Privacy policy

1. Introduction

Allari, Inc. ("Allari," "we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit allari.com (the "Site"), request a working session, communicate with us, or otherwise engage with our services (collectively, the "Services").

This Policy applies to personal information we process as a controller — meaning we determine the purposes and means of processing. When we process personal information on behalf of our enterprise clients as a processor (for example, as part of our ERP production support operations for JDE, SAP, Oracle Fusion Cloud, or NetSuite), the client's own privacy notice and our contract with that client govern that processing.

If you do not agree with this Policy, please do not use the Site or our Services.

2. Scope

This Policy applies to:

• Visitors to allari.com and any related Allari web properties
• Prospective clients and contacts who engage with us (e.g., book a working session, request a case study)
• Recipients of our marketing communications
• Individual representatives of our enterprise clients, partners, and vendors

This Policy does not apply to third-party websites, products, or services linked from our Site, which are governed by their own privacy policies.

3. Information we collect

3.1 Information you provide to us

We collect personal information you provide directly, including when you:

• Book a working session or request a consultation
• Submit an inquiry or contact form
• Request a case study, or other materials
• Communicate with us by email, phone, or video conference
• Attend an event, webinar, or meeting we host
• Engage with us as a client, partner, vendor, or contractor representative

This information may include: name, business email address, phone number, company name, job title, business address, information about your IT environment (e.g., current ERP platform, migration stage), and any other information you choose to share.

3.2 Information collected automatically

When you visit the Site, we and our service providers may automatically collect:

• Device and technical data: IP address, browser type and version, operating system, device identifiers, language preferences, and time zone
• Usage data: pages viewed, referring/exit URLs, clickstream data, time spent, and dates/times of visits
• Cookies and similar technologies: see Section 7 below

3.3 Information from third parties

We may receive information from:

• Business contact and enrichment providers (e.g., to verify or supplement contact details of enterprise prospects)
• Referrals and introductions from existing clients, partners, or employees
• Publicly available sources such as LinkedIn, company websites, and public filings
• Analytics and advertising partners (see Sections 7 and 8)

3.4 Sensitive information

We do not intentionally collect sensitive personal information (such as government IDs, financial account numbers, health information, or precise geolocation) through the Site. Please do not submit sensitive information to us unless specifically requested under a signed agreement.

4. How we use your information

We use personal information for the following purposes:

• Provide and operate the Services — respond to inquiries, schedule working sessions, deliver requested materials, and fulfill engagements
• Client relationships — manage contracts, cost submission, support, and communications with enterprise clients
• Marketing and business development — send information about our services, case studies, events, and related updates (where permitted)
• Site operation and improvement — analyze usage, debug, secure, and improve the Site and Services
• Personalization — tailor content and communications to your role and interests
• Legal, safety, and compliance — comply with applicable laws, enforce our terms, protect our rights, investigate misconduct, and respond to legal process
• Corporate transactions — evaluate or conduct a merger, acquisition, financing, reorganization, or asset sale

Legal bases (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you are a data subject under the GDPR / UK GDPR. We rely on the following legal bases:

• Contract — to take steps at your request before entering into, or to perform, a contract
• Legitimate interests — to operate, secure, and promote our business, provided those interests are not overridden by your rights
• Consent — where required (e.g., certain cookies, marketing emails). You can withdraw consent at any time
• Legal obligation — to comply with laws applicable to us

5. How we share information

We do not sell your personal information for money. We share information only as described below:

• Service providers and processors — vendors who support our operations (e.g., hosting, email, CRM, analytics, scheduling, video conferencing, marketing automation, payment processing, professional services). These providers are contractually required to protect your information and use it only for the services they provide to us
• Affiliates — Allari entities and subsidiaries supporting our global delivery operations
• Professional advisors — lawyers, accountants, auditors, and insurers
• Enterprise clients — where you interact with us on behalf of a client, we may share relevant information with that client
• Legal, regulatory, and safety — government authorities, law enforcement, courts, or other parties when required by law, to respond to legal process, to protect rights, property, or safety, or to investigate fraud or security issues
• Business transfers — in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets
• With your direction or consent — any other sharing you authorize

Named sub-processors

Allari uses the following third-party services to operate the website and collect analytics. Each operates under its own privacy policy linked below.

• Supabase, Inc. — application hosting, database, edge functions, and contact-form submission storage. Privacy policy: supabase.com/privacy.
• Apollo.io (ZenLeads, Inc.) — website visitor identification, B2B contact enrichment, and outbound sales tooling. Privacy policy: apollo.io/privacy-policy.
• Google LLC — Google Analytics 4 (web analytics) and Google Tag Manager (tag deployment). Privacy policy: policies.google.com/privacy.

"Sharing" under certain state laws

Some US state privacy laws treat the use of cookies and similar technologies for cross-context behavioral advertising as a "sale" or "share" of personal information, even when no money changes hands. To the extent we engage in such activities, you can opt out as described in Sections 7 and 9.

