GDPR Notice

How we handle your personal data when you visit our site from the European Union.

Who we are and our lawful basis

We are AI Consulting Orlando, an independent AI advisory and implementation firm based in Orlando, Florida. We help small and mid-size businesses in Central Florida use AI in practical, honest ways. This notice applies if you are in the European Union or European Economic Area and visit our website or interact with us.

Our lawful basis for processing your personal data is legitimate interest for most activities, such as improving our services and communicating with prospects. For direct marketing emails or cookies that are not strictly necessary, we rely on consent, which you can withdraw at any time.

What personal data we collect

We collect only the data you provide directly: name, email address, and any message you include when you use our contact form at info@aiconsultingorlando.net. We also collect standard web analytics data (IP address, browser type, pages visited) through cookies, but only with your consent via our cookie banner.

We do not collect sensitive categories like health or political opinions. We do not buy or sell personal data, and we take a lot of care with what we hold.

Your rights under GDPR

You have the following rights regarding your personal data:

• Right to access – You can ask us to confirm what data we hold about you and get a copy.
• Right to rectify – You can ask us to correct any inaccurate or incomplete data.
• Right to erase – You can ask us to delete your data, subject to legal retention obligations.
• Right to restrict processing – You can ask us to limit how we use your data.
• Right to data portability – You can request a copy of your data in a machine-readable format.
• Right to object – You can object to processing based on legitimate interest, including direct marketing.

To exercise any of these rights, simply email us at info@aiconsultingorlando.net. We will respond within 30 days. A property management company in Kissimmee contacted us last year because thier EU guests were asking about GDPR compliance, and we helped them map out thier data flows and set up a simple consent banner. They feel much better knowing they’re handling guest data properly.

International data transfers

Our servers and operations are based in the United States. When we transfer your personal data from the EU to the US, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission. these clauses ensure your data is protected to EU standards. We also use a Data Processing Agreement (DPA) with our third-party services, including our web hosting and email provider.

Data retention

We keep your personal data only as long as necessary for the purpose it was collected. For example, email inquiries are kept for 2 years after the last contact, then deleted. Web analytics data is anonymized after 14 months. Our approach recieve input from privacy experts who make sure we’re doing this right.

Your right to complain

If you believe we have processed your data unlawfully, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). In the EU, it is the data protection authority of your country of residence.

Updates to this notice

We may update this notice from time to time. The latest version will always be on this page, with a revision date at the top. If we make material changes, we will notify you by email if we have your contact information.

If you have any questions, just email us at info@aiconsultingorlando.net.

We never sell your personal data. Period.

You can withdraw your consent any time by emailing us.

Our DPO is reachable at info@aiconsultingorlando.net.

Frequently asked questions

What is the lawful basis for processing my data?

We rely on legitimate interest for most activities, like improving our services and responding to inquiries. For marketing emails and non-essential cookies, we ask for your consent.

How long do you keep my personal data?

We keep email inquiries for 2 years after the last contact. Web analytics data is anonymized after 14 months. You can ask us to delete it sooner.

Can I access the data you hold about me?

Yes. Just email info@aiconsultingorlando.net with your request, and we will provide a copy within 30 days.

Do you transfer my data outside the EU?

Yes, we are based in the US. We use Standard Contractual Clauses (SCCs) to ensure your data is protected to EU standards.