LSJ Systems
LSJ Systems Consulting LLC
Privacy Policy Effective: 2026-03-10 Revision: A

How LSJ Systems Consulting LLC collects, uses, shares, retains, and protects personal data across lsjsystems.com and related services.

Privacy Policy

LSJ Systems Consulting LLC ("LSJ", "we", "our", or "us") is committed to protecting the privacy of visitors to lsjsystems.com and users of our services. This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and the rights available to data subjects.

1. Controller & contact

Controller: LSJ Systems Consulting LLC
Contact: contact@lsjsystems.com

2. Personal data we collect

  • Contact & identity: name, email, phone, company, and billing address.
  • Account & authentication: account identifiers, passkey metadata, and authentication logs. We do not store raw passwords or private keys.
  • Payment & billing: billing records and processor metadata. Payment instruments are handled by processors such as Stripe.
  • Usage & technical: IP address, device/browser details, pages visited, performance logs, server logs, and analytics signals.
  • Project data: client-supplied project briefs, deliverables, files, messages, and related metadata.
  • Cookies & tracking: session cookies, security cookies, and browser-side preference storage. See our Cookie Policy.

3. How we use personal data (purposes & legal bases)

Performance of contract: to provide services, deliver projects, operate client workflows, and invoice clients.
Legitimate interests: product improvement, fraud prevention, security, access control, and analytics.
Consent: where required for optional browser-side tracking or similar non-essential processing.
Legal obligations: to comply with retention requirements, legal process, and law enforcement requests.

4. Sharing & processors

We share data only with service providers and subprocessors who perform services on our behalf, including hosting providers, payment processors such as Stripe, analytics providers such as Cloudflare, and email providers. These providers are expected to implement appropriate technical and organizational measures for the services they perform.

5. International transfers

Where personal data is transferred outside your jurisdiction, we use lawful transfer mechanisms as appropriate, such as adequacy decisions, Standard Contractual Clauses, or other applicable safeguards. Contact us for more detail about safeguards relevant to a specific engagement.

6. Retention

Controlled QMS documents may be retained indefinitely. Financial and contractual records are generally retained for a minimum of 7 years, or longer where required by law. Inactive accounts are typically retained 2 to 5 years unless contractual instructions require otherwise. Project artifacts are retained according to contract terms, client instruction, or legal requirements.

7. Cookies & tracking

We use essential cookies and similar browser storage for site functionality and security, including authentication, CSRF protection, and session controls. We may also use aggregate analytics tooling such as Cloudflare Web Analytics to understand traffic and site performance.

Where a cookie notice is presented, acceptance is stored locally in your browser so the notice does not continue to display on every visit. You can manage cookies and local storage through your browser settings, though disabling essential storage may prevent protected features from operating correctly.

8. Security

We implement reasonable technical and organizational measures, including MFA for admin accounts, TLS in transit, access control, logging, backups, and incident response procedures. We also perform periodic security review and operational hardening as appropriate for the services provided.

9. Your rights

Where applicable, you may exercise rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. To make a request, contact contact@lsjsystems.com. We will respond in line with applicable law.

10. Children and sensitive use-cases

We do not knowingly collect data from children. For projects involving adult or sensitive content, the client is responsible for lawful compliance and age verification where required. LSJ may require contractual representations, compliance documentation, or additional review before accepting sensitive work.

11. Changes to this policy

We may update this policy from time to time. Changes are dated and maintained in our controlled documentation. Effective Date: 2026-03-10.

12. Contact

Questions or requests about this policy: contact@lsjsystems.com