Introduction
This is the Privacy Policy for Promesa Consulting Group, Inc. and its affiliates ("Promesa," "we," "us," or "our"). For purposes of applicable data protection and privacy laws, Promesa Consulting Group, Inc. is the data controller of personal information collected through this Site, unless otherwise specified in a client engagement agreement or contract. Promesa is a certified Service-Disabled Veteran-Owned Small Business (SDVOSB) headquartered at 1717 N Street NW, Suite 400, Washington, DC 20036.
Promesa understands that your privacy is important. We are committed to protecting your personal information and being transparent about how we collect, use, and safeguard it.
This Privacy Policy applies to information collected through our website at www.promesacgi.com (the "Site"), as well as personal information you submit to us directly in connection with our consulting services, business inquiries, or other communications.
By using our Site or engaging with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Site or submit personal information to us.
Changes to This Privacy Policy
Promesa reserves the right to update or amend this Privacy Policy at any time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Site following the posting of any changes constitutes your acceptance of those changes.
Personal Information That We Collect
Contact and Inquiry Information
When you contact us through our Site, submit an inquiry, or request information about our services, we may collect the following personal information:
- Full name
- Business or organization name
- Job title or position
- Email address
- Phone number
- Mailing address
- The nature of your inquiry or service interest
Website Usage Information
When you visit our Site, we may automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type and version
- Pages visited and time spent on those pages
- Referring website or source
- Device type and operating system
This information is collected to help us understand how visitors use our Site, improve our content, and ensure our Site functions properly across different devices and browsers.
Sensitive Information Notice
Important: Promesa does not request or intend to collect sensitive personal information (such as Social Security numbers, health or medical information, financial account details, or government-issued identification numbers) through its public website. Users are advised not to submit such information through contact forms or general inquiries. If such information is provided inadvertently, Promesa will take reasonable steps to delete or securely handle it in accordance with applicable laws.
Cookies and Tracking Technologies
Promesa may use cookies and similar tracking technologies to enhance your experience on our Site. Cookies are small data files stored on your device that help us recognize returning visitors, remember user preferences, and analyze how our Site is used.
We may use different types of cookies, including:
- Essential cookies, which are necessary for the operation and security of the Site
- Analytics cookies, which help us understand how visitors interact with the Site and improve performance and functionality
Some cookies may be placed by third-party service providers that assist us in analyzing Site usage.
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the Site.
Where required by applicable law, Promesa may provide cookie consent mechanisms or honor user preferences regarding the use of non-essential cookies.
Some web browsers may transmit “Do Not Track” signals or Global Privacy Control (GPC) signals that indicate a user’s preference regarding tracking. Where required by applicable law, Promesa will recognize and respond to such signals in accordance with applicable legal requirements.
How We Use Your Personal Information
Promesa uses the personal information we collect for the following purposes:
- To respond to your inquiries and communicate with you about our consulting services
- To provide, manage, and improve our professional services and client engagements
- To send relevant updates, publications, or information about Promesa's services where you have expressed interest or consented
- To analyze and improve the performance, content, and navigation of our Site
- To maintain the security and integrity of our Site and business operations
- To comply with applicable legal obligations, regulatory requirements, and government contracting standards
- To protect the rights, property, and safety of Promesa, our clients, and the public
Promesa does not sell, rent, or trade your personal information to third parties for their own marketing purposes.
How We May Disclose Your Personal Information
Promesa may disclose your personal information in the following limited circumstances:
Service Providers
We may share your information with trusted third-party service providers who assist us in operating our Site, managing communications, or delivering our services. These providers are contractually obligated to handle your information confidentially and only for the purposes we specify.
Government and Legal Requirements
As a firm that works extensively with federal, state, and local government agencies, Promesa may be required to disclose personal information to comply with applicable laws, regulations, court orders, subpoenas, or government requests. We will only disclose the minimum information necessary to satisfy such requirements.
