Privacy Policy & GDPR Compliance Statement.
Last updated: January 2026 • Carmel Web Solutions
1. Overview & Commitment to Privacy
Carmel Web Solutions operates as an enterprise software development agency serving clients across the United States, United Kingdom, European Union, Australia, UAE, and South Africa. We respect your right to privacy and are committed to safeguarding all personal data and commercial information disclosed to our engineering and sales teams.
2. Data We Collect & Lawful Basis
When you initiate a project inquiry, request a scoping estimate, or schedule a technical consultation, we collect the following information:
- Your name, business title, and corporate organization
- Work email address and business telephone number
- Project scope notes, architectural diagrams, and estimated budgets
- Technical server logs and analytics cookies to optimize site performance
The lawful basis for processing this information is our legitimate interest in responding to procurement inquiries and entering into preliminary commercial contracts.
3. European Union & UK GDPR Compliance
In compliance with the General Data Protection Regulation (Regulation (EU) 2016/679) and the UK Data Protection Act 2018, all cross-border data transfers between European entities and Carmel's offshore delivery centers are governed by European Commission approved Standard Contractual Clauses (SCCs).
Our delivery infrastructure enforces multi-factor authentication (MFA), role-based access control (RBAC), TLS 1.3 transport encryption, and workstation segregation to ensure European client data is isolated and protected.
4. Zero Data Selling & Strict Confidentiality
We do not sell, rent, lease, or monetize client or prospect information under any circumstance. All disclosures are treated as confidential commercial information protected by mutual non-disclosure agreements (NDAs).
5. Your Data Rights & Contact Information
Under applicable data protection laws, you retain the right to inspect, update, export, or request the immediate deletion of your personal data. To exercise these rights, please contact our data governance team at: