Privacy Policy

Last updated: February 19, 2026

Note: This privacy policy should be reviewed by a qualified attorney before relying on it.

Introduction

Touchstone Technology Consultants LLC, doing business as Touchstone Data (“we,” “us,” or “our”), respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

This policy applies to information collected through our website at touchstonedata.io and through our consulting services.

Information We Collect

We collect information that you voluntarily provide to us through our contact form and during the course of our consulting engagements. The information collected through our contact form includes:

  • Name
  • Email address
  • Company name
  • Job title
  • Service interest
  • Message content
  • Referral source (how you heard about us)

We do not collect sensitive personal information such as Social Security numbers, financial account information, or health data through our website.

How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and communicate with you about our services
  • Provide, maintain, and improve our consulting services
  • Understand how visitors use our website so we can improve the user experience
  • Send you information about our services that may be relevant to your needs, if you have opted in to receive such communications
  • Comply with legal obligations

Data Storage and Security

Contact form submissions and related data are stored in Supabase, a hosted database platform that provides encryption at rest for all stored data. We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, or disclosure.

While we take reasonable steps to secure your data, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information.

Cookies

Our website uses cookies in limited circumstances. Supabase authentication cookies are used for our client dashboard to maintain your session when you are logged in. These cookies are essential for the functionality of the dashboard and are not used for tracking or advertising purposes.

We also use cookies set by Google Analytics, as described in the “Third-Party Services” section below.

Third-Party Services

We use Google Analytics to collect anonymized data about how visitors interact with our website. This helps us understand traffic patterns, popular pages, and user behavior so we can improve the website experience. Google Analytics may collect information such as your IP address (anonymized), browser type, device type, pages visited, and time spent on the site.

Google Analytics is governed by Google's privacy policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Contact form submissions are retained for the duration of any resulting business relationship and for a reasonable period afterward, unless you request deletion.

Engagement-related records may be retained for up to seven years after the completion of an engagement to comply with legal and regulatory obligations.

Your Rights

You have the following rights with respect to your personal information:

  • Right to access: You may request a copy of the personal information we hold about you.
  • Right to correction: You may request that we correct any inaccurate or incomplete personal information.
  • Right to deletion: You may request that we delete your personal information, subject to any legal obligations that require us to retain it.

To exercise any of these rights, please contact us at joshua@touchstonedata.io. We will respond to your request within 30 days.

Texas-Specific Provisions

The Texas Data Privacy and Security Act (TDPSA) provides Texas residents with specific rights regarding their personal data, including the right to access, correct, delete, and obtain a portable copy of their personal data, as well as the right to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling.

If you are a Texas resident and wish to exercise any of these rights, please contact us at joshua@touchstonedata.io. We do not sell personal data or use it for targeted advertising or profiling.

Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at joshua@touchstonedata.io.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Touchstone Technology Consultants LLC

Dallas, Texas

Email: joshua@touchstonedata.io