Privacy Policy

1. Introduction

This Privacy Policy explains how Matluk LLC (“Matluk LLC,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you visit our website, contact us, request a consultation, or use our transportation consulting and logistics support services (collectively, the “Services”).

This Policy is designed to comply with applicable data protection and privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the European Union General Data Protection Regulation (“GDPR”), the United Kingdom General Data Protection Regulation (“UK GDPR”), and the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”), to the extent each applies to you.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, please do not use our Services.

2. Definitions

“Personal Information” (also “personal data”) means any information that identifies, relates to, describes, or can reasonably be linked, directly or indirectly, with a particular individual or household.

“Processing” means any operation performed on personal information, whether automated or not, including collection, recording, storage, use, disclosure, and deletion.

“Data Controller” means the entity that determines the purposes and means of processing personal information. For the Services described in this Policy, Matluk LLC acts as the Data Controller.

“Data Processor” means a third party that processes personal information on behalf of the Data Controller.

“Service Providers” means third parties engaged to perform functions on our behalf, such as payment processing, hosting, or analytics.

3. Information We Collect

3.1 Information You Provide Directly

•     Identity and contact information: name, business name, email address, telephone number, and mailing address.

•     Business information: details about your company, operations, workflows, and challenges shared during consultations or engagements.

•     Communication content: messages, inquiries, consultation requests, and correspondence you send to us.

•     Billing information: information necessary to process payments. Payment card details are collected and processed directly by our third-party payment processor and are not stored on our systems.

3.2 Information Collected Automatically

•     Technical data: IP address, browser type, device type, operating system, and referring URLs.

•     Usage data: pages visited, time spent, links clicked, and general interaction with our website.

•     Cookies and similar technologies: as described in our separate Cookie Policy.

3.3 Information From Third Parties

We may receive limited information from service providers such as our payment processor (confirmation of payment status) or analytics providers. We do not purchase personal information for marketing purposes.

3.4 Sensitive Information

We do not intentionally collect special categories of personal data (such as health, biometric, or government identifier data) or sensitive personal information as defined under CPRA. Please do not submit such information to us unless specifically requested for a legitimate business purpose.

4. How We Use Personal Information

•     To provide, operate, and deliver our consulting and operational support Services.

•     To respond to inquiries, schedule consultations, and communicate with you about engagements.

•     To process payments and manage billing, invoicing, and refunds.

•     To maintain records of services delivered and work performed.

•     To improve our website, Services, and client experience.

•     To send administrative communications and, where permitted, service-related updates.

•     To comply with legal, tax, accounting, and regulatory obligations.

•     To detect, prevent, and address fraud, security incidents, and misuse.

•     To establish, exercise, or defend legal claims.

5. Legal Bases for Processing (GDPR / UK GDPR)

Where GDPR or UK GDPR applies, we process personal information on one or more of the following legal bases:

•     Contract: processing necessary to perform a contract with you or to take steps at your request before entering into a contract.

•     Legitimate interests: processing necessary for our legitimate business interests, such as improving our Services, securing our systems, and communicating with clients, provided these interests are not overridden by your rights.

•     Legal obligation: processing necessary to comply with applicable law, including tax and accounting requirements.

•     Consent: where we rely on your consent, such as for certain cookies or optional communications. You may withdraw consent at any time.

6. Disclosure of Personal Information

We do not sell your personal information. We may disclose personal information in the following circumstances:

•     Service Providers: to third parties that perform services on our behalf, including payment processing, website hosting, and analytics, under contractual confidentiality and data protection obligations.

•     Professional advisors: to accountants, auditors, and legal counsel where necessary.

•     Legal and regulatory: to comply with applicable law, legal process, or governmental request, or to protect our rights, property, or safety, or that of others.

•     Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality safeguards.

7. “Sale” and “Sharing” of Personal Information (CCPA/CPRA)

We do not sell personal information and do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding twelve months.

8. International Data Transfers

Matluk LLC is based in the United States. If you access our Services from outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

Where we transfer personal information from the European Economic Area, the United Kingdom, or other regions with data transfer restrictions, we implement appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms, where legally required.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the applicable legal requirements. When personal information is no longer required, we securely delete or anonymize it.

10. Your Privacy Rights

10.1 Rights Under GDPR and UK GDPR

•     Right of access to your personal information.

•     Right to rectification of inaccurate or incomplete information.

•     Right to erasure (“right to be forgotten”), subject to legal exceptions.

•     Right to restrict processing.

•     Right to data portability.

•     Right to object to processing based on legitimate interests.

•     Right to withdraw consent where processing is based on consent.

•     Right to lodge a complaint with a supervisory authority.

10.2 Rights Under CCPA/CPRA

•     Right to know what personal information we collect, use, and disclose.

•     Right to delete personal information, subject to exceptions.

•     Right to correct inaccurate personal information.

•     Right to opt out of the sale or sharing of personal information (note: we do not sell or share personal information).

•     Right to limit the use of sensitive personal information.

•     Right to non-discrimination for exercising your privacy rights.

10.3 Rights Under PIPEDA

•     Right to access your personal information held by us.

•     Right to request correction of inaccurate information.

•     Right to withdraw consent, subject to legal or contractual restrictions.

10.4 How to Exercise Your Rights

To exercise any of these rights, contact us at matej@matlukllc.com. We will respond within the timeframes required by applicable law. We may need to verify your identity before fulfilling your request. You may designate an authorized agent to make a request on your behalf where permitted by law.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. For details on the categories of cookies we use and how to manage your preferences, please refer to our separate Cookie Policy.

12. Data Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. Payment transactions are processed through PCI-compliant third-party providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children’s Privacy

Our Services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

14. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised effective date and will be effective as soon as it is accessible. We encourage you to review this Policy periodically.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Effective Date: July 15, 2026

Company: Matluk LLC

Company Address: 75 E 3rd St, Sheridan, WY 82801, United States

Website: https://www.matlukllc.com

Email: matej@matlukllc.com