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of all or a portion of our business, personal information we hold may be transferred as part of that transaction. We will notify affected individuals as required by applicable law.
Protection of Rights
We may disclose personal information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Promesa, our clients, or others, or to investigate, prevent, or take action regarding potential violations of our policies or applicable law.
Retention of Your Personal Information
Promesa retains your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting obligations. The criteria used to determine retention periods include:
- The duration of our relationship with you or your organization and the period thereafter during which we may need to reference your information
- Whether there is a legal or regulatory obligation requiring us to retain records for a specific period
- Whether retention is advisable given applicable statutes of limitations, pending litigation, or regulatory investigations
When personal information is no longer required, we take reasonable steps to securely delete or anonymize it.
Marketing Communications
Promesa may occasionally send you information about our services, publications, events, or industry insights that we believe may be of interest to you. If you prefer not to receive such communications, you may opt out at any time by:
- Clicking the unsubscribe link included in any marketing email we send
- Contacting us directly at [email protected] with your request to be removed from our mailing list
Please note that even if you opt out of marketing communications, we may still contact you for transactional or service-related purposes related to an active engagement or inquiry.
Security of Your Personal Information
Promesa takes the security of your personal information seriously. As a firm with deep experience advising organizations on Information Security and Internal Controls, we apply those same standards to our own operations.
Promesa maintains administrative, technical, and physical safeguards designed to protect personal information, including role-based access controls, data minimization practices, secure network configurations, and monitoring protocols. Where appropriate, our practices align with recognized frameworks and standards, including National Institute of Standards and Technology (NIST) guidance and other applicable federal information security principles.
Access to personal information is restricted to authorized personnel who have a legitimate business need. All such personnel are obligated to maintain the confidentiality of any personal information they access.
Data Security Incidents: In the event of a data breach or security incident involving personal information, Promesa will investigate and respond in accordance with applicable laws and regulations, including notification requirements where required. We will take appropriate steps to mitigate the impact of such incidents and to help prevent similar occurrences in the future.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you to take precautions when sharing personal information online.
Links to Third-Party Websites
Our Site may contain links to third-party websites, publications, or resources that are not operated or controlled by Promesa. This Privacy Policy does not apply to those third-party websites, and we are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of any link on our Site does not imply endorsement by Promesa of that website or its content.
Children's Privacy
Our Site is not directed to individuals under the age of 13, and Promesa does not knowingly collect personal information from children. If we become aware that personal information has been collected from a child without appropriate parental consent, we will take reasonable steps to delete such information in accordance with applicable law.
Your Privacy Rights
Depending on your state of residence, you may have certain rights with respect to your personal information, including:
- The right to access the personal information we hold about you and to receive details about how it is used
- The right to request correction of inaccurate or incomplete personal information
- The right to request deletion of your personal information, subject to certain legal exceptions
- The right to opt out of certain uses of your personal information, including direct marketing
- The right to lodge a complaint with a relevant data protection or privacy authority
- The right not to be discriminated against for exercising privacy rights
To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We may need to verify your identity before processing your request.
Notice to United States Residents
Promesa operates in the United States and primarily serves U.S.-based clients including federal, state, and local government agencies, financial institutions, and private sector organizations. Your personal information will be stored and processed in the United States.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. Promesa does not sell personal information. To exercise your California privacy rights, please contact us at the address below.
International Users
This Site is operated in the United States and is intended for users located in the United States. If you access the Site from outside the United States, you acknowledge that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
Our Commitment as a Veteran-Owned Business
Promesa Consulting Group is a certified Service-Disabled Veteran-Owned Small Business (SDVOSB). The principles that guide our work — honesty, integrity, accountability, and a commitment to service — extend fully to how we handle your personal information. We treat the trust you place in us as a responsibility we take seriously, and we are committed to upholding the highest standards of transparency and data stewardship in every engagement.
SDVOSB Certified · Washington, DCContact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Promesa Consulting Group, Inc.
Washington, DC 20036
