Plain-language summary. This website does not create user accounts, run behavioral advertising, or sell personal information. The contact form prepares an email in your own email application; the website itself does not store the form contents. Hosting and content-delivery providers may process limited technical data needed to deliver and secure the site.
1. Scope, identity, and controller
This Privacy Policy applies to the website operated by Good Source Global LLC (“Good Source,” “we,” “us,” or “our”) and to business communications and consulting relationships for which we determine the purposes and means of processing personal information. Good Source Global LLC is a limited liability company registered in Wyoming, United States, with a registered office at 30 N Gould St Ste N, Sheridan, WY 82801, United States and an operational headquarters in Surat, Gujarat, India.
For personal information covered by this Policy, Good Source Global LLC is generally the data controller or business. When we process personal information solely on a client’s documented instructions while delivering services, the client may be the controller or business and Good Source may act as a processor or service provider under a separate agreement. In that situation, requests concerning client-controlled data should generally be directed to the relevant client.
2. Information we collect
We collect personal information in proportion to the interaction you choose to have with us. The categories below describe the information we may have collected during the preceding twelve months and may continue to collect.
| Category | Examples | Source and purpose |
|---|---|---|
| Identifiers and contact details | Name, business email, company, professional role, mailing address, and telephone number when you provide one. | Provided directly by you or your organization to respond to inquiries, establish a relationship, and administer services. |
| Commercial and engagement information | Requested services, project requirements, proposals, contracts, invoices, payment status, and business correspondence. | Provided by you, generated through our relationship, or received from authorized business contacts to scope and perform services. |
| Internet and technical information | IP address, browser and device type, referring page, requested URL, timestamps, and security logs. | Collected automatically by hosting, network, and content-delivery systems to transmit the site, maintain availability, prevent abuse, and diagnose faults. |
| Professional information | Employer, title, professional expertise, team responsibilities, and public business profile information. | Provided by you or obtained from public professional sources for relationship management, diligence, and project staffing. |
| Communications | Email content, meeting notes, files you send, feedback, and support questions. | Provided through direct communications so we can understand requests, deliver work, maintain records, and resolve issues. |
We do not intend to collect sensitive personal information through this public website. Please do not submit government identifiers, financial account credentials, health information, precise geolocation, passwords, payment-card data, or other highly sensitive material through the contact form or ordinary email. Client projects that require sensitive data are subject to a separate scope, security review, and written agreement.
3. How we use information and our legal bases
We use personal information only for legitimate, disclosed business purposes, including to:
- respond to inquiries, schedule consultations, prepare proposals, and communicate about requested services;
- enter into, administer, perform, and enforce contracts and statements of work;
- provide consulting, software engineering, support, documentation, and project governance;
- manage billing, accounting, tax, audit, corporate records, and payment reconciliation;
- secure our website, communications, systems, personnel, and clients; detect misuse; and investigate incidents;
- maintain and improve service quality, internal processes, and business continuity;
- comply with applicable law, lawful requests, sanctions controls, professional obligations, and dispute procedures; and
- send business updates or marketing communications where permitted, subject to your right to unsubscribe.
Where the General Data Protection Regulation (“GDPR”), UK GDPR, or similar law applies, we rely on one or more lawful bases: taking steps at your request before a contract or performing a contract; our legitimate interests in operating, securing, and improving a B2B consulting business; compliance with legal obligations; protection of vital interests where exceptionally relevant; and consent where the law requires it. You may withdraw consent at any time without affecting prior lawful processing. We balance legitimate interests against the rights and reasonable expectations of affected individuals.
We do not use information submitted through this website to make decisions that produce legal or similarly significant effects through solely automated processing.
4. When we disclose information
We may disclose relevant personal information to the following categories of recipients, limited to what is reasonably necessary:
- Service providers and contractors that support hosting, content delivery, email, collaboration, document management, security, accounting, professional advice, and project delivery under appropriate obligations;
- Client and project participants authorized to receive information for an engagement, including personnel working across our US and India operating footprint;
- Professional advisers such as lawyers, accountants, auditors, insurers, and financial institutions;
- Authorities and other parties when disclosure is required by law, legal process, or a valid government request, or reasonably necessary to protect rights, safety, systems, and the public; and
- Transaction participants in connection with a merger, financing, reorganization, acquisition, sale of assets, or similar corporate event, subject to applicable confidentiality and legal requirements.
We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising, as those terms are defined by the California Consumer Privacy Act, as amended (“CCPA”). We have not knowingly sold or shared personal information of consumers under 16.
5. Data retention and disposal
We retain personal information only for as long as reasonably necessary for the purpose collected, including to provide services, preserve business and security records, comply with tax and legal obligations, resolve disputes, and enforce agreements. Retention depends on the nature and sensitivity of the information, the relationship, applicable limitation periods, and legal requirements.
