Privacy Policy
Your privacy and data protection are our priority
Data Protection Commitment
StatConsult is firmly committed to protecting the privacy and confidentiality of personal information provided by our clients and website visitors. This Privacy Policy outlines our practices regarding the collection, use, storage, and protection of your personal data in connection with our statistical consulting services.
We adhere to applicable data protection laws and regulations, including international best practices for data privacy and security. Our approach to data protection is built on the principles of transparency, purpose limitation, data minimization, and individual rights protection.
By using our website or engaging our statistical consulting services, you acknowledge that you have read, understood, and agree to the collection and use of information in accordance with this Privacy Policy.
Information We Collect
Personal Identification Information
We collect personal information that you voluntarily provide when you contact us, request our services, or interact with our website. This information is essential for providing professional statistical consulting services.
- Full name and professional title or academic affiliation
- Contact information for service delivery and communication
- Project descriptions and research requirements
- Institutional or organizational affiliations relevant to consulting services
- Professional background information necessary for service customization
Research and Project Data
In the course of providing statistical consulting services, we may receive and process research data, datasets, and project materials that you share with us for analysis purposes.
- Research datasets and statistical data files for analysis
- Project specifications, research questions, and analytical requirements
- Academic or institutional research protocols and methodological frameworks
- Publication drafts, research proposals, and statistical reports
- Survey instruments, questionnaires, and data collection materials
Technical and Usage Information
We automatically collect certain technical information when you visit our website to improve our services and ensure website security and functionality.
- Browser type, version, and operating system information
- IP address and geographic location data for security purposes
- Website navigation patterns and page interaction statistics
- Device information and screen resolution for responsive design optimization
- Referral sources and search terms used to find our services
How We Use Your Information
Service Delivery
Provide professional statistical consulting services tailored to your specific research needs and analytical requirements.
- Project planning and consultation delivery
- Statistical analysis and methodology implementation
- Research support and analytical guidance
Communication
Maintain professional communication regarding your projects, service updates, and important information related to your consulting engagement.
- Project status updates and progress reports
- Technical consultations and methodology discussions
- Service-related notifications and communications
Legal Basis for Data Processing
We process your personal data based on the following legal grounds, ensuring compliance with applicable data protection regulations:
Consent
Voluntary provision of information for consulting services
Contract
Performance of statistical consulting agreements
Legitimate Interest
Website functionality and service improvement
Data Protection and Security
Security Measures
We implement comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security framework includes multiple layers of protection designed specifically for sensitive research data.
Technical Safeguards
- Advanced encryption protocols for data transmission and storage
- Secure server infrastructure with regular security updates
- Multi-factor authentication for system access
- Regular security audits and vulnerability assessments
Organizational Controls
- Strict access controls and authorization procedures
- Employee training on data protection and confidentiality
- Data handling protocols and incident response procedures
- Regular compliance monitoring and policy updates
Data Retention and Disposal
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or resolve disputes. Our data retention practices are guided by industry standards and regulatory requirements.
Retention Periods
- Contact Information: Retained for the duration of our professional relationship plus 3 years for potential future collaborations
- Project Data: Securely stored during project execution and retained for 5 years for quality assurance and potential follow-up consultations
- Website Analytics: Aggregated data retained for 2 years for service improvement purposes
- Legal Documentation: Maintained according to applicable legal and professional requirements
Data Sharing and Disclosure
Confidentiality Principle
We do not sell, trade, or otherwise transfer your personal information to third parties without your explicit consent, except as described in this Privacy Policy. Client confidentiality is fundamental to our statistical consulting practice, and we maintain strict controls over data sharing.
Permitted Disclosures
- With your explicit written consent for specific purposes
- To comply with legal obligations or court orders
- To protect our legal rights or respond to legal claims
- In emergency situations to protect health and safety
- To authorized service providers under strict confidentiality agreements
Service Providers
- Secure cloud storage providers with data processing agreements
- Professional software vendors for statistical analysis tools
- IT security services for data protection and system monitoring
- Legal and compliance consultants when required
- Payment processors for billing and financial transactions
Your Rights and Data Management
Access and Transparency
You have the right to know what personal data we hold about you and how it is processed.
- Request copies of your personal data
- Information about data processing purposes
- Details about data sharing and storage
Correction and Update
You can request corrections to inaccurate or incomplete personal information we hold about you.
- Update contact information and preferences
- Correct factual errors in your data
- Add missing information to your profile
Data Portability and Deletion
You have the right to receive your personal data in a structured, commonly used format and to request deletion of your personal information under certain circumstances.
Data Export
Download your data in portable formats
Data Deletion
Request removal of personal information
Processing Restriction
Limit how we process your data
Exercising Your Rights
To exercise any of these rights, please contact us through our website contact form. We will respond to your request within the timeframes required by applicable data protection laws, typically within 30 days.
Important: Some rights may be limited by legal or professional obligations, such as requirements to retain certain records for regulatory compliance or legitimate business purposes. We will explain any limitations when responding to your requests.
International Data Transfers
As part of our statistical consulting services, we may transfer personal data to countries outside of Sri Lanka for processing and storage purposes. We ensure that such transfers are conducted in compliance with applicable data protection laws and with appropriate safeguards in place.
Transfer Safeguards
- Standard contractual clauses approved by data protection authorities
- Adequacy decisions recognizing equivalent levels of data protection
- Binding corporate rules for multinational service providers
- Explicit consent for specific international transfers when required
- Regular monitoring of international data protection developments
Policy Updates and Changes
We may update this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or service offerings. Material changes to this policy will be communicated through prominent notices on our website and direct communication with active clients.
We encourage you to review this Privacy Policy regularly to stay informed about our data protection practices. The "Last updated" date at the top of this policy indicates when the most recent changes were made.
Questions and Data Protection Inquiries
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need assistance with privacy-related concerns, please contact us. We are committed to addressing your inquiries promptly and transparently.