Privacy and Cookies Policy - Focal Point

1. Who we are

Focal Point is a strategic and digital consulting firm that provides 100% remote services to companies across Europe and the Americas.We operate with distributed teams in time zones ranging from UTC-5 to UTC+2 Our processes comply with international security and privacy standards, such as the European GDPR and U.S. best practices (CCPA/FTC).

2. Data Protection Officer

Focal Point acts as the data controller. To exercise your rights, you can contact us through the site’s form or request to be connected with our Privacy Officer.

Responsible: Privacy Department - Focal Point
Contact: Website contact form

3. What personal data do we collect?

Contact data: name, email, phone, company
Professional information: position, industry, website
Technical data: IP, browser, operating system, device, approximate geolocation
Site interaction: time on page, clicks, forms
Submitted content: briefs, messages, files
Cookies and tags: preferences, anonymous ID

4. Purpose of data processing

Respond to inquiries and send personalized proposals
Execute contracted projects and provide ongoing support
Improve user experience and site navigation
Fulfill legal and contractual obligations
Send valuable communications and educational content (with prior consent)

5. Legal basis

User consent
Execution of a contract or pre-contractual measures
Compliance with legal obligations
Legitimate interest (analytics, security, service quality)

6. Data recipients

Certified technology providers (Google, AWS, Webflow, Notion, etc.)
Advertising and analytics platforms (Meta, GA4, Hotjar)
Public authorities when legally required

We never share, sell, or rent your personal data to third parties.

7. International transfers

If your data is transferred outside the EEA (for example, to the U.S.), we will do so under:

Standard Contractual Clauses approved by the European Commission
Adequacy mechanisms (e.g., EU-US Data Privacy Framework)
Encryption and secure storage on audited servers

8. Data retention period

Unconverted leads: up to 18 months
Clients: duration of the relationship + 5 years
Forms: 12 months
Accounting documentation: minimum 5 years according to tax law

9. Exercising your rights

You may exercise your rights to:

Access, rectification, erasure, and objection
Data portability
Restriction of processing
Withdraw consent at any time

We will only need to verify your identity. We respond within 10 business days.

10. Data security

We apply high-level technical and organizational measures:

SSL encryption and secure connections
Automatic and redundant backups
Servers located in certified data centers
Role-based access control and internal monitoring

What are cookies?

Small text files stored in your browser when you visit our website. They allow us to remember you, personalize your experience, and analyze how you use the site.

Why do we use them?

Technical operation of the website
Usage analytics (Google Analytics 4, Hotjar)
Ad personalization (Meta Pixel, Google Ads)
Language, forms, and navigation preferences

Types of cookies

Type	Purpose	Example
Strictly necessary	Basic site operation	Session cookies, authentication
Functional	User preferences	Language, saved forms
Analytics	Usage metrics	GA4, Hotjar
Advertising	Remarketing and personalization	Meta Pixel, Google Ads
Third-party	Embedded external services	YouTube, social buttons

Management

Upon entering the site, you can accept, reject, or configure cookies.
You can modify your consent at any time via the link “Legal information you won’t read” in the site footer.

International transfers

Cookies from services hosted in the U.S. comply with the EU-US framework or Standard Contractual Clauses.

Your preferences are stored for 12 months. You may change or revoke them at any time.

12. Changes to this privacy policy

Focal Point reserves the right to modify this policy to reflect legal, technical, or service changes.

Any modifications will be announced via a highlighted banner and updated on this page with a visible date.