As general guidelines, inquiries that do not result in an engagement may be kept for up to 24 months; active client and project records are kept for the relationship and then typically for up to seven years where needed for legal, tax, audit, or contractual purposes; security logs are generally kept for shorter operational periods unless needed to investigate an incident; and marketing contact data is kept until you opt out or we determine it is no longer current. We may retain minimal suppression records to honor opt-outs. When retention ends, information is deleted, anonymized, or securely disposed of, subject to backup cycles and legal holds.
6. Cookies and similar technologies
This static website does not intentionally set advertising, analytics, personalization, or social-media cookies. It does not use local storage to profile visitors. Our hosting and content-delivery infrastructure may process technical request information and may use strictly necessary mechanisms for network security, availability, traffic management, or fraud prevention.
The site loads the Tailwind CSS browser library from a third-party content-delivery endpoint. When your browser requests that resource, the provider may receive technical information such as your IP address, user agent, requested resource, and timestamp as part of ordinary network delivery and security logging. You can restrict third-party requests through browser or network settings, although doing so may affect styling.
Because we do not sell or share personal information for behavioral advertising and do not use optional tracking cookies on this site, there is no advertising-cookie preference panel. We nevertheless recognize legally required browser-based opt-out signals, including Global Privacy Control, for processing to which such signals apply. Browser “Do Not Track” signals are not interpreted consistently across the industry; our practices remain as described in this Policy regardless of that setting.
7. Information security
We apply administrative, technical, and organizational safeguards designed to protect personal information in light of its nature and the risks of processing. Measures may include access controls based on business need, authentication controls, encryption in transit, managed service-provider controls, logging, backup procedures, personnel confidentiality, vendor diligence, data minimization, and incident response processes.
The contact form on this site performs validation locally in your browser and opens a message in your chosen email application. The website does not transmit the form contents to a Good Source database. Email is not inherently secure, so do not send secrets or sensitive credentials by ordinary email. We will establish an approved transfer method when an engagement requires confidential files or regulated data.
No system or transmission method is completely secure, and we cannot guarantee absolute security. If we determine that a personal-information incident requires notice, we will notify affected persons and authorities as required by applicable law.
8. Your privacy rights
GDPR and similar rights
Depending on your location and subject to legal conditions and exceptions, you may have rights to be informed; access personal information; correct inaccurate or incomplete information; request deletion; restrict processing; object to processing based on legitimate interests or for direct marketing; receive portable data in a structured, commonly used, machine-readable format; withdraw consent; and lodge a complaint with your local supervisory authority. You also have protections concerning solely automated decisions with legal or similarly significant effects.
California privacy rights
If the CCPA applies to us and you, you may have rights to know the categories and specific pieces of personal information collected, sources, purposes, and recipient categories; request deletion; request correction; opt out of sale or sharing; limit certain uses and disclosures of sensitive personal information; and receive equal service without unlawful discrimination for exercising your rights. Our current practices do not include selling or sharing personal information or using sensitive personal information for purposes that trigger a right to limit.
How to exercise a right
Email contact@goodsourcellc.com with the subject “Privacy rights request” and describe your request, jurisdiction, and relationship with us. To protect information, we may need to verify your identity using information proportionate to the request. An authorized agent may submit a request where permitted; we may request proof of authority and direct verification with the consumer unless an exception applies.
We will acknowledge and respond within the period required by applicable law. We may deny or limit a request where an exemption applies, identity cannot reasonably be verified, or the request is manifestly unfounded or excessive, and will explain the basis where required. You may appeal a denial by replying to our decision with “Privacy appeal” in the subject line. You may also unsubscribe from marketing email through the message instructions or by contacting us.
9. International data transfers
Good Source operates through a US corporate structure and technical operations in India and may use providers in other countries. Accordingly, personal information may be processed outside the jurisdiction where you are located, including in the United States and India, where privacy laws may differ.
Where required for restricted transfers from the European Economic Area, United Kingdom, or Switzerland, we use an available lawful transfer mechanism, such as an adequacy decision, approved standard contractual clauses with appropriate supplementary measures, or another recognized legal basis. You may contact us for information about the safeguards applicable to a relevant transfer.
10. Children’s privacy
Our website and services are directed to businesses and professionals and are not intended for children under 16. We do not knowingly collect personal information from children through the site. If you believe a child has provided personal information to us, contact us so we can review and take appropriate action.
11. Third-party sites and client environments
This website may link to third-party sites or services that operate under their own policies. We are not responsible for their privacy practices. Client systems, applications, and websites on which we work are governed by the client’s notices and instructions except to the extent Good Source independently determines a processing purpose.
12. Changes to this Policy
We may update this Policy to reflect changes in our practices, services, legal requirements, or technology. The revised version will be posted on this page with a new effective date. If a change materially affects how we use information already collected, we will provide additional notice or seek consent where required.
13. Contact us
Questions, complaints, and privacy requests may be directed to:
Good Source Global LLC
Attn: Privacy
30 N Gould St Ste N
Sheridan, WY 82801, United States
Email: contact@goodsourcellc.com
If you are in the EEA or UK, you may also lodge a complaint with the data-protection authority in the country where you live or work or where you believe an infringement occurred. We encourage you to contact us first so we can try to resolve the concern.