Privacy Policy
Version 1.0 · Last updated: November 4, 2026
1. Who we are
FDI PLUS GLOBAL LLC, doing business as FDI+ (“FDI+”, “we”, “us”), is an independent advisory firm based in Connecticut, United States. We are the controller responsible for the personal data described in this policy.
Contact for any privacy question or request: pilar@fdiplusglobal.com. Because we process personal data only occasionally and on a small scale, we have not appointed a representative in the European Union or the United Kingdom.
2. Summary
- We collect only what you choose to send us (contact form, booking) plus limited technical data needed to run the Website.
- We use it to reply to you, arrange calls and keep a record of your consent. We do not sell your personal data and we do not use it for targeted advertising.
- We do not use your personal data to train large language models or other artificial intelligence models.
- We use only essential cookies. We do not use analytics or advertising cookies.
- You can ask to access, correct or delete your data at any time.
3. What personal data we collect
| Source | Data | Why |
|---|---|---|
| Contact form (Let’s talk) | Full name, work email, organization (optional), topic (optional), your message, date and time, consent record (which Terms and Privacy Policy versions you accepted and the exact checkbox text) | To answer your request and to prove that you gave consent |
| Microsoft Bookings | Name, email, phone number (if you choose to give it), organization, organization type and timeline answers, chosen date and time | To schedule and hold a call on Microsoft Teams |
| Emails and calls | What you write or say to us and our replies | To continue the conversation you started |
| Technical data | IP address, browser and device type, pages requested, date and time (server and security logs kept by our hosting provider) | To deliver the Website securely and prevent abuse |
| Analytics | None at this time | If we add an analytics tool, it will be listed here first and will run only with your consent |
We do not knowingly collect sensitive data (such as health, racial or ethnic origin, religious beliefs, precise geolocation or government identification numbers). Please do not send it through the Website.
4. How we use it and our legal bases
We use personal data only for the purposes above. Where the EU/UK GDPR applies, our legal bases are:
- Steps you ask us to take before a possible engagement (Art. 6(1)(b)): replying to your request and arranging calls.
- Our legitimate interests (Art. 6(1)(f)): following up on conversations you start with us, keeping the Website secure and keeping business records. We have balanced these interests against your rights, and you can object at any time.
- Consent (Art. 6(1)(a)): any optional updates you ask to receive. You can withdraw consent at any time.
- Legal obligations (Art. 6(1)(c)): keeping records we are required to keep.
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
5. Who we share it with
We do not sell or rent personal data. We share it only with service providers that process it on our behalf, under contracts that require them to protect it and use it only on our instructions:
| Provider | Service | Location |
|---|---|---|
| Lovable and its infrastructure providers | Website hosting and delivery of contact form messages to our mailbox (messages are not stored on the Website) | United States |
| Microsoft | Bookings, Teams, and the Outlook mailbox where contact form messages are received and kept | United States and other locations where Microsoft operates |
We may also disclose data if required by law, to protect our rights, or as part of a sale or reorganization of our business, in which case the recipient must respect this policy.
6. International transfers
FDI+ is based in the United States and our providers store data in the United States. If you are in another country, your data will be transferred to the United States. Where GDPR applies, we rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses, as applicable to each provider.
7. How long we keep it
| Data | Retention |
|---|---|
| Contact form messages and emails (kept in our mailbox; the Website itself stores no copy) | 24 months after our last contact, unless an engagement starts (then for the duration of the engagement plus 7 years for business records) |
| Consent records | As long as the related data is kept, plus 3 years to be able to prove consent |
| Booking details | 24 months after the call |
| Server and security logs | 30 to 90 days, depending on our hosting provider’s settings |
When the period ends we delete or anonymize the data.
8. How we protect it
We use appropriate technical and organizational measures, including encrypted connections (HTTPS) for the whole Website, contact form messages delivered only to FDI+’s mailbox and not stored on the Website, access to that mailbox restricted to authorized FDI+ personnel through accounts protected by multi-factor authentication, spam and abuse protection on forms, and regular security reviews. No system is completely secure, but we work to protect your data and will notify you and the authorities of a personal data breach where the law requires it.
9. Your rights
Depending on where you live, you have the right to:
- confirm whether we process your personal data and access a copy of it;
- correct inaccurate data;
- delete your data;
- receive your data in a portable format;
- object to or restrict our use of your data, including for direct follow-up;
- opt out of the sale of personal data, targeted advertising and profiling (we do none of these);
- withdraw consent at any time, without affecting earlier processing;
- not be discriminated against for exercising your rights.
To exercise a right, email pilar@fdiplusglobal.com with the subject “Privacy request”. We may need to verify your identity. We reply within 45 days (U.S. state laws) or one month (GDPR), and may extend this where the law allows. If we decline your request, you can appeal by replying to our decision with the subject “Privacy appeal”; we will answer within 60 days. If you are not satisfied, you may contact the Connecticut Attorney General, or, in the EU/UK, your data protection authority.
We do not use non-essential cookies; if we ever do, we will treat a Global Privacy Control (GPC) signal from your browser as a request to reject them.
10. Cookies
We use only essential storage to run the Website. We do not use analytics or advertising cookies. Details are in our Cookie Policy.
11. Children
The Website is meant for professionals and is not directed to children under 16. We do not knowingly collect their data. If you believe a child has sent us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy. The version number and date at the top show when it last changed, earlier versions are archived, and material changes will be highlighted on the Website.
Appendix. Consent wording used on the Website (for the consent log)
These exact texts are included in the email that each form submission generates, together with the date and time and the policy versions in force:
- Checkbox 1: “I have read and accept the Terms & Conditions.”
- Checkbox 2: “I have read the Privacy Policy and agree to FDI+ processing my data to answer my request.”
- Cookie notice: “We use only essential cookies to run this site. We don’t use analytics or advertising cookies.”