Summary
- We collect business contact details you send us, information about your use of our website and client portal, and cookie data only as your choices allow.
- We do not sell personal information for money. We use advertising and analytics cookies only with your consent, and we honor Global Privacy Control signals.
- Our engineering team works through our affiliate in Vietnam, so your information may be processed in the United States and Vietnam.
- Data we process for clients under a services agreement is governed by that agreement, not this policy.
1. Who we are
Stravo LLC ("Stravo," "we," "us") is a Florida limited liability company located at 400 N. Tampa St., Suite 1550, Tampa, FL 33602. Stravo delivers engineering services with its wholly owned affiliate, Stravo Vietnam Company Limited, in Ho Chi Minh City, Vietnam. Stravo LLC is responsible for the personal information described in this policy.
2. Scope
This policy covers personal information we collect through stravolabs.com, our inquiry and contact forms, our client portal, email and other business communications, and events.
It does not cover personal information we process on behalf of clients while providing engineering, data or audit services. In that role we act as a service provider or processor, and that information is governed by the client's agreement with us, including any data processing or business associate agreement. If you are a client's customer, patient or user, please contact that organization with privacy questions.
3. Information we collect
Information you provide
- Contact and business details submitted through our forms: name, work email, company, organization type, project needs, timeline and message.
- Client portal account details: name, work email, role, organization and authentication records.
- Information in emails, calls and meetings with us.
Information collected automatically
- Device and log data, such as IP address, browser type, pages viewed, referring URL and timestamps.
- Cookie and similar technology data, subject to your choices (see Section 5).
- Portal security logs, including sign-ins and access events.
Please do not submit sensitive information through our website. This includes protected health information, patient or student records, financial account numbers, government identifiers, or confidential information belonging to others. We will arrange a secure method if an engagement requires it.
4. How we use information
- To respond to inquiries, scope work and provide our services.
- To operate the client portal, authenticate users and show project status.
- To secure our systems, prevent fraud and misuse, and keep audit records.
- To understand and improve our website, with your consent where required.
- To send business communications you have requested or, where permitted, marketing you can opt out of at any time.
- To comply with law and enforce our agreements.
Where the EU or UK GDPR applies, we rely on these legal bases: performing a contract or taking steps at your request before one; our legitimate interests in responding to business inquiries, running and securing our business, and improving our services; your consent, for non-essential cookies and certain marketing; and compliance with legal obligations.
5. Cookies and tracking
We use three categories of cookies and similar technologies:
- Strictly necessary: required for security, load balancing, form submission and portal sign-in. These are always on.
- Analytics: help us understand how the site is used. Off until you opt in.
- Marketing: measure campaigns and, where you allow it, show relevant ads on other sites. Off until you opt in.
Non-essential cookies load only after you consent through our cookie banner. You can change your choices at any time using the "Cookie Preferences" link in our footer. We treat a valid Global Privacy Control (GPC) signal from your browser as a request to opt out of the sale or sharing of personal information and of targeted advertising for that browser.
6. How we share information
- Our affiliate: Stravo Vietnam Company Limited, which performs engineering and support work for us.
- Service providers: vendors that host our website, run our CRM and email, provide analytics, and secure our systems, under contracts limiting their use of the information.
- Engineering partners: partner firms engaged on a client project, only as needed for that project and under confidentiality obligations.
- Legal and safety: when required by law or to protect rights, safety and security.
- Business transfers: in connection with a merger, acquisition or sale of assets.
We do not sell personal information for money. If you consent to marketing cookies, certain advertising partners may receive device and usage data, which some laws consider "sharing" or "selling." You can opt out at any time through "Your Privacy Choices."
7. International transfers
We are based in the United States and our engineering affiliate is in Vietnam. Your information may be transferred to, stored in and processed in those countries, which may have data protection laws different from yours. Where required, we use appropriate safeguards for these transfers, such as standard contractual clauses, and we comply with applicable cross-border transfer requirements.
8. Retention
We keep inquiry information for up to [24 months] after our last interaction unless a business relationship follows. We keep client relationship and portal records for the life of the engagement and as long afterward as our agreements, legal obligations and legitimate business needs require. Cookie data is kept for the periods shown in our cookie settings.
9. Security
We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, role-based access controls and access logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your rights and choices
Depending on where you live, you may have the right to:
- Know about and access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information.
- Receive a portable copy of your information.
- Opt out of the sale or sharing of personal information and of targeted advertising.
- Object to or restrict certain processing, and withdraw consent at any time.
- Appeal our decision on your request.
To make a request, email privacy@stravolabs.com or use Your Privacy Choices. We will verify your request using information we already hold, and you may use an authorized agent where the law allows. We will not discriminate against you for exercising your rights. If you are in the EU or UK, you may also complain to your local data protection authority. To opt out of marketing emails, use the unsubscribe link in any email.
11. Children
Our website and services are intended for businesses and are not directed to anyone under 16. We do not knowingly collect personal information from children.
12. Changes
We may update this policy. We will post the new version here with a new "Last updated" date and, for material changes, give additional notice where required.
13. Contact us
Stravo LLC, Attn: Privacy, 400 N. Tampa St., Suite 1550, Tampa, FL 33602 · privacy@stravolabs.com