Privacy Policy
Last updated: March 13, 2026
1. Introduction
Oliva International Tech Solutions ("Oliva Tech," "Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use our website, platform, and services.
This policy applies to all visitors, clients, and users of our website and services, whether located in the United States, Canada, or elsewhere. By using our services, you consent to the data practices described in this policy.
2. Information We Collect
We may collect the following categories of information:
- Contact Information: Name, email address, phone number, company name, job title, and mailing address.
- Business Information: Industry, company size, business processes, pain points, current tools, budget range, and other information you provide through intake forms or during engagements.
- Technical Information: IP address, browser type and version, device type, operating system, referring URL, and access timestamps.
- Usage Data: Pages visited, features used, time spent on pages, and interaction patterns on our website and platform.
- Communication Records: Emails, messages, and other correspondence between you and the Company.
- Payment Information: Billing address and payment details (processed through secure third-party payment processors; we do not store full credit card numbers).
3. How We Collect Information
We collect information through the following means:
- Website Forms: Intake forms, contact forms, newsletter subscriptions, and career applications submitted through our website.
- Email Correspondence: Direct communications between you and our team.
- Service Engagements: Information gathered during the course of providing consulting services, including process documentation, stakeholder interviews, and data analysis.
- Cookies and Analytics: Automated collection of technical and usage data through cookies and similar technologies.
- Third-Party Sources: Publicly available business information, professional networking platforms, and industry databases used for lead qualification.
4. How We Use Your Information
We use collected information for the following purposes:
- To provide, deliver, and improve our consulting services;
- To communicate with you about your engagement, inquiries, or account;
- To process invoices and payments;
- To send relevant updates, insights, and marketing communications (with your consent);
- To comply with legal obligations and regulatory requirements;
- To protect against fraud, unauthorized access, and security threats;
- To analyze usage patterns and improve our website and platform;
- To evaluate job applications and manage recruitment;
- To enforce our Terms of Service and protect our rights.
5. Legal Basis for Processing
We process personal information based on one or more of the following legal bases:
- Consent: When you voluntarily provide information through forms or opt-in to communications.
- Contract Performance: When processing is necessary to fulfill our obligations under a service agreement or engagement.
- Legitimate Interest: When processing is necessary for our legitimate business interests, such as improving services, marketing, and fraud prevention, provided these interests do not override your fundamental rights.
- Legal Obligation: When processing is required to comply with applicable laws, regulations, or legal proceedings.
6. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties.
We may share your information in the following limited circumstances:
- Service Providers: Trusted third-party vendors who assist in delivering our services (e.g., cloud hosting, email services, analytics), bound by contractual confidentiality obligations.
- Payment Processors: Secure payment processing services for handling billing transactions.
- Professional Advisors: Attorneys, accountants, and auditors acting in their professional capacity, bound by professional obligations of confidentiality.
- Microsoft 365 Integration: When using our platform's Microsoft 365 integration features, data is handled in accordance with Microsoft's Privacy Statement and our own data handling practices.
- Legal Requirements: When required by law, regulation, court order, subpoena, or government investigation, or when necessary to protect the rights, property, or safety of the Company, our clients, or the public.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your information may be transferred to the successor entity.
7. Data Retention
We retain personal information for the duration of our business relationship with you, plus an additional seven (7) years for legal, tax, and compliance purposes. Specific retention periods may vary based on:
- The nature of the information and the purpose for which it was collected;
- Legal, regulatory, and contractual obligations;
- Statute of limitations for potential legal claims.
Upon request, we will delete your personal information within thirty (30) days, subject to any legal or regulatory requirements that mandate continued retention.
8. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:
- Encryption of data in transit using TLS/SSL protocols;
- Role-based access controls limiting data access to authorized personnel;
- Regular security assessments and vulnerability reviews;
- Employee training on data protection and security practices;
- Secure development practices for our platform and applications;
- Incident response procedures for potential data breaches.
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
Breach Notification: In the event of a data breach that affects your personal information, we will notify you and the relevant regulatory authorities within the timeframes required by applicable law, including: thirty (30) days under the Florida Information Protection Act (FIPA), without unreasonable delay under PIPEDA, and seventy-two (72) hours to supervisory authorities where GDPR applies. Notification will include the nature of the breach, the categories of data affected, and the measures taken to address it.
