Cambria Privacy Statement

1. COLLECTION OF YOUR PERSONAL INFORMATION

Personal information is any information that can be used to identify an individual, and may include, but is not limited to, name, e-mail address, postal or other physical address, title, occupation, and other information required to provide a service, deliver a product, or carry out a transaction you have requested. You may provide personal information to us under the terms of a contractual agreement with us or through your other authorized use of our Site. We do not collect or retain personal information that you provide to us for any purpose other than as described in this Privacy Statement to provide our services to you, or as otherwise agreed in our contractual agreement with you. You can choose not to provide certain personal information, however, by doing so you may not be able to fully utilize our Site and Cambria’s services.

3. UNSUBSCRIBING

Subscriptions to our newsletter can be managed through our Site. In addition, each e-mail newsletter includes instructions on how you can unsubscribe from that particular mailing.

5. SHARING YOUR PERSONAL INFORMATION

We do not sell, trade, exchange, or rent your personal information to third-parties for marketing purposes. Personal information obtained through usage of our online systems are never used for marketing purposes.

Personal information of users who have contacted us regarding our products and services, opted-in to receive information via our marketing websites, or registered for free usage of our online systems may be used to send other information that we believe is of interest to you. If you do not wish to receive e-mail from us, you may “opt-out” by using the unsubscribe mechanism in any of our emails.

We may share your personal information within Cambria for purposes of data processing or storage. We may also share your personal information with authorized third-party agents or contractors in order to provide a requested service or transaction. For example, if we need to ship something to you, we must share your name and address with a shipping company. We only provide third-party agents with the minimum amount of personal information necessary to complete the requested service or transaction. We may also transfer your personal information to third parties acting on our behalf for the purposes relating to the operation of the Site, including processing or storage.

We may respond to subpoenas, court orders, or legal process by disclosing your personal information and other related information, if necessary. We also may use your personal information we collect to establish or exercise our legal rights or defend against legal claims, or to address a security or technical issue within our site. In such cases we will only share as much information as is necessary to address these needs.

We may collect and possibly share personal information and any other additional information available to us in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of Cambria’s Terms of Use, or as otherwise required by law.

While navigating Cambria’s website you may be directed to content or functionality that is hosted by a third party supplier, not on www.cambriaconsulting.com. When information is collected on behalf of Cambria exclusively, Cambria’s Privacy Statement will be referenced on the site and will govern how your information is used. For other, non-Cambria sites, the site owner’s privacy policy will be referenced.
We may sell, assign, or transfer your personal information to a third party in the event of a sale or transfer of our business or the Site to a third party, by merger, sale of stock or assets, or a reorganization.

We will ask you for your opt-in consent to share your personal information with a third party for any other reason than described herein.

7. EU-US DATA PRIVACY FRAMEWORK (EU-U.S. DPF)

Cambria complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) as set forth by the U.S. Department of Commerce. Cambria has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Cambria is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF Cambria commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF should first contact Cambria at: info@cambriaconsulting.com. Cambria commits to cooperate and comply with the advice of the panel established by the EU data protection authorities (DPAs) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF. Cambria is obligated to arbitrate claims and follow the terms as set forth in Annex I of the DPF Principles, provided that an individual has invoked binding arbitration by delivering notice to your organization and following the procedures and subject to conditions set forth in Annex I of Principles.

As explained in Paragraph 5, we sometimes provide personal information to third parties to perform services on our behalf. If we transfer personal information received under the EU-U.S. DPF to a third party, the third party’s access, use and disclosure of personal data must also be in compliance with our EU-U.S. DPF obligations, and we will remain liable under the EU-U.S. DPF for any failure to do so by the third party unless we prove that we are not responsible for the event giving rise to the damage.

You can review our EU-U.S. DPF registration here. We may be required to disclose personal information that we handle under the EU-U.S. DPF in response to lawful requests by public authorities, including but not limited to state and federal agencies, with respect to matters of national security and other law enforcement requirements.

You have the right to access, erase, correct, update, or complete your personal data, or to request no further contact from Cambria. Additionally, to the extent permittable under applicable laws you have the right to request the transfer of your personal data to a third party, to object to our use of your personal information, or to ask us to restrict our processing of your personal information.  You can also withdraw your consent at any time, however it will not affect any processing performed prior to your withdrawal, nor will it affect processing on the basis of other lawful grounds. Should you request that we delete your personal information, please note that we may keep a minimal amount of data for record keeping purposes (for example, to record your wish for your data to be deleted). If you wish to exercise any of these rights, you may contact info@cambriaconsulting.com. Additionally, you may bring a complaint to the relevant data protection authority about our processing of your personal information. 

If you are a California resident, you have certain rights under the California Consumer Privacy Act of 2018 (“CCPA”). Specifically, you may request the categories of personal data we have collected, the sources of such personal information, and the specific pieces of personal data we have collected about you. If applicable, you may also request the business or commercial purpose we have for collecting your personal data, the categories (outlined above) of your personal data we have shared or disclosed, and the categories of third parties to whom we have shared or disclosed such personal data. You also have the right to request the deletion of your personal data. To exercise any of your rights, you may contact the email address above (info@cambriaconsulting.com), or you may call us at 1 (844) 390-CCPA (1-844-390-2272). We will not discriminate against you for exercising any of your rights pertaining to your personal data. Should you request that we delete your personal information, please note that we may keep a minimal amount of data for record keeping purposes (e.g. to record your wish for your data to be deleted).

We recommend you take every precaution in protecting your personal information when you are on the Internet. For example, change your passwords often, use a combination of letters and numbers when creating passwords, and make sure you use a secure browser.

9. DATA RETENTION

Cambria will not retain your personal information longer than is necessary to fulfill the purposes for which it was collected or as required by applicable laws or regulations.

11. FORUMS/BLOGS

Cambria’s forums and blogs are public. Please consider this before posting material to them.

13. POLICY UPDATES

Cambria’s Privacy Statement has been recently updated. Last Update: July 2022.