Privacy Policy

Morlune Quantara ("Company," "we," "our," or "us") is committed to protecting the privacy and confidentiality of personal information we collect in connection with our operational consulting and process improvement services. This Privacy Policy describes how we collect, use, disclose, store, and protect personal information obtained from clients, prospective clients, website visitors, and other individuals who interact with us through our website located at morlunequantara.com and through our service engagements.

This Privacy Policy applies to all personal information we process in connection with our business operations, including information provided directly by individuals and information collected automatically through our digital properties. By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

We are headquartered in Boulder, Colorado, United States, and our practices are governed primarily by applicable United States federal and state privacy laws, including the Colorado Privacy Act (CPA) to the extent applicable to our operations.

We collect personal information through several means, including information you provide to us directly, information collected automatically when you visit our website, and information obtained in the course of delivering our consulting services.

Information You Provide Directly:

• Contact and identification information: your name, job title, company name, business address, email address, and telephone number
• Inquiry and communication content: the substance of messages, questions, or requests you submit through our contact forms, email, or other communications channels
• Engagement-related information: information about your organization's operational structure, internal workflows, personnel roles, and business processes that you share with us as part of a consulting engagement
• Billing and administrative information: information necessary to process service agreements, invoicing, and payment, which may be handled through third-party platforms
• Feedback and correspondence: any feedback, testimonials, or communications you submit regarding our services

Information Collected Automatically:

• Device and browser information: IP address, browser type and version, operating system, device identifiers
• Usage data: pages visited, time spent on pages, navigation paths, links clicked, and referring URLs
• Cookie data: information stored by cookies and similar tracking technologies as described in our Cookie Policy
• Log data: server logs that record information about your interaction with our website

We use personal information only for legitimate business purposes and only to the extent necessary for those purposes. Specifically, we use the information we collect for the following purposes:

• To respond to inquiries and communicate with prospective and current clients regarding our services and engagement scope
• To deliver, manage, and improve our operational consulting and process improvement services
• To prepare assessments, recommendations, documentation, and other deliverables as part of client engagements
• To manage our business operations, including billing, invoicing, and administrative functions
• To improve and maintain the functionality, security, and content of our website
• To comply with applicable legal obligations, regulations, and enforceable governmental requests
• To protect the rights, property, and safety of the Company, our clients, and others
• To analyze aggregate usage patterns for business intelligence purposes, using data that does not identify individual users

We do not use personal information for automated decision-making that produces legal or similarly significant effects on individuals, and we do not engage in the sale of personal information to third parties for their independent marketing purposes.

We do not sell, rent, or trade personal information to third parties for commercial purposes. We may share personal information in the following limited circumstances:

• Service Providers: We may share information with third-party vendors and service providers who assist us in operating our business, such as website hosting providers, email delivery platforms, project management tools, and billing processors. These parties are contractually obligated to use personal information only as directed by us and in accordance with this Privacy Policy.
• Legal Requirements: We may disclose information when required to do so by law, legal process, subpoena, court order, or government authority, or when we believe in good faith that disclosure is necessary to protect our rights, prevent fraud, or respond to a safety emergency.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of our assets, personal information may be transferred as part of that transaction, subject to the protections described in this Privacy Policy.
• Consent: We may share information with your express consent or at your direction.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including for the duration of our client relationship and for a reasonable period thereafter to allow us to meet our legal, contractual, accounting, and reporting obligations.

Specifically, we generally retain client engagement records and associated personal information for a minimum of five years following the conclusion of a client engagement, unless a longer retention period is required by applicable law or by the nature of the services provided. Website usage data and analytics information are retained for shorter periods consistent with the purposes for which they were collected.

When personal information is no longer required, we take reasonable steps to securely delete, destroy, or de-identify such information in accordance with our internal data management procedures.

We implement and maintain reasonable and appropriate administrative, technical, and physical security measures designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to, access controls, encryption of data in transit using industry-standard protocols, and regular review of our security practices.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

Depending on your location and applicable law, you may have certain rights regarding your personal information. Colorado residents may have rights under the Colorado Privacy Act, which may include:

• The right to access the personal information we hold about you
• The right to correct inaccurate personal information
• The right to request deletion of your personal information, subject to certain exceptions
• The right to data portability where technically feasible
• The right to opt out of certain processing activities

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to verifiable requests within the timeframes required by applicable law. We may need to verify your identity before processing your request and may be unable to fulfill requests where an exception applies.

Our website may contain links to third-party websites or resources. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any third-party sites you visit.

Our website and services are directed at business professionals and organizations and are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information as promptly as practicable.

We may update this Privacy Policy periodically to reflect changes in our practices, applicable law, or our business operations. When we make material changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.