Privacy Policy

1. Scope

This Privacy Policy applies to personal information collected by Stargazer Consulting (“Stargazer,” “we,” “us,” or “our”) through:

• our website and any pages, forms, or downloadable resources hosted on or linked from it;
• email, phone, scheduling, contact forms, newsletter or mailing list signups, and other marketing interactions;
• client onboarding, sales conversations, statements of work, service delivery, workshops, assessments, readiness engagements, and advisory services;
• security, compliance, governance, risk, privacy, and digital transformation consulting activities; and
• business operations reasonably related to providing, securing, improving, and administering our services.

This policy does not govern personal information processed by our clients where we act solely on their behalf as a service provider, contractor, or processor, except as described in Section 6 below.

2. Information We Collect

2.1 Information you provide directly

We may collect the following categories of personal information when you contact us, engage our services, or interact with our website:

• identifiers and contact details, such as name, company name, job title, email address, phone number, mailing address, and business contact information;
• commercial and engagement information, such as service inquiries, proposal details, contract information, billing contacts, and transaction records;
• communications, such as emails, meeting notes, support inquiries, scheduling details, survey responses, and other correspondence;
• professional information relevant to our services, such as company size, security maturity, compliance goals, technical environment, and operational needs;
• documents and materials you choose to share with us in connection with an assessment, advisory project, or other engagement; and
• marketing preferences, subscription preferences, and event registration details.

2.2 Information collected automatically

When you visit our website, we may automatically collect limited technical and usage information, such as:

• IP address, browser type, operating system, device type, and approximate geolocation derived from IP;
• pages visited, referral source, session activity, timestamps, and interactions with website content; and
• analytics data generated through cookies, pixels, tags, logs, or similar technologies used to understand website performance and user behavior.

2.3 Sensitive information

We do not intentionally seek to collect highly sensitive personal information from website visitors unless it is necessary for a legitimate business purpose and disclosed at the time of collection. In client engagements, we may be exposed to confidential or sensitive business information under contract. Where that occurs, we handle such information according to applicable contractual obligations, access controls, confidentiality requirements, and internal security procedures.

3. How We Use Information

We may use personal information for the following business and commercial purposes:

• to respond to inquiries, schedule calls, and communicate with prospects, clients, partners, and vendors;
• to provide consulting, advisory, assessment, implementation support, training, and related professional services;
• to prepare proposals, statements of work, contracts, invoices, and other business records;
• to authenticate users, protect systems, detect security incidents, prevent fraud, and maintain the confidentiality, integrity, and availability of information;
• to administer our website, monitor usage, improve content, and evaluate service and marketing effectiveness;
• to send newsletters, updates, event information, or other marketing communications where permitted by law or with appropriate consent;
• to comply with legal obligations, enforce our agreements, protect our rights, and support audits, investigations, or dispute resolution; and
• to maintain internal records, perform financial administration, and support operational planning and quality improvement.

4. Legal Bases

Where applicable law requires a legal basis for processing personal information, we rely on one or more of the following:

• Contract: to take steps at your request before entering into a contract and to perform our contractual obligations.
• Legitimate interests: to operate, secure, improve, and market our business in ways that are proportionate and expected in a B2B consulting context.
• Consent: where consent is required, including for certain marketing communications or optional cookies and tracking technologies.
• Legal obligation: to comply with applicable law, lawful requests, tax rules, accounting obligations, and other regulatory requirements.

5. Disclosures

We may disclose personal information to the following categories of recipients, subject to appropriate safeguards and a need-to-know basis:

• service providers that support our operations, such as website hosting, email, analytics, scheduling, CRM, invoicing, document management, collaboration, and security tooling providers;
• professional advisors, such as attorneys, accountants, auditors, insurers, or similar advisors;
• payment processors and financial institutions, where applicable;
• law enforcement, regulators, courts, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, or property; and
• successors, acquirers, investors, or counterparties involved in a merger, sale, reorganization, financing, or similar transaction, subject to customary confidentiality protections.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising unless and until we expressly disclose that practice and provide any required notice or choice rights.

6. Client Data and Processor Role

In many engagements, Stargazer Consulting receives or accesses information on behalf of a client. In those situations, the client generally determines the purpose and means of processing, and we act as a service provider, contractor, or processor under the applicable agreement.

When acting in that role, we generally:

• process client data only for authorized business purposes described in the agreement or documented instructions;
• limit access to personnel or approved subcontractors with a legitimate need to know;
• apply reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the data and the nature of the engagement;
• assist clients, where contractually required, with reasonable requests related to privacy, security, or data subject rights; and
• return or securely dispose of client data at the end of the engagement, subject to contractual, legal, or archival requirements.

7. Security Safeguards

We maintain a security program designed to protect personal information and confidential business information against unauthorized access, disclosure, alteration, and destruction. Depending on the nature of the information and engagement, safeguards may include:

• role-based access controls and least-privilege practices;
• strong authentication and credential management;
• secure device, account, and document handling practices;
• contractual confidentiality obligations;
• encryption in transit and, where appropriate, at rest;
• security monitoring, logging, and incident response procedures;
• vendor review and controlled use of third-party platforms; and
• policy, training, and administrative governance measures aligned to the scale of our business.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we work to maintain safeguards appropriate to the sensitivity of the information we handle and the risks presented by our operations.

8. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business records, resolve disputes, enforce agreements, meet legal or regulatory obligations, and preserve appropriate audit trails.

9. Your Rights and Choices

Depending on where you live and the context in which we process your personal information, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where applicable by law.

10. California Privacy Notice

If you are a California resident, you may have additional rights under California privacy law, subject to statutory exceptions and applicability thresholds.

11. International Transfers

Stargazer Consulting may use service providers or collaborators located in jurisdictions other than your own. When personal information is transferred across borders, we take reasonable steps to ensure appropriate safeguards are in place.

12. Children’s Privacy

Our website and services are intended for business and professional audiences and are not directed to children.

13. Third-Party Sites and Services

Our website or communications may contain links to third-party websites, scheduling services, payment tools, forms, or external platforms. We are not responsible for their privacy or security practices.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, business practices, technologies, or risk profile.

15. Contact Us

Stargazer Consulting
All These Worlds Are Yours, LLC
2912 Valley View Terrace
Jefferson City, MO 65109
Email: jacob.hesse@kemperastronautics.com
Website: alltheseworlds.us