Privacy Policy
How Acerti Consulting Group collects, uses, and protects personal data — for clients, candidates, and visitors to acerti.com.
This policy explains what personal data Acerti collects when you visit our website, talk to our team, or apply to one of our open roles. It is written for humans first — if a section is not clear, write to privacy@acerti.com and we will rewrite it.
§01Who we are
“Acerti” means Acerti Consulting Group, LLC, a limited liability company incorporated in the State of Delaware, USA, together with its wholly-owned LATAM subsidiaries that employ our consulting workforce locally in Mexico and other Latin American countries.
Acerti is a US-headquartered consulting firm delivering enterprise software, ERP implementations, AI call center, and IT services to clients in the United States and Canada.
For the purposes of GDPR, the UK GDPR, and similar laws, Acerti acts as a controller for data we collect about website visitors, prospective clients, and job applicants, and as a processor for personal data we handle on behalf of our clients during an engagement (covered by our Data Processing Addendum).
§02Data we collect
From website visitors
- IP address, browser type, device type, referring URL
- Pages visited, time on page, navigation events (aggregated analytics)
- Cookies you accept (see §09)
From prospective clients and contacts
- Name, work email, phone number, company name, role
- The content of any message you submit through a contact form
- Communications history once a conversation begins
From job applicants
- Full name, email, phone number
- The role you applied for
- Your CV / resume and any cover letter you attach
- Notes from interview stages, when applicable
We do not knowingly collect special category data (for example, race, health, or political opinions). If you include such information in a CV or a free-text field, we will not use it in our hiring decisions; you can ask us to delete it.
§03How we use your data
- To respond to your enquiry and run any sales conversations that follow
- To deliver, manage, and improve services under a signed engagement (MSA, SOW)
- To process and evaluate job applications
- To send service-related messages (engagement updates, scheduled maintenance)
- To improve acerti.com using aggregated analytics
- To detect, prevent, and respond to security incidents and abuse
- To comply with legal obligations and respond to lawful requests
We do not sell personal data, and we do not use the data of prospective clients or job applicants to train third-party large language models.
§04Lawful basis for processing (GDPR / UK GDPR)
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries from prospective clients | Legitimate interests — running our business |
| Operating client engagements under a signed contract | Performance of a contract |
| Evaluating job applications | Steps prior to entering a contract — at your request |
| Analytics & site improvement | Consent (where required) / legitimate interests |
| Security & fraud prevention | Legitimate interests / legal obligation |
| Marketing emails | Consent (you may opt out at any time) |
§05How long we keep it
- Contact form submissions: 24 months from last interaction.
- Client engagement records: 7 years after the end of the engagement (US tax and audit requirements).
- Job applications: 24 months after the hiring decision, unless you ask us to delete earlier. Hired candidates are migrated to our HR systems.
- Website analytics: aggregated data retained 26 months in Google Analytics; we do not retain individual visit logs beyond 90 days.
- Security logs: 12 months.
§07International data transfers
Acerti is a US company with consulting teams located across Latin America. Personal data we hold may be processed in the United States, Mexico, Colombia, Argentina, Brazil, and other LATAM countries where our staff work.
Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (2021) and the UK International Data Transfer Addendum, supplemented with the technical and organisational measures described in our Security overview.
For Canadian personal information governed by PIPEDA or Quebec Law 25, transfers to the US and LATAM are made under contractual safeguards equivalent to those above.
§08Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (right to erasure)
- Restrict or object to processing
- Receive a copy of your data in a portable format
- Withdraw consent at any time, where processing relies on consent
- Opt out of the sale or sharing of personal data (CCPA / CPRA — Acerti does not sell or share)
- Lodge a complaint with a supervisory authority (e.g. the ICO in the UK, your EEA DPA, or the California Privacy Protection Agency)
To exercise any of these rights, write to privacy@acerti.com. We respond within 30 days. We may ask for proof of identity before acting on a request.
§10How we secure your data
Acerti operates under SOC 2-aligned protocols, with encryption at rest and in transit, single sign-on with multi-factor authentication, zero-trust network access, background-checked staff, and a documented incident-response process. The full overview lives at acerti.com/security.
§11Children
acerti.com is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
§12Changes to this policy
We will post any material changes to this page and, for significant changes, give 30 days’ notice before they take effect. The “last updated” date at the top of the page reflects the most recent revision.
§13Contact
Privacy enquiries
Email privacy@acerti.com. For anything else, write to contact@acerti.com and we will route it.
Delaware, United States of America
With operations in Mexico and across LATAM
Have a question about how we handle your data?
A real person on our team will read your message and reply within one business day.