PRIVACY POLICY PRISM CONSULTANCY CO. (USA) INC.
1. SCOPE
This Policy applies to all personal data processed by Prism Consultancy Co. (USA) Inc in connection with our business services in Florida, United States of America, regardless of the country from which it originates, anchored by the Florida Information Protection Act (FIPA) and the Florida Digital Bill of Rights (FDBR). These statutes are designed to safeguard the personal information of our consumers or clients including personal data of our website visitors, partners and any other individuals whose personal data is permissible to collect.
2. APPLICATION
The Florida Privacy Protection Act (FPPA) possesses extraterritorial reach, similar to other comprehensive data privacy statutes. It may apply to entities located outside Florida, provided they meet specific thresholds. In particular, the FPPA governs businesses that operate in Florida and either:
- control or process the personal data of 50,000 or more consumers, or
- generate revenue from the sale of personal data.
3. DEFINITION
- Personal Data. Personal data refers to any information that is linked, or can reasonably be linked, to an identified or identifiable individual. This includes—but is not limited to—names, Social Security numbers, driver’s license numbers, financial account details, and medical records. It also covers biometric data, unique identifiers, and precise geolocation information.
- Sensitive Personal Data. Sensitive personal data comprises specific categories of personal information that warrant enhanced protection due to the potential risks associated with misuse. This includes data revealing racial or ethnic origin, religious beliefs, physical or mental health conditions, sexual orientation, citizenship or immigration status, genetic or biometric data used for individual identification, information collected from a known child, and precise geolocation data.
4. COLLECTION AND PROCESSING OF DATA
- We are permitted to process personal data solely when it is reasonably necessary and proportionate to the purposes previously disclosed.
- Data collection must be confined to information that is adequate, relevant, and strictly necessary to fulfill those specified purposes.
5. INTERNATIONAL DATA TRANSFER
We guaranteed that all transfers of personal data to onshore third parties are conducted in compliance with FDBR, specifically through contractual requirements between data controllers and processors. This is to ensure adequate protection of international transfers of your personal data and information.
6. YOUR RIGHTS
- Right to Correction – Consumers have the right to correct inaccuracies in their personal data held by “controllers” (businesses that collect and process personal data)
- Right to Deletion – Consumers may request deletion of personal data held by a “controller” (a business that collects and determines how personal data is used).
Controllers must comply unless the data is:
- Required for legal obligations
- Used for internal operations (with strict limitations)
- Right of Access – Individuals may request access to personal data collected by a “controller” (typically a business).
Controllers must respond with:
- Categories of personal data collected
- Specific pieces of personal data held
- Purposes for collection and disclosure
- Third parties with whom data was shared
- Right to Opt-out of sale or sharing of their personal information as well as the use of their data for targeted advertising or profiling – Direct businesses not to sell or share their personal information with third parties.
The use of your personal data for targeted advertising, which involves profiling you based on your online behavior, preferences, or location. We honor this request unless the data is used for exempted purposes (e.g., fraud prevention or internal analytics).
- Data Protection Assessment – The FDBR does impose accountability and transparency obligations on businesses (called “controllers”) that process personal data, which may require internal assessments or documentation of data practices.
- Limited and Secure Processing – Businesses must implement reasonable security measures to protect personal data from unauthorized access, destruction, use, modification, or disclosure. This includes: Encryption and access controls, Employee training on data handling, Vendor management and oversight, and Incident response protocols for data breaches
It also emphasizes data minimization and purpose limitation, meaning: Data must be collected only for specific, disclosed purposes and businesses must limit the scope and duration of data processing to what is necessary.
- Disclosure Requirements – businesses that collect personal data from Florida residents must meet specific disclosure requirements to ensure transparency and consumer control. These disclosures must be clear, accessible, and provided at or before the point of data collection.
7. DATA SECURITY
We adopt reasonable security measures to safeguard sensitive personal information. This includes proactive efforts to prevent data breaches and prompt notification to affected individuals in the event of a security incident. We also implement and maintain appropriate safeguards to protect personal data from unauthorized access, destruction, