Privacy Policy

Who We Are and What This Covers

Peritus Systems, LLC ("Peritus Systems", "we", "us") is a consulting company for businesses and aspiring entrepreneurs, centered on operational optimization, software, and marketing, which also develops and publishes consumer software. This policy explains what personal information we collect, why, who we share it with, and what you can ask us to do about it.

It covers:

• peritussystems.com, including the contact forms
• The Ezra Platform, our internal system, where form submissions are routed and consulting and product work is managed
• Business communications with business clients, entrepreneurs, referral sources, applicants and consulting clients

It does not cover:

• Cibaria, our consumer application, which has its own privacy policy at .
• Independent subcontractors' own practices. Independent specialists we may bring into an engagement are separate businesses. Once a subcontractor is working with you directly, their own handling of your information is governed by their agreement with you, not by this policy. We say more about this under How We Share Information.
• Our clients' own practices, including anything they do with information after an engagement ends.

If you have a question this policy does not answer, write to support@peritussystems.com.

Information We Collect

What we hold about you depends on who you are and how you reached us.

Sensitive Information

Some of what we collect from applicants and engagement partners counts as sensitive personal information under state privacy law — government identifiers, professional credentials, and background-check results where a role or engagement requires them. We collect it only where it is necessary to evaluate an application or run an engagement, we do not sell it, and we do not use it to infer characteristics about you.

If You Were Referred Without Being Asked First

Our referral form lets someone give us your contact details. If that happens, we will tell you who referred you the first time we contact you, and you can ask us to delete your information immediately. We do not require you to engage with us in order to be removed.

Confidential Business Information

We do not want confidential or proprietary business information through this site, and we ask you not to send it. Every form on this site carries that instruction. Our business is consulting, not receiving your trade secrets, and nothing we do requires us to hold them before an engagement agreement is in place.

If confidential business information reaches us anyway — pasted into a notes field, attached to an email, included in a case example — we will delete it and tell the sender. We will not use it, and we will not pass it on.

Some things worth stating plainly, because they are easy to get wrong:

• Details shared during a signed engagement are different. Once a written engagement agreement is in place, its confidentiality terms, not this policy, govern the confidential information shared under it.
• We are not acting as a business associate under HIPAA in the ordinary course of consulting, because we neither create, receive, maintain nor transmit protected health information on a client's behalf.
• If an engagement would require that to change — a software build touching clinical systems, say, or an operations engagement with access to patient-related data — we will put a Business Associate Agreement in place before the work starts, and that agreement, not this policy, will govern the information covered by it.

Note for legal review: confirm this reflects how the consulting lines actually operate. Healthcare software work is the most likely to cross into BAA territory.

How We Use Information

We use personal information to:

1. Route your request to the right person. A consulting request goes to the Peritus team member who leads the practice area you selected; where no practice lead is assigned, it goes to our system administrator. Referral, app development and talent-network enquiries go to the system administrator.
2. Plan and deliver engagements, which means staffing them with the right internal team and, where agreed, vetted subcontractors.
3. Evaluate applicants to our talent network, against the criteria published on our site.
4. Deliver consulting engagements and build and operate our consumer applications.
5. Communicate with you about an enquiry, an assignment, an engagement or your account.
6. Operate, secure and improve the site and the Ezra Platform, including diagnosing faults and preventing abuse.
7. Meet legal and regulatory obligations, including recordkeeping and responding to lawful requests.
8. Send marketing, where you have asked for it or where the law allows it. You can opt out at any time, and we will not make opting out a condition of anything else.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy law. We do not use automated decision-making or profiling to produce legal or similarly significant effects about you — a person decides which engagements we take on and which applicants are admitted.

Note for legal review: if you have UK or EU users, a legal-bases table belongs here — contract, legitimate interests, consent, legal obligation — and the drafts assume you do not.

Text Messages

When you give us your phone number and check the text-message box on one of our forms, you consent to receive text messages from Peritus Systems about your request — engagement updates, scheduling and follow-up. Message frequency varies. Reply STOP to opt out at any time or HELP for help, and message and data rates may apply. Consent to receive text messages is not a condition of purchasing anything, and we will not text anyone who has not given this consent.

How We Share Information

With Independent Subcontractors

This is the disclosure that matters most, because it is the one people are least likely to expect.

Subcontractors on Peritus engagements are independent professionals, not our employees. When your engagement is staffed with one, their independent business receives your information and becomes responsible for it alongside us. Subcontractors are bound by their agreement with us, which requires them to use what they receive only for the engagement at hand, to keep it confidential, and to meet security standards no weaker than our own. But they are separate businesses, they may hold your information in their own systems, and if you later work with one directly, that relationship is between you and them.

If you want to know which subcontractor received your information, ask us at support@peritussystems.com and we will tell you.

With Engagement Partners

Where you ask us to, we introduce you to vetted partners who can help with a specific part of your plan. We tell you who we are introducing you to before we do it, and you can decline any of them.

With Service Providers

We use third parties to run the business — hosting, email, customer relationship management, background checks and primary source verification, electronic signature, analytics, and professional advisers. They act on our instructions under written contracts and may not use your information for their own purposes.

Otherwise

We will also disclose personal information where the law requires it, to respond to lawful requests from public authorities, to establish or defend legal claims, to protect the safety of any person, and to a buyer or successor if the business or part of it is sold — in which case we will tell you before your information becomes subject to a different policy.

Cookies and Analytics

We use cookies and similar technologies for three things: making the site work, remembering your preferences, and understanding how the site is used.

Note for legal review: list the actual cookies — name, purpose, duration, first or third party. This table cannot be completed until analytics tooling is chosen, and several state laws require the specific disclosure rather than the category summary.

Global Privacy Control. We honour the Global Privacy Control signal. If your browser or extension sends one, we treat it as a valid opt-out of any sale or sharing of your personal information, and as an opt-out of targeted advertising, without you having to do anything else.

Do Not Track. Browsers' older Do Not Track signals have no agreed meaning and we do not respond to them. Use Global Privacy Control instead.

Your analytics choice. The site asks before it enables any non-essential measurement, and treats "no" the same as "not yet". You can accept, reject, or change your choice at any time using the Cookie Settings control in the site footer.

How Long We Keep It, and How We Protect It

Retention

We keep personal information only as long as we need it for the purpose we collected it for, or as long as the law requires.

Note for legal review: fill these in. Picking real numbers is a business decision, and several state laws now require you to disclose them rather than say "as long as necessary". Your insurer and your accountant will have views on the placement and engagement rows.

When a retention period ends we delete the information or de-identify it so it can no longer be linked to you.

Security

We protect personal information with encryption in transit and at rest, access limited to people who need it for their work, multi-factor authentication on systems holding personal information, logging and monitoring, written security requirements for subcontractors and service providers, and a documented incident response process.

No system is perfectly secure, and we will not tell you otherwise. If a breach affects your personal information we will notify you and the relevant regulators within the time the law requires.

Where Your Information Is Held

We process personal information in the United States. If you are outside the United States, understand that US law may give your information less protection than your own country's.

Your Privacy Rights

Twenty US states now have comprehensive privacy laws in force. The rights they give differ in the details, but the core set is consistent, and rather than make you work out which law covers you, we extend the following rights to everyone who contacts us, wherever you live:

• Know what personal information we hold about you and what we do with it
• Access a copy of it, in a portable format
• Correct anything inaccurate
• Delete it, subject to the records we are required to keep
• Opt out of marketing, of any sale or sharing, and of targeted advertising
• Limit how we use sensitive personal information
• Appeal if we turn a request down
• Be free from retaliation for exercising any of these

How to Make a Request

Email support@peritussystems.com or write to . We will acknowledge within 10 days and respond within 45 days, and we will tell you if we need a further 45 days. We may ask you to verify your identity, and we will only ask for what we need to do that. You can also submit a request online using our Your Privacy Choices form.

An authorized agent may act for you with written permission. If we refuse a request we will tell you why, and you can appeal to support@peritussystems.com; we will answer an appeal within 45 days, and if we still refuse we will give you the contact details for your state attorney general.

If You Are in California

Two things are worth calling out.

Job applicants and candidates have full rights. California's exemption for applicant and employee data expired in 2023. If you are an applicant we evaluated or a partner whose profile we hold, you have the same rights as any consumer, and we do not treat applicant data as a separate category.

We do not sell your information or share it for cross-context behavioural advertising, so there is no "Do Not Sell or Share My Personal Information" link on the site. If that ever changes, the link will appear and this policy will say so before it does.

California also gives you the right to know the categories of personal information we have collected, the sources, the business purpose, and the categories of third parties we disclose to. Those are set out in Information We Collect and How We Share Information above.

If You Are in Another State with a Privacy Law

As of October 2026 that means California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, with Alabama, Louisiana, Oklahoma and Vermont to follow. Use the same contact route above; the rights we offer already meet or exceed what each of these laws requires.

Children

This site and the Peritus Platform are for business use and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, write to support@peritussystems.com and we will delete it.

Note for legal review: Cibaria is different. A consumer application with a general audience needs its own analysis — COPPA if under-13s can use it, and the state laws that now restrict targeted advertising and data sales for known minors under 16 or 18.

Changes to This Policy

We will update this policy as the business and the law change. The effective date at the bottom always reflects the current version. If a change materially affects how we use information we already hold about you, we will tell you directly — by email where we have your address — before it takes effect, and we will keep the previous version available at .

Contact Us

If you are not satisfied with how we have handled a privacy matter, you can complain to your state attorney general. California residents may also contact the California Privacy Protection Agency.

Effective date: · Last updated: October 6, 2026 · Version:

See also our Terms of Use and Accessibility Statement.