Privacy Policy

Effective Date: October 28, 2026

This Privacy Policy explains how Global Data Risk LLC (“Global Data Risk,” “GDR,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit globaldatarisk.com (the “Site”), submit an inquiry or job application, or otherwise communicate with us through the Site. By using the Site, you acknowledge the practices described in this Privacy Policy.

This Privacy Policy applies only to information collected through the Site. Information we receive in the course of a client engagement is governed by the applicable engagement agreement and our professional confidentiality obligations, not by this Privacy Policy.

Information you provide directly. When you contact us, apply for a position, or sign up to receive communications, we may collect:

• Contact details, such as your name, email address, phone number, company, and mailing address
• The contents of your inquiry or message
• Career information, such as your desired position, resume, and any other details you choose to include in an application

Please do not submit confidential, privileged, or sensitive information (such as details of an active matter, financial account numbers, or government identification numbers) through the Site’s forms. Submitting information through the Site does not create a client relationship or any duty of confidentiality, as described in our Terms & Conditions.

Information collected automatically. When you visit the Site, we and our service providers may automatically collect technical information, including your IP address, browser type, device and operating system, referring website, pages viewed, approximate location derived from your IP address, and the dates and times of your visits.

We use the information we collect to:

• Respond to inquiries and communicate with you about our services
• Review and evaluate job applications and consider candidates for current and future opportunities
• Operate, maintain, and improve the Site
• Protect the security and integrity of the Site, including detecting and preventing spam, fraud, and abuse
• Understand how visitors use the Site and measure the effectiveness of our content
• Send communications you have requested, from which you may opt out at any time
• Comply with legal obligations, enforce our Terms & Conditions, and protect our rights and the rights of others

The Site uses cookies, pixels, and similar technologies to operate the Site, keep it secure, and understand how it is used. These may include services such as Google Analytics and Google Tag Manager for usage analytics, Google reCAPTCHA to protect our forms from spam and automated abuse, Google Maps to display our office location, and Cloudflare for site security, performance, and privacy-focused web analytics.

These providers may collect information about your use of the Site in accordance with their own privacy policies. Use of Google reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

You can manage cookies through your browser settings, including blocking or deleting cookies, though some features of the Site may not function properly as a result. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, and you may adjust your preferences at any time through the “Your Privacy Choices” link at the bottom of the Site.

Global Data Risk does not sell personal information, and we do not share personal information for cross-context behavioral advertising. We may disclose personal information only as described below:

• Service providers. Vendors that perform services on our behalf, such as website hosting, analytics, security, email, and form processing, who are contractually required to use the information only to provide those services
• Professional advisors and affiliates. Our attorneys, accountants, and other advisors, and our affiliated entities, as needed to operate our business
• Legal requirements. Government authorities, courts, or other parties when we believe disclosure is required by law, subpoena, court order, or other legal process
• Protection of rights. Where reasonably necessary to protect the rights, property, or safety of Global Data Risk, our clients, or others
• Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business
• With your consent. For any other purpose disclosed to you at the time we collect the information

The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites, and we encourage you to review their privacy policies.

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including responding to your inquiry, maintaining business records, and meeting legal, regulatory, and accounting requirements. Job applications may be retained so that we can consider you for future opportunities unless you ask us to delete your information. When information is no longer needed, we delete or de-identify it.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, including in California and other U.S. states with comprehensive privacy laws, you may have the right to:

• Request access to the personal information we hold about you and information about how we use and disclose it
• Request correction of inaccurate personal information
• Request deletion of your personal information, subject to certain exceptions
• Opt out of the sale or sharing of personal information or its use for targeted advertising
• Not be discriminated against for exercising any of these rights

California residents. In the past 12 months, we have collected the following categories of personal information through the Site: identifiers (such as name, email address, phone number, and IP address); professional or employment-related information (such as resume details); internet or other electronic network activity information; and approximate geolocation data. We collect this information from you directly and automatically from your device, for the purposes described in Section 2, and disclose it only to the categories of recipients described in Section 4. We have not sold or shared personal information as those terms are defined under California law, and we do not knowingly sell or share the personal information of consumers under 16 years of age.

Global Privacy Control. Where required by law, we treat a Global Privacy Control (GPC) signal sent by your browser as a valid request to opt out of the sale or sharing of personal information for that browser.

How to exercise your rights. To submit a request, email us at [email protected] or call 212.466.6464. We will need to verify your identity before responding, and we will respond within the time required by applicable law. You may designate an authorized agent to make a request on your behalf, subject to verification. If we decline your request, you may appeal our decision by replying to our response.

Global Data Risk is based in the United States, and information collected through the Site is processed in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on the basis of your consent, our legitimate interests in operating our business and responding to inquiries, steps taken at your request before entering into a contract, or compliance with legal obligations. Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, to request data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for international transfers of personal information.

The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page, and if the changes are material, we will provide additional notice on the Site. Your continued use of the Site after an update is posted indicates your acknowledgment of the revised Privacy Policy.

If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your privacy rights, please contact:

Global Data Risk LLC
14 Wall Street, 20th Floor
New York, NY 10005

Email: [email protected]
Phone: 212.466.6464