Privacy Policy

Effective Date: April 22, 2026  ·  Last Updated: April 22, 2026

TPP Global Services, LLC ("TPP," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect through our website at www.tppgs.com (the "Site"), how we use it, and the choices you have. By using the Site or submitting information to us, you agree to the practices described in this Policy.

1. Who We Are

TPP Global Services, LLC is a professional services firm headquartered at 420 Clapboardtree, Westwood, MA 02090, USA. For any privacy-related question, you can reach us at the contact details in Section 13.

For the purposes of the EU and UK General Data Protection Regulation ("GDPR") and similar state-level U.S. privacy laws, TPP Global Services, LLC is the controller of personal information collected through the Site.

2. Scope

This Policy covers personal information collected through www.tppgs.com. It does not cover information collected through separate engagements with TPP Partners under a written services agreement, which is governed by that agreement.

3. Information We Collect

3.1 Information You Provide Through Our Contact Form

Our contact form is the only data collection form on the Site. When you submit it, we collect:

  • First name (required)
  • Last name (required)
  • Email address (required)
  • Company (optional)
  • Area of interest (optional selection, e.g., Business Transformation, CIO Practice, Security Practice)
  • Message content (required)

Please do not submit sensitive personal information (such as government identifiers, financial account numbers, health information, or credentials) through the contact form. It is not the appropriate channel for that data.

3.2 Information Collected Automatically

When you visit the Site, our hosting provider and we may automatically log limited technical information for security, diagnostic, and availability purposes, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URL and pages visited
  • Date and time of the request

This information is used to protect the Site against abuse (including bot submissions through our contact form honeypot), to troubleshoot, and to understand aggregate traffic patterns. It is not used to build marketing profiles.

3.3 Cookies

The Site uses only strictly necessary cookies required for basic functionality and security. We do not use advertising cookies or third-party marketing trackers. If we add analytics or other non-essential cookies in the future, we will update this Policy and, where required, request your consent.

4. How We Use Your Information

We use the information collected through the contact form for a single purpose: to respond to your inquiry and communicate with you about the matter you raised. Typical uses include:

  • Reviewing your inquiry and routing it to the appropriate TPP Partner
  • Contacting you by email to continue the conversation
  • Maintaining a record of the communication for our business files

We use automatically collected technical information only to operate, secure, and improve the Site.

We do not use your information for automated decision-making that produces legal or similarly significant effects.

5. Legal Bases for Processing (EU/UK Visitors)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information under the following legal bases:

  • Your consent or steps taken at your request prior to entering into a contract, when you submit the contact form asking us to get in touch
  • Legitimate interests in operating a secure, functional website and in following up on business inquiries, balanced against your rights and expectations

6. How We Share Information

We do not sell, rent, or trade your personal information. We do not share it with third parties for their own marketing purposes.

We share information only in these limited circumstances:

  • Service providers (sub-processors). We use a small number of vendors to operate the Site and handle form submissions. These providers process information on our behalf under written terms that restrict their use of your data. Current providers include:
    • Netlify, Inc. — website hosting and delivery of contact form submissions
    • Our business email provider — delivery and storage of the email generated by your inquiry
  • Legal compliance. We may disclose information if required by law, subpoena, court order, or other valid legal process, or to protect the rights, property, or safety of TPP, our clients, or others.
  • Business transfers. If TPP is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We would require any successor to honor the commitments in this Policy.

7. Data Retention

We retain contact form submissions for as long as needed to respond to your inquiry and to maintain a reasonable business record of the communication, typically no longer than 24 months from the date of your last contact with us, unless a longer period is required by law or by an active engagement. After that period, records are deleted or anonymized on a routine basis.

Server logs are retained for a shorter period — generally 30 to 90 days — and used only for security and operational purposes.

8. Data Security

We maintain reasonable and appropriate administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, consistent with 201 CMR 17.00 (the Massachusetts Standards for the Protection of Personal Information of Residents of the Commonwealth) and comparable standards. Controls include access restrictions, encryption of data in transit (TLS), vendor due diligence, and logging. No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.

9. International Data Transfers

TPP is based in the United States, and information submitted through the Site is processed in the United States. If you submit information from outside the U.S., you understand that it will be transferred to and processed in the U.S., which may have different data protection laws than your jurisdiction. For transfers subject to GDPR or UK GDPR, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses where applicable.

10. Your Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information:

  • Access — request a copy of the personal information we hold about you
  • Correction — ask us to correct information that is inaccurate or incomplete
  • Deletion — ask us to delete your information, subject to legal exceptions
  • Restriction or objection — ask us to restrict or object to certain processing
  • Portability — request a portable copy of information you provided
  • Withdraw consent — where processing is based on consent, withdraw it at any time
  • Non-discrimination — we will not discriminate against you for exercising any of these rights

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, and other U.S. states with comprehensive privacy laws have substantively similar rights. Because we do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes that trigger a right to limit, those particular rights do not result in any change to our practices — but you are welcome to confirm our handling with us.

To exercise any right, contact us using the information in Section 13. We will verify your request by matching it against the information you previously provided. We will respond within the time frame required by applicable law (generally 30 to 45 days). You also have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

The Site is directed to business audiences and is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last Updated" date at the top. Material changes will be announced on the Site and, where required by law, we will seek your consent. We encourage you to review this Policy periodically.

13. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or our handling of your personal information:

TPP Global Services, LLC
Attn: Privacy
420 Clapboardtree
Westwood, MA 02090 USA

You may also reach us through the contact form at www.tppgs.com/contact.

14. Governing Law

This Policy is governed by the laws of the Commonwealth of Massachusetts, without regard to its conflict-of-laws principles, except to the extent that mandatory provisions of your local law apply.