Privacy Policy

1. Introduction

PleoConsult is an independent consultation service that helps businesses connect with Pleo, a smart expense management platform. We are not affiliated with, endorsed by, or officially connected to Pleo Technologies A/S or any of its subsidiaries. This website is a lead generation landing page for Pleo consultation services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our consultation services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Data Controller

The data controller responsible for your personal data is:

For any questions regarding this privacy policy or our data practices, please contact us at the email address above.

3. Data We Collect

3.1 Personal Data from Lead Form

When you submit a consultation request through our website, we collect the following information:

• Name: Your full name
• Work Email: Your business email address
• Phone/WhatsApp: Your contact phone number (optional)
• Company Name: The name of your organization
• Country: Your country of operation
• Employee Count: The size of your organization
• Monthly Expenses: Estimated monthly expense volume
• Interested Tariff: The Pleo plan you're interested in
• Accounting System: Your current accounting software
• Comments: Any additional information you provide

3.2 Technical Data

When you visit our website, we may automatically collect certain technical information:

• IP address
• Browser type and version
• Device type and operating system
• Referring website
• Date and time of your visit

3.3 Usage Data

We may collect information about how you interact with our website:

• Pages visited
• Time spent on pages
• Clicks and navigation patterns
• Form interactions

3.4 Cookies

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information about the cookies we use, please refer to our Cookie Policy.

4. Purpose of Processing

We process your personal data for the following purposes:

• To provide consultation services: To respond to your inquiry and provide information about Pleo solutions tailored to your business needs
• To contact interested businesses: To follow up with you regarding your consultation request via phone, email, or WhatsApp
• To improve our services: To analyze website usage and optimize our content and user experience
• Legal compliance: To comply with applicable laws, regulations, and legal processes

4.1 Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent: When you submit our lead form and agree to our privacy policy and contact terms
• Legitimate Interest: For technical data collection necessary to provide our website and improve our services
• Contract Performance: To fulfill our consultation service obligations

4.2 Legal Basis for Processing (CCPA)

Under the California Consumer Privacy Act (CCPA), we collect and use your personal information for business purposes including providing our services, communicating with you, and improving our website.

5. Data Sharing

5.1 No Third-Party Marketing

We do NOT share, sell, or rent your personal data to third parties for their marketing purposes. Your information is used solely for providing our consultation services.

5.2 Service Providers

We may share your data with trusted service providers who assist us in operating our website and providing our services. These providers are contractually obligated to protect your data and use it only for the purposes we specify. Service providers may include:

• Website hosting providers
• Analytics services (only if you have consented to analytics cookies)
• Email and communication platforms

5.3 Legal Requirements

We may disclose your personal data if required by law, court order, or other legal processes, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

6.1 Retention Periods

• Lead form data: Retained for 24 months after your last interaction with us, or until you request deletion
• Technical data: Retained for up to 12 months
• Cookie data: As specified in our Cookie Policy

6.2 Right to Deletion

You have the right to request the deletion of your personal data at any time. Upon receipt of a verifiable request, we will delete your data within 30 days, unless retention is required by law.

7. Your Rights (GDPR/CCPA Compliant)

Depending on your location, you have certain rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving a verifiable request.

7.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

7.3 Right to Erasure

You have the right to request that we delete your personal data, subject to certain exceptions.

7.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

7.5 Right to Data Portability

You have the right to request a copy of your personal data in a structured, machine-readable format for transfer to another data controller.

7.6 Right to Object

You have the right to object to the processing of your personal data based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.

7.7 Right to Withdraw Consent

Where we rely on consent for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

7.8 CCPA-Specific Rights

California residents also have the right to:

• Know what personal information is collected, used, and shared
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights

8. How to Exercise Your Rights

To exercise any of your rights under this privacy policy, please contact us:

We will respond to your request within 30 days. We may need to verify your identity before processing your request. If we are unable to comply with your request, we will explain why.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols
• Secure Storage: Personal data is stored on secure servers with access controls and encryption
• Access Controls: Only authorized personnel have access to personal data, and access is limited to what is necessary for their role
• Regular Security Reviews: We regularly review and update our security practices

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites:

• Official Pleo Website: We link to pleo.io for your convenience. We are not responsible for the privacy practices of Pleo Technologies A/S. We encourage you to review their privacy policy.
• Other Third-Party Links: Our website may contain links to other third-party websites. We are not responsible for the content or privacy practices of these websites.

11. Cookies

We use cookies and similar technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us analyze website traffic and remember your preferences.

For detailed information about the cookies we use, including how to manage your cookie preferences, please see our Cookie Policy.

12. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

If you believe we have collected personal data from a child under 18, please contact us at privacy@example.com.

13. International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

• US-Based Processing: Our servers are located in the United States. If you are accessing our website from outside the US, your data will be transferred to and processed in the US.
• Appropriate Safeguards: When transferring data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or other legally approved mechanisms.

14. Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Post the updated privacy policy on this page
• Update the "Last Updated" date at the top of this policy
• Provide notice on our website or via email for significant changes

We encourage you to review this privacy policy periodically to stay informed about how we collect, use, and protect your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

We will make every effort to respond to your inquiry within a reasonable timeframe.