Privacy Policy | CloudWeld

Compliance & Trust

Your Privacy Matters

Last updated December 2, 2025

Your privacy and data security are our top priorities.

This policy explains the data we collect, how we use it, and the safeguards we maintain to protect your organisation.

Information We Collect

We collect information that you share directly with us as part of sales conversations, discovery workshops, or engagement delivery.

Depending on the services you request, the information may include business contact details and limited technical context needed to provide advice.

• Name, email address, phone number, and professional role
• Company name, industry, and relevant business objectives
• Communications exchanged with our consultants and support teams
• Technical information about your infrastructure when you grant explicit access

How We Use Your Information

We process the information we collect only to deliver trusted services and maintain a high-quality client experience.

• Operate, maintain, and improve our consulting and managed services
• Communicate with you about projects, engagements, and support requests
• Share resources, updates, and event invitations where you have opted in
• Analyse aggregated usage patterns so we can enhance our delivery playbooks

Legal Foundations

We rely on contractual necessity, legitimate interest, and explicit consent as appropriate under applicable data protection laws including GDPR and CCPA.

Data Security

CloudWeld implements administrative, technical, and physical safeguards aligned with SOC 2 Type II controls. We encrypt data in transit, enforce least-privilege access, and complete regular security reviews across our tooling and cloud environment.

Data Sharing

We do not sell or rent personal information. Limited sharing occurs only when it is required to deliver services or comply with the law.

• Service providers under contract who process data on our behalf with equivalent safeguards
• Professional advisors such as auditors or legal counsel when necessary
• Government authorities or regulators when disclosure is required to meet legal obligations

Data Retention

We keep personal data only for as long as it is needed to deliver services, meet contractual requirements, or satisfy legal, accounting, or reporting obligations. When data is no longer required, we securely delete or anonymise it.

Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal information. You can exercise these rights by contacting us and we will respond within applicable regulatory timeframes.