PRIVACY POLICY & COOKIE NOTICE

1. Introduction

Lucien Allen Corp. (hereinafter referred to as the "Company," "we," or "us"), an Illinois Corporation, is committed to respecting user privacy. This Policy governs information collected when you access www.lucienallen.com (the "Site") or engage the Company for professional advisory work.

2. International Data Transfers

The Company is headquartered in the United States. Users accessing the Site from the United Kingdom (UK), the European Economic Area (EEA), or other jurisdictions with distinct data protection legislation should expect personal data to be transferred to and processed within the United States.

Legal Basis: Processing activities are predicated upon user consent (specifically for the deployment of cookies) and the Company's legitimate interest in the conduct of global business operations (pertaining to Business-to-Business inquiries).

Safeguards (GDPR/UK Compliant): To ensure the security and lawfulness of transfers of UK/EEA personal data, the Company primarily utilizes the European Commission's Standard Contractual Clauses (SCCs) and the UK's International Data Transfer Agreement (IDTA). While the Company monitors the UK-US Data Bridge framework, we currently rely on SCCs and IDTAs as our primary transfer mechanism. The Company endeavors to maintain data protection standards consistent with the General Data Protection Regulation (GDPR) for all processed data, irrespective of its origin.

3. Information We Collect

• Voluntary Data: This encompasses personal identifiers and business details submitted directly to the Company outside the public Site, including name, email address, company affiliation, and the specifics of an inquiry.
• Automated Data: This comprises technical data gathered by hosting infrastructure, such as Internet Protocol (IP) address, browser type, device information, requested path, and security event data.
• Children’s Privacy: The Site and the Company's advisory work are intended for business professionals. We do not knowingly collect personal data from individuals under the age of 18.

4. Cookie & Tracking Policy

The Site is operated as a public website. It may use essential browser or hosting mechanisms required for security, delivery, and basic operation.

User Control: Users retain the ability to manage browser-level cookie preferences through their web browser settings. If non-essential cookies are introduced later, this notice will be updated accordingly.

5. How We Utilize Your Data

Personal data is utilized for the following purposes:

• To facilitate professional advisory engagements.
• To respond to business inquiries and transmit requested materials.
• To conduct performance analysis and security reviews of the Site.
• To ensure adherence to applicable legal and regulatory obligations (e.g., Illinois and Federal statutes).

6. Disclosure to Third Parties

The Company does not engage in the sale of personal data. Data is shared exclusively with:

• Service Providers: Third-party entities providing essential infrastructure such as hosting, domain, security, email, and professional operations. External providers are contractually bound by confidentiality obligations where applicable.
• Data Processor Compliance: Where required, service providers acting as processors are subject to appropriate Data Processing Agreements and contractual security obligations.
• Legal Requirements: Disclosure may be necessary if mandated by a subpoena, court order, or by a governmental or international law enforcement agency.

7. Your Rights (Global & US)

Depending on the user's geographical location, various data rights may apply, including:

• Access/Portability: The right to request and receive a copy of the personal data held by the Company.
• Correction/Deletion: The right to request the rectification of inaccuracies or the erasure of personal data ("Right to be Forgotten").
• Opt-Out: The right to instruct the Company not to share data for the purpose of cross-context behavioral advertising.
• Preference Signals: The public Site does not currently sell personal data or use cross-context behavioral advertising. Browser-level privacy signals are respected to the extent they apply to the Site's static operation.

To formally exercise these rights, please direct your communication to privacy@lucienallen.com.

8. Data Retention

Hosting and security records are retained according to provider settings and the Company's operational needs. Direct business correspondence is retained for the duration of the established business relationship or as otherwise necessitated by tax, compliance, and legal retention statutes.

9. Contact Us

The Data Controller responsible for the processing of personal data is Lucien Allen Corp, an Illinois Corporation.

Registered Address (for service of process):

Data Protection Email: privacy@lucienallen.com