Privacy Policy

1. Introduction & Data Controller

Direct Handshake ("we", "us", or "our") operates the website directhandshake.com and associated connector routing services. This Privacy Policy outlines our standards for collecting, processing, and safeguarding commercial and personal information. By accessing our platform or submitting an intake brief, you acknowledge the terms described herein.

2. Information We Collect

We believe in minimal, purposeful data collection. We only collect information you voluntarily provide through our intake desk or direct email communications:

• Contact Information: Full name, company or portfolio name, and direct business email address.
• Operational Requirements: Geographic location (city, state, or target zip codes), industry sector, service scope, equipment specifications, and project scheduling notes.
• Specialist Credentials: Business entity name, verified service capabilities, insurance verification disclosures, and portfolio references provided by contractors or service providers applying to our network.
• Technical Metadata: Standard, non-identifying server logs (such as IP address, browser type, and request timestamps) strictly utilized for network defense, rate limiting, and DDoS prevention.

3. How We Use Collected Information

Information submitted to Direct Handshake is processed exclusively for commercial routing purposes:

• To evaluate operational briefs and identify counterparties with verified capacity and track record.
• To transmit introduction briefs between operators and vetted specialists with mutual consent.
• To respond to direct inquiries submitted to our routing desk.
• To detect, prevent, and mitigate fraudulent submissions, abuse, or unauthorized access.

4. Sharing and Disclosure of Information

We do not disclose your personal information to third parties except in the following limited circumstances:

• Direct Counterparties: Once an operator brief is evaluated and matched with a vetted specialist, contact details are shared directly with the prospective counterparty to initiate the direct handshake.
• Infrastructure Service Providers: Trusted hosting and routing providers (such as Cloudflare Pages) who operate under strict data processing and confidentiality agreements.
• Legal & Compliance Obligations: When required by applicable federal or state law, subpoena, or lawful government order to protect legal rights or prevent fraud.

5. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide specific statutory rights:

• Right to Know: You may request disclosure of the specific categories and pieces of personal information we have collected about you.
• Right to Delete: You may request the permanent deletion of your personal information from our active routing records.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell your personal data. We do not share personal information for cross-context behavioral advertising.
• Non-Discrimination: We will never discriminate against any operator or specialist for exercising their statutory privacy rights.

To exercise any of these rights, email our desk at abuzar@directhandshake.com with the subject line "California Privacy Rights Request". We verify and process all legitimate requests within 30 days.

6. CAN-SPAM Act Compliance (United States)

In accordance with the federal CAN-SPAM Act of 2003 (15 U.S.C. § 7701 et seq.):

• We never use deceptive or misleading email subjects or sender headers.
• All operational correspondence originating from our desk clearly identifies Direct Handshake and our Managing Principal.
• Every outreach or dispatch email includes our physical or registered operational contact address.
• You may opt out of future dispatches or updates at any time by replying with "UNSUBSCRIBE" or emailing abuzar@directhandshake.com. Unsubscribe requests are honored promptly within 10 business days.

7. Data Security and Retention Standards

All data in transit is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS). Access to our intake database is restricted strictly to authorized desk personnel. We retain submitted commercial briefs only as long as necessary to fulfill active matching engagements, maintain compliance records, or resolve commercial inquiries, after which data is securely purged.

8. Children's Online Privacy (COPPA)

Our platform is strictly a business-to-business (B2B) commercial service directed to corporate operators and professional contractors aged 18 and older. We do not knowingly solicit or collect information from individuals under the age of 18.

9. Updates to This Policy

We may periodically update this Privacy Policy to reflect changing federal regulations, state statutes, or desk procedures. The "Effective" date at the top of this document indicates the latest revision.

10. Contacting Our Privacy Desk

For questions, formal records requests, or privacy concerns:

Direct Handshake
Attention: Privacy & Compliance Officer
Email: abuzar@directhandshake.com
Operating Regions: United States · United Kingdom · Remote