9. Cookies & Tracking Technologies
Our website uses the following categories of cookies:
- Essential Cookies: Required for the basic operation of the website, including session management and security features. These cannot be disabled.
- Analytics Cookies: Used to understand how visitors interact with our website. These are only set with your consent and help us improve the user experience.
We do not use third-party advertising cookies or tracking pixels. You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the website.
10. Your Rights — United States
Depending on your state of residence, you may have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete personal information.
- Right to Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Right to Opt-Out: Opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.
California Residents (CCPA/CPRA): In addition to the rights above, California residents have the right to: (a) know what personal information is collected, used, and shared; (b) request deletion of personal information; (c) opt out of the "sale" or "sharing" of personal information (note: we do not sell personal information); (d) non-discrimination for exercising privacy rights. To submit a verifiable consumer request, contact us using the information in Section 16.
Florida Residents (FIPA/FDBR): Florida residents have rights under the Florida Information Protection Act, including the right to be notified in the event of a data breach affecting their personal information.
11. Your Rights — Canada (PIPEDA)
If you are a Canadian resident, you have the following rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation:
- Right to Knowledge: You have the right to know what personal information we collect about you and why.
- Right to Access: You may request access to the personal information we hold about you. We will respond to your request within thirty (30) days.
- Right to Challenge Accuracy: You may challenge the accuracy and completeness of your personal information and request amendments.
- Right to Withdraw Consent: You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. We will inform you of the implications of withdrawal.
- Right to Complain: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe your privacy rights have been violated.
We are committed to compliance with PIPEDA's ten fair information principles: Accountability, Identifying Purposes, Consent, Limiting Collection, Limiting Use/Disclosure/Retention, Accuracy, Safeguards, Openness, Individual Access, and Challenging Compliance.
12. Artificial Intelligence and Automated Processing
In the course of providing our services, we may use artificial intelligence (AI) and machine learning technologies, including third-party AI services, for the following purposes:
- Lead Qualification: Automated research and scoring of prospective client inquiries to improve response quality and speed.
- Content Generation: AI-assisted drafting of communications, reports, and marketing materials, subject to human review and approval before delivery.
- Process Analysis: AI-assisted analysis of business processes and automation opportunities during consulting engagements.
Important safeguards:
- No automated decision-making is used that produces legal or similarly significant effects on individuals without human oversight.
- Client data shared with third-party AI services is limited to what is necessary for the specific task and is subject to the data processing agreements we maintain with those providers.
- We do not use client data to train AI models. Data submitted to AI services is processed only for the immediate request and is not retained by the AI provider for model improvement.
- All AI-generated outputs are reviewed by qualified personnel before being delivered to clients or used in any material business decision.
You have the right to request information about any automated processing applied to your data. Contact us using the information in Section 17 to exercise this right.
13. International Data Transfers
Our primary operations and data storage are located in the United States. If you are accessing our services from outside the United States, including from Canada, please be aware that your personal information may be transferred to, stored, and processed in the United States.
For Canadian clients, we acknowledge that PIPEDA requires that personal information transferred to another jurisdiction for processing be subject to comparable protections. We implement appropriate contractual safeguards and security measures to protect your data regardless of where it is processed.
14. Children's Privacy
Our services are not directed to individuals under the age of sixteen (16). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us immediately.
15. Third-Party Links
Our website may contain links to third-party websites, services, or platforms that are not owned or controlled by the Company. We are not responsible for the privacy practices, content, or security of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Material changes will be communicated through:
- A prominent notice on our website;
- Email notification to affected individuals, where practical;
- Updated "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
17. Contact Us
For questions, concerns, or requests related to this Privacy Policy or your personal information, please contact:
Oliva International Tech Solutions
Privacy Inquiries
3530 Mystic Pointe Drive, Suite 2403, Aventura, FL 33180
United States
Email: info@olivainternationaltech.com
General: info@olivainternationaltech.com
We will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) days.