GDPR Compliance

Effective Date: 10/7/2025

1. GDPR Overview

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. InSourceful is committed to complying with GDPR requirements for all EU residents.

2. Legal Basis for Processing

We process personal data based on the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary for the performance of a contract
• Legal Obligation: When processing is required by law
• Legitimate Interest: When processing is necessary for our legitimate business interests

3. Your Rights Under GDPR

As an EU resident, you have the following rights:

• Right to Information: Know how your data is processed
• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data
• Rights Related to Automated Decision Making: Protection against automated profiling

4. Data Processing Activities

We process the following categories of personal data:

• Contact information (name, email, phone number)
• Professional information (company, job title)
• Website usage data (cookies, analytics)
• Communication records (emails, meeting notes)

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

6. Data Transfers

When transferring data outside the EU, we ensure adequate protection through appropriate safeguards such as adequacy decisions, standard contractual clauses, or binding corporate rules.

7. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

8. Data Protection Officer

For questions regarding data protection and GDPR compliance, please contact our Data Protection Officer:

Email: dpo@insourceful.ai
Phone: (720) 878-8654

9. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

10. Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the information provided above. We will respond to your request within one month, as required by GDPR.

11. Updates to This Notice

We may update this GDPR compliance notice from time to time. Changes will be posted on this page with an updated effective date.