Last Updated: 1/23/26

Purpose and Scope

Directive Consulting, Inc. is committed to protecting the privacy and security of personal information. This document explains how we collect, use, disclose, and safeguard personal information in connection with our website, services, and business operations. Directive operates as a business-to-business marketing services provider. In most cases, we process personal information on behalf of our clients, who act as the data controllers. This policy applies to:

• Visitors to our website
• Business contacts, prospects, and clients
• Individuals whose data may be processed through client-managed platforms to which Directive has authorized access

This policy does not apply to data practices of our clients. Clients are responsible for their own privacy policies and compliance obligations.

Information We Collect

Information Collected Directly by Directive

We may collect limited personal information such as:

• Name
• Business email address
• Business phone number
• Company name and role
• Communications submitted via forms, email, or meetings

Automatically Collected Information

When visiting our website, we may collect:

• IP address
• Browser type and device information
• Pages viewed and interaction data
• Cookies and similar tracking technologies

By entering your phone number and clicking “Get Started”, you consent to receive phone calls and/or SMS messages from Directive and its affiliates via automated technology, including autodialed calls, automated texts, and pre-recorded or artificial voice messages, for marketing, advertising, and transactional purposes. You agree that we may contact you at the telephone number(s) you provide, even if your telephone number is on a national or state Do Not Call list. You also agree to Directive’s Text Messaging Terms and Privacy Policy. Your consent is not required as a condition of purchase, and you may withdraw consent at any time. Message frequency varies. Message and data rates may apply.

Client Controlled Data

Directive may access or process personal information stored within client-owned systems (e.g., CRM, advertising platforms, analytics tools) strictly for the purpose of providing contracted services. This data:

• Is collected and controlled by the client
• Remains the client’s responsibility
• Is accessed by Directive under contractual authorization

How We Use Personal Information

We use personal information to:

• Provide and manage our services
• Communicate with clients and prospects
• Respond to inquiries and requests
• Analyze and improve our website and offerings
• Comply with legal and contractual obligations

We do not use client data for our own independent marketing or commercial purposes.

Legal Bases for Processing (GDPR)

Where applicable under the GDPR, Directive processes personal data based on:

• Performance of a contract
• Legitimate business interests
• Compliance with legal obligations
• Consent, where required

When acting on behalf of clients, Directive processes personal data in accordance to data processing agreements and client instructions.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable core website functionality
• Analyze traffic and performance
• Support marketing and advertising efforts

You can control cookies through your browser settings. Additional cookie disclosures may be provided via a cookie banner or notice.

Data Sharing and Disclosure

We may share personal information with:

• Service providers and vendors acting as data processors
• Professional advisors (e.g., legal, accounting)
• Government or regulatory authorities when legally required

Directive does not sell, rent, or monetize personal information.

Data Retention

We retain personal information only for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal, regulatory, or contractual obligations

Client data accessed through client systems is retained according to client instructions and agreements.

Your Privacy Rights

GDPR (EEA & UK Residents)

You may have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Request data portability

Requests relating to client-controlled data should be directed to the relevant client.

CCPA / CPRA (California Residents)

You may have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Correct inaccurate personal information
• Opt out of certain data sharing (if applicable)
• Not be discriminated against for exercising privacy rights

Requests can be submitted to: [email protected]

Data Security

Directive implements reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Personal information may be transferred to and processed in the United States or other jurisdictions. Where required, Directive relies on appropriate safeguards, such as standard contractual clauses, to protect international data transfers.

Children’s Privacy

Directive’s services are not directed to individuals under the age of 13 (or 16 where required by law). We do not knowingly collect personal information from children.

Contact Information

Directive Consulting, Inc.
2710 E Adams Ave Orange, California, USA
Email: [email protected]