw consent at any time, where processing is based on consent.

Because we do not actively collect personal information from Site visitors, most requests will be resolved by locating and, where appropriate, deleting the email thread in which you contacted us.

To exercise any right, write to hello@bursaly.group. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with the competent data protection authority in your jurisdiction.

8. California residents (CCPA / CPRA)

We do not sell or share personal information within the meaning of the California Consumer Privacy Act ("CCPA") or the California Privacy Rights Act ("CPRA"). California residents may exercise the access, deletion, correction, and opt-out rights described above by emailing hello@bursaly.group. We will not discriminate against you for exercising any of these rights.

9. European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, the UK, or Switzerland and applicable data protection law (such as the GDPR or UK GDPR) applies to our processing of your personal information, you may exercise the rights described in Section 7 by contacting us at hello@bursaly.group. You also have the right to lodge a complaint with your national data protection authority.

10. Children's privacy

The Site is intended for adults in professional contexts. We do not knowingly collect personal information from children under the age of thirteen (13), or under sixteen (16) where local law requires. If you believe we have inadvertently received such information, please contact us at hello@bursaly.group and we will promptly delete it.

11. Security

The Site is served over HTTPS. We take reasonable administrative, technical, and physical safeguards to protect information we hold. However, no method of transmission or storage is 100% secure. By using the Site, you acknowledge that transmitting information over the internet involves risks that cannot be fully eliminated.

12. Third-party services

We do not share personal information with third parties for marketing purposes. The Site is hosted by IONOS under a standard hosting agreement with applicable data-processing terms. We may disclose information where required by law, valid legal process, to protect our rights, or to investigate suspected fraud, security, or technical issues.

13. Do Not Track

Because we do not track visitors across sites, we do not alter our behavior based on "Do Not Track" browser signals. The Site simply does not engage in the kind of tracking that DNT is designed to address.

14. Links to other websites

The Site may occasionally link to third-party websites or resources. We are not responsible for the privacy practices of those third parties, and we recommend you review the privacy policy of any external site you visit.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page indicates when the current version became effective. Material changes will be reflected in the updated date and, where appropriate, highlighted on the Site.

16. Contact

For any privacy-related question or to exercise any of the rights described above, contact us at hello@bursaly.group.