Privacy Policy

Introduction

The Center for Software Excellence (CESW) is committed to protecting your privacy and ensuring the security of any personal information you provide to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at cesw.org or engage with our CMMI assessment services, software process improvement consulting, training programs, or any other services we offer.

Please read this Privacy Policy carefully. By using our website or services, you consent to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.

Information We Collect

Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

• Fill out contact forms on our website
• Request information about our services
• Register for training workshops or events
• Engage our consulting or assessment services
• Subscribe to our newsletter or communications
• Communicate with us via email, phone, or other channels

This information may include:

• Contact Information: Name, email address, phone number, company name, job title, and mailing address
• Business Information: Organization size, industry sector, current processes, and improvement goals
• Service-Related Information: Details about your software development processes, maturity level goals, and assessment requirements
• Communication Records: Copies of correspondence and notes from interactions with our team

Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage, including:

• Device Information: Browser type, operating system, device type, and screen resolution
• Usage Data: Pages visited, time spent on pages, links clicked, and navigation patterns
• Technical Data: IP address, approximate geographic location, and referring website
• Cookies: Data stored through cookies and similar technologies (see Cookies section below)

How We Use Your Information

We use the information we collect for various purposes, including:

Service Delivery

• Providing CMMI assessment services and process improvement consulting
• Conducting SCAMPI appraisals and delivering assessment results
• Developing customized training programs and workshops
• Communicating about your engagement and project status
• Responding to your inquiries and requests

Business Operations

• Sending service updates, newsletters, and relevant communications (with your consent)
• Improving our website, services, and user experience
• Analyzing usage trends and preferences to enhance our offerings
• Complying with legal and regulatory requirements
• Protecting against fraud and unauthorized access

Marketing (With Your Consent)

• Sending information about new services, workshops, or events
• Sharing industry insights and thought leadership content
• Providing promotional offers (you can opt out at any time)

Information Sharing and Disclosure

We respect your privacy and do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

With Your Consent

We may share your information with third parties when you have given us explicit permission to do so.

Service Providers

We may share information with trusted third-party service providers who assist us in operating our business, such as:

• Web hosting and IT service providers
• Email and communication platforms
• Analytics and performance monitoring tools
• Payment processors (for paid services)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law, court order, or other legal processes, or when we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, privacy, safety, or property
• Respond to law enforcement requests
• Enforce our contracts or agreements

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission using SSL/TLS protocols
• Secure servers and database systems with access controls
• Regular security assessments and vulnerability testing
• Staff training on data protection and privacy practices
• Restricted access to personal information on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us:

• Remember your preferences and settings
• Understand how you use our website
• Analyze site traffic and performance
• Provide relevant content and services

Types of Cookies We Use

• Essential Cookies: Required for website functionality (e.g., session management)
• Analytics Cookies: Help us understand visitor behavior and improve our site
• Functional Cookies: Remember your preferences and enhance your experience

Managing Cookies

Most browsers allow you to control cookies through their settings. You can typically:

• View cookies stored on your device
• Block all or specific cookies
• Delete cookies when you close your browser

Please note that disabling certain cookies may affect website functionality.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Objection: Object to certain processing of your information
• Portability: Receive your data in a structured, commonly used format
• Withdrawal of Consent: Withdraw consent for processing where consent is the legal basis

For EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

For California Residents (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected and how it is used
• Right to request deletion of personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

To exercise any of these rights, please contact us using the information provided below.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Providing our services and maintaining client relationships
• Complying with legal, tax, and regulatory requirements
• Resolving disputes and enforcing agreements
• Supporting legitimate business purposes

When your information is no longer needed, we securely delete or anonymize it in accordance with our data retention policy.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. When we transfer data internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will post the updated policy on this page
• We will update the "Last Updated" date at the top of this policy
• For significant changes, we may notify you via email or website notice

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

You may also contact us through our website at Contact Page.

Correspondence Address

For formal privacy-related correspondence, you may write to:

Center for Software Excellence
Privacy Officer
United States