6. International data transfers

Allari operates globally, with delivery teams in North America, Latin America, EMEA (including Italy and Poland), and APAC. Your information may be transferred to, stored in, and processed in countries other than your own, including the United States.

When we transfer personal information out of the EEA, UK, or Switzerland to a country that has not been deemed to provide an adequate level of protection, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary measures as needed. A copy of these safeguards is available on request to privacy@allari.com.

California Privacy Rights

California residents have additional rights under the CCPA and CPRA. You can opt out of the sale or sharing of personal information by clicking "Your Privacy Choices" in our footer. We honor Global Privacy Control (GPC) signals automatically — if your browser sends a GPC signal, we treat it as a Do Not Sell or Share request without further action. For other California-specific rights (right to know, delete, correct), contact privacy@allari.com. We respond within 45 days.

7. Cookies and similar technologies

We and our service providers use cookies, pixels, tags, and similar technologies to operate and analyze the Site. We use the following categories:

• Essential (Necessary) — required for the Site to function (security, load balancing, session management, contact-form submission, and your saved privacy preferences, such as the Do-Not-Sell opt-out). These are always on and cannot be disabled. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
• Statistics (Analytics) — Google Analytics 4 helps us understand which pages are visited, how visitors arrived, and where the experience breaks. IP addresses are anonymized. You can manage analytics through your browser settings and any consent controls shown for your visit.
• Marketing — Apollo.io website visitor identification and any future advertising/remarketing tags. You can opt out using the Do Not Sell or Share My Personal Information control below or by enabling Global Privacy Control (GPC).

Change your choice at any time: Use the control below or follow Your Privacy Choices in the footer. We honor Google Consent Mode v2 and Global Privacy Control (GPC) signals.

You can also manage cookies through:

• Your browser settings (most browsers let you block or delete cookies)
• Global Privacy Control (GPC) — if your browser or extension sends a GPC signal, we automatically treat it as a Do-Not-Sell-or-Share request
• Industry opt-outs at optout.aboutads.info (DAA), youronlinechoices.eu (EDAA), and networkadvertising.org/choices (NAI)
• Global Privacy Control (GPC) — we honor GPC signals as an opt-out of "sale"/"share" of personal information where required by law

Blocking cookies may affect Site functionality.

8. Online advertising and analytics

We may use third-party analytics and advertising services (including, where applicable, Google, LinkedIn, and Microsoft/Bing) to understand how visitors use our Site, to measure the effectiveness of our campaigns, and to deliver relevant advertising to prospective clients — including remarketing to previous visitors. These providers may use cookies and similar technologies to collect information about your activities on our Site and other sites over time.

You can opt out of interest-based advertising as described in Section 7 and through each provider's own settings (e.g., Google Ads settings, LinkedIn advertising preferences).

9. Your privacy rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access / Know — request confirmation of whether we process your information and a copy of it
• Correct / Rectify — request correction of inaccurate or incomplete information
• Delete — request deletion of your information, subject to legal exceptions
• Portability — receive a copy of your information in a portable format
• Restrict or object — restrict or object to certain processing, including for direct marketing
• Withdraw consent — where we rely on consent
• Opt out of "sale" or "sharing" of personal information and of targeted advertising (US state laws)
• Opt out of profiling that produces legal or similarly significant effects
• Non-discrimination — we will not discriminate against you for exercising your rights
• Appeal — if we deny your request, you may appeal as described in our response

How to exercise your rights

Submit a request by emailing privacy@allari.com with the subject line "Privacy Rights Request" and a description of your request. We will verify your identity (for example, by confirming information we already hold) before fulfilling the request. You may use an authorized agent where permitted by law; we may require written proof of authorization.

EEA, UK, and Swiss residents

As a data subject you have the right to lodge a complaint with your local data protection authority. Data subject rights requests (access, rectification, erasure, restriction, portability, objection) can be sent to privacy@allari.com and we respond within 30 days as required by GDPR Article 12. We encourage you to contact us first so we can address your concerns.

California residents ("Shine the Light")

California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

10. Data retention

We retain personal information only for as long as needed to fulfill the purposes described in this Policy, including to provide Services, maintain client and prospect relationships, comply with legal, tax, accounting, and reporting obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of information and the context in which it was collected. When we no longer need your information, we will delete or de-identify it.

11. Data security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include access controls, encryption in transit, secure development practices, vendor risk management, and employee training. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Children's privacy

Our Site and Services are directed to businesses and are not intended for children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact privacy@allari.com and we will delete it.

13. Third-party links

Our Site may contain links to third-party websites, products, or services (for example, Google Reviews). We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party site you visit.

14. Do Not Track

Some browsers transmit "Do Not Track" signals. Because there is no industry standard for how to respond to these signals, we do not currently respond to them. We do honor the Global Privacy Control signal where required by applicable law (see Section 7).

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we do, we will update the "Last Updated" date above and, where appropriate, provide additional notice (for example, by posting a notice on the Site or emailing you). Your continued use of the Site after the effective date constitutes acceptance of the updated Policy.

16. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Allari, Inc.
Attn: Privacy
Email: privacy@allari.com
Website: allari.com/contact