Privacy Policy

1. Introduction

Welcome to Continum. We provide product innovation, security compliance, and AI strategy consulting services to startups and enterprises. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ("Site") or otherwise interact with us.

By using our Site or engaging with our services, you accept the practices described in this policy. If you do not agree with them, please do not use our Site or provide us with your personal data.

2. What information we collect

We may collect the following types of information:

2.1. Information you provide directly to us

• Contact information (e.g., name, email address, telephone number) when you fill out a "Book a Call" or "Start Your Project" form.
• Company or organization information, job title, project details, compliance status, budget, etc., in the course of our service engagement.
• Billing and payment information when you purchase our services (via third-party payment processors).
• Any content you submit (e.g., documents, project briefs, uploaded files) during our service delivery.

2.2. Information automatically collected

• Usage data: IP address, browser type, operating system, referring/exit pages, pages visited, clicks and other interactions on our Site.
• Cookies and similar tracking technologies (see our Cookie Policy).
• Analytics and performance data (e.g., to monitor Site performance, detect security incidents).

2.3. Information from third-parties

We may receive certain information about you from third-party sources (e.g., marketing platforms, business data providers) and combine it with data we already have.

3. How we use your information

We use your information for the following purposes:

• To provide our services: including product innovation, security compliance, and AI strategy consulting frameworks.
• To respond to inquiries: e.g., book a call, send proposals, follow-up communications.
• To manage our business operations: billing, accounting, service delivery, internal analytics, improving our site and services.
• To personalize user experience: tailoring content, communications and offers.
• To ensure security and compliance: detecting/preventing fraud, unauthorized access, maintaining our own compliance obligations (e.g., GDPR, SOC 2, ISO 27001).
• To communicate with you: sending service-related announcements, newsletters (if subscribed), marketing/promotions (where permitted).
• To comply with legal obligations: responding to lawful requests, enforcing terms, preventing misuse.

4. Legal bases for processing (if applicable under GDPR)

If we are subject to European data protection laws (such as the General Data Protection Regulation ("GDPR")), we will rely on one or more of the following legal bases:

• Your consent (you have given permission).
• Performance of a contract (we need to process your data to deliver services).
• Our legitimate interests (for example improving our services, marketing, ensuring security) provided your interests do not override.
• Compliance with a legal obligation.

5. Disclosure of your information

We may disclose your information as follows:

• Service providers & partners: Third-party vendors who perform services on our behalf (e.g., payment processors, hosting providers, analytics, marketing platforms).
• Affiliates: If we have affiliated companies, your data may be shared within the group for business purposes (with appropriate safeguards).
• Business transfers: In connection with any merger, sale, reorganization, acquisition, or other transfer of all or part of our business.
• Legal & regulatory: When required by law or to protect our rights, property or safety, or that of our users.
• With your consent: If you explicitly agree we may share data for other uses.

6. Cross-border data transfers

Because we serve international clients and operate globally, your data may be transferred to, stored, or processed in countries other than your home country. We will ensure appropriate safeguards (such as standard contractual clauses, where applicable) are in place to protect your personal data when transferred internationally.

7. Data security

We implement reasonable technical and organisational measures to secure your information against unauthorized access, disclosure, alteration or destruction. These include encryption, access controls, secure servers and regular security assessments. However, no system can be completely secure, and we cannot guarantee absolute security.

8. Data retention

We will retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we will securely delete or anonymize it.

9. Your rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request erasure of your data (subject to legal or contractual exceptions).
• Restriction: Request restrict processing of your data in certain circumstances.
• Data portability: Receive your personal data in a structured, commonly used format.
• Objection: Object to processing of your personal data where processing is based on legitimate interests or direct marketing.
• Withdraw consent: If you previously gave consent, you may withdraw it (which will not affect processing done before withdrawal).

To exercise any of these rights, please contact us at team@continum.co. We may request identity verification. We may decline requests if permitted by law.

10. Cookies and tracking technologies

We use cookies and similar tracking technologies to collect and use personal information when you visit our site. For example, we use analytics cookies to understand how our site is used and marketing cookies to deliver personalize content. You can set your browser to refuse cookies or to alert you when cookies are being sent. However, some parts of the site may not function properly if you disable cookies.

11. Minors

Our site and services are not directed to children under the age of 16 (or as required by your local law). We do not knowingly collect personal data from minors. If you believe we have collected such data, please contact us and we will take steps to delete it.

12. Third-party links

Our site may contain links to third-party websites, plug-ins and applications. If you click a link to a third-party site, you will be directed away from our site and we have no control over their privacy practices. We encourage you to read the privacy policy of every site you visit.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and update the "Last updated" date. Your continued use of the site after changes means you accept the revised policy.

14. Contact us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at: