Privacy Policy

Effective date: February 1, 2026

Last updated: October 23, 2026

1. Who We Are + What This Policy Covers

JD PALLAS Consulting, LLC (“we,” “us,” or “our”), a Transformation Dot, Inc. affiliate, operates https://transformationdiagnostic.com (the “Site”) and provides business transformation diagnostic and advisory services.

This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit the Site, submit an inquiry or questionnaire, book or attend a meeting, subscribe to communications, or interact with our business.

Our contact details are:

Email: info@jdpallas.com
Mailing address: 332 S. Michigan Ave., Suite 121, Chicago, IL 60604, United States

Personal information is information that identifies, relates to, or can reasonably be linked to an individual. Business contact information can be personal information even when provided in a professional capacity.

For client engagements, a separate service agreement, confidentiality agreement, or data processing agreement may also apply. Where we handle personal information solely on a client’s instructions, that client generally determines the purposes of that processing. Requests concerning that information should ordinarily be directed to the client; we will assist as required by our agreement and applicable law. Nothing in those agreements limits an individual’s statutory privacy rights.

2. Information We Collect

The information we collect depends on how you interact with us.

Contact and professional information: your name, email address, telephone number if provided, employer, job title, organizational level, and role in a transformation initiative.
Inquiry and qualification information: company size, industry, revenue range, transformation type and stage, business challenges, service interests, and information you include in forms or correspondence.
Scheduling and communication information: appointment details, time zone, meeting attendance, cancellations, rescheduling history, emails, meeting notes, and other communications.
Engagement information: questionnaires, interview responses, organizational documents, and other materials supplied for an agreed diagnostic or advisory engagement. These materials may contain information about employees or other stakeholders.
Transaction information: billing contact details, billing address, invoices, payment status, and transaction references. Payments are processed through third-party payment providers. We do not receive or store complete payment card numbers or card security codes through our ordinary payment process.
Technical and usage information: IP address, browser and device information, approximate location inferred from IP address, referring pages, pages viewed, interaction events, timestamps, and security or diagnostic logs. The specific information collected depends on the technologies enabled on the Site and your privacy choices.
Preference information: subscription status, cookie choices, and records of consent or privacy requests.

Please do not include passwords, government identification numbers, complete financial account details, medical information, or unnecessary personal information about employees or other people in public forms or ordinary email. If sensitive information is necessary for an engagement, we will agree on an appropriate collection method first.

3. Where The Information Comes From

We collect information directly from you, automatically through the Site and connected technologies, and from service providers that support scheduling, communications, payments, and business administration. We may also receive relevant professional information from your employer, a referring contact, or public professional sources, such as a company website or LinkedIn profile.

You can choose whether to provide information. If you do not provide information needed to respond to an inquiry, arrange a meeting, or deliver a service, we may be unable to complete that request. Required form fields are identified at the point of collection.

4. How We Use Personal Information

We use personal information to:

Respond to inquiries, assess whether our services fit your needs, and prepare proposals.
Schedule and conduct meetings, send reminders, manage attendance, and administer disclosed booking policies.
Deliver contracted services, analyze engagement evidence, and prepare findings and recommendations.
Manage client relationships, contracts, invoicing, payments, and business records.
Send requested resources and permitted marketing communications, subject to your choices and applicable law.
Understand and improve the Site, forms, services, and business processes.
Protect systems and information, prevent misuse or fraud, resolve disputes, and comply with legal obligations.

We do not use a website inquiry as permission to publish your name, company information, testimonial, or confidential business materials. We obtain appropriate authorization before identifying a client in marketing materials.

5. Who Receives Information

We disclose personal information where reasonably necessary for the purposes described above to:

Service providers supporting website hosting, forms, scheduling, customer relationship management, workflow automation, email, video meetings, file storage, contracts, payment processing, and accounting.
Authorized contractors and professional advisers who need the information to support our business or deliver an engagement, subject to appropriate confidentiality obligations.
Your organization’s authorized engagement contacts, where relevant to providing services. Interview participation does not automatically mean that comments are anonymous; any anonymity or reporting arrangements will be explained for the engagement.
Courts, regulators, law enforcement, or other parties when disclosure is legally required or reasonably necessary to establish, exercise, or defend legal rights or protect safety and security.
Other recipients when you direct us to disclose information or give valid consent.

Providers receive information relevant to the functions they perform. Some also process certain information for their own purposes under their own privacy notices, particularly when you interact directly with their services.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising as those terms are defined under applicable privacy laws.

6. Cookies + Embedded Services

The Site and its embedded services use cookies and similar technologies. Essential technologies support functions such as security, form submissions, scheduling, and remembering privacy choices. If enabled, optional analytics technologies help us understand how visitors use the Site.

Where consent is legally required, optional technologies are used only after you consent. You can review or change available preferences through the link in the bottom left corner of this screen. Browser settings may also allow you to delete or block cookies, although some Site features may stop working.

An embedded scheduler, form, video, or other third-party feature may collect technical information when it loads or when you interact with it. Depending on its settings and your choices, a provider may associate that activity with information it holds from other interactions. Its privacy notice explains its own practices.

The Site does not respond to legacy browser “Do Not Track” signals. Global Privacy Control and other legally recognized opt-out signals are different: where applicable law requires us to honor such a signal, we treat it as an opt-out of the processing covered by that signal. Because we do not sell personal information or use it for targeted advertising, there is currently no such activity to opt out of on this Site.

7. Email + Marketing Choices

You can unsubscribe from marketing emails through the unsubscribe link in a message or by emailing info@jdpallas.com. We will honor requests within the time required by applicable law. We may retain limited suppression information so that we can continue to respect your choice.

Unsubscribing from marketing does not prevent us from sending necessary communications about an appointment, transaction, active engagement, or privacy request. Where consent is required for marketing, we obtain it separately. You do not need to subscribe to marketing to request a meeting or purchase services.

8. Meeting Recordings Transcription + AI Tools

If we propose to record a meeting or use an automated transcription or AI meeting assistant, we will notify participants beforehand and obtain any consent required by law. This Privacy Policy is not itself consent to record a conversation. You may ask to discuss an alternative before the meeting begins.

Where authorized for an engagement, recordings, transcripts, and approved AI-assisted tools may support note preparation, evidence organization, analysis, and drafting. Relevant service providers may process the submitted information. We review work produced with these tools and remain responsible for our professional judgments.

We do not submit identifiable client materials or personal information to AI services for training general-purpose models. Additional restrictions or authorizations may be set out in the engagement agreement. We do not make decisions producing legal or similarly significant effects on individuals solely through automated processing.

9. How Long We Retain Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. We consider the nature and sensitivity of the information, the status of an inquiry or engagement, contractual commitments, accounting and tax requirements, applicable limitation periods, and the need to address disputes or security issues.

Meeting recordings and transcripts are retained only for their agreed purpose and any applicable engagement requirements. Booking and suppression records may be retained in limited form to administer appointment eligibility and communication preferences. When information is no longer needed, we delete it or de-identify it, subject to ordinary backup cycles and legal preservation requirements.

10. How We Protect Information

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and the risks involved. No website, transmission, or storage system is completely secure. Please contact us if you believe information shared with us has been compromised.

11. Your Privacy Rights

Depending on your location, the law applicable to our business, and the information involved, you may have rights to access personal information, obtain a portable copy, correct inaccuracies, request deletion, restrict or object to certain processing, withdraw consent, or opt out of a sale, targeted advertising, or certain profiling. Withdrawing consent does not affect processing that was lawful before withdrawal.

To make a request, email info@jdpallas.com with the subject “Privacy Request” and describe what you are requesting. We may need to verify your identity and authority, using information proportionate to the request. Where the law allows, an authorized agent may submit a request with evidence of authorization. Please do not send identity documents unless we request them through an appropriate channel.

We respond within applicable legal deadlines. Some requests may be limited by legal obligations, another person’s rights, or information we must retain. If we deny a request, we will explain our decision and, where an appeal right applies, how to appeal by replying to our decision email. We do not unlawfully discriminate against anyone for exercising privacy rights. You may also complain to the relevant privacy regulator or attorney general.

12. International Visitors

We operate from the United States. Information may be processed in the United States and other countries where our service providers operate. Their laws may differ from those in your location. Where applicable law requires safeguards for an international transfer, we use an appropriate lawful transfer mechanism. Contact info@jdpallas.com to request information about safeguards relevant to your information.

Where European Economic Area or United Kingdom data protection law applies, we act as controller for our own website and prospect relationship activities. Depending on the activity, our legal bases are steps you request before entering a contract or performance of a contract with you; legitimate interests in managing professional relationships, securing systems, and improving our business, where those interests are not overridden by your rights; compliance with legal obligations; and consent where required, including for certain cookies or marketing. Processing business contact information for a contract with your employer generally relies on legitimate interests rather than a contract with you personally.

You may object to processing based on legitimate interests and, in particular, to direct marketing. You may complain to the supervisory authority where you live or work, or where an alleged infringement occurred. UK residents can contact the Information Commissioner’s Office at ico.org.uk. Any legally required local representative’s details will be provided in an applicable regional notice.

13. Changes To This Policy

We may update this policy as our practices or legal obligations change. The revised policy will be posted here with an updated date. For material changes, we will provide additional notice and obtain consent where required by law. An update does not authorize us to apply a materially incompatible new use to previously collected information without any notice or consent required by law.