Privacy Policy

1. Information we collect

Information you give us

• Contact and inquiry information. Name, email address, company, role, and anything else you include when you complete a form, request a consultation, or email us.
• Scheduling information. When you book a meeting, we collect the details you submit through our scheduling tool, including your name, email, and any context you provide.
• Assessment information. If you use our assessment tools, we collect the responses you enter. These may include business information about your organization. See Section 5.
• Account information. If you create an account to access a tool, we collect authentication information through our identity provider.
• Subscription information. If you subscribe to our newsletter or publications, we collect your email address and any preferences you set.

Information collected automatically

• Usage data. Pages visited, time on page, referring URL, and similar analytics.
• Device and connection data. Browser type, operating system, device type, and approximate location derived from IP address.
• Cookies and similar technologies. See Section 6.

Information we do not collect

We do not knowingly collect information from anyone under 18. We do not collect payment card information directly through the Sites; any payment processing is handled by a third-party processor.

2. How we use information

• To respond to inquiries and schedule conversations
• To deliver, operate, and improve the Sites and our tools
• To generate assessment results and related analysis for you
• To send publications and updates you have requested
• To understand how the Sites are used, in aggregate
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

3. Legal bases for processing (EEA and UK visitors)

Where the GDPR or UK GDPR applies, we process personal data on these bases:

• Consent — for marketing communications and non-essential cookies
• Contract — to provide services you have requested
• Legitimate interests — to operate, secure, and improve the Sites, provided those interests are not overridden by your rights
• Legal obligation — where processing is required by law

4. Service providers

We use third-party providers to operate the Sites. Each processes information only as needed to provide its service:

• Hosting and deployment — Google Cloud
• Authentication — Vercel
• Scheduling — Google
• Analytics — N/A
• Email and newsletters — Google
• Customer relationship management — HubSpot

We require providers to protect information and to use it only for the purposes we specify.

5. Assessment tools and confidential business information

Our assessment tools may ask for information about your organization’s operations, capabilities, and performance.

• We treat assessment inputs as confidential.
• We use assessment inputs to generate your results and to provide any follow-on discussion you request.
• We may use aggregated, de-identified data — with no organization identifiable — to improve our methodology and to publish benchmark statistics.
• We do not disclose your identifiable assessment inputs to any third party without your written consent, except where required by law.
• If we wish to reference your organization in a case study, marketing material, or published research, we will ask for your written consent first.

Completing an assessment does not create an advisory, consulting, or client relationship. See the Terms of Use.

6. Cookies

We use cookies and similar technologies for:

• Essential — authentication, security, and core functionality. These cannot be disabled.
• Analytics — understanding how the Sites are used.
• Preferences — remembering your settings.

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the Sites from working. Where required, we request consent before setting non-essential cookies.

7. Data retention

We keep personal information only as long as needed for the purposes described here, or as required by law.

• Inquiry and contact information: 12 months after the last interaction
• Assessment inputs and results: 12 months unless you request deletion sooner
• Newsletter subscriptions: until you unsubscribe
• Analytics data: 12 months

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion
• Object to or restrict processing
• Receive your information in a portable format
• Withdraw consent at any time, without affecting prior processing
• Opt out of marketing communications

California residents. Under the CCPA and CPRA, you have the rights above, plus the right not to receive discriminatory treatment for exercising them. We do not sell or share personal information as those terms are defined under California law.

EEA and UK residents. You may lodge a complaint with your supervisory authority.

To exercise any right, email ls@loremex.com. We will respond within the period required by applicable law.

9. International transfers

We are based in the United States, and information is processed there. If you access the Sites from outside the United States, you understand your information will be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses and the UK International Data Transfer Addendum, as applicable, for transfers from the EEA and UK.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes

We may update this policy. We will post the revised version with a new “last updated” date. Material changes will be communicated by email notice.

12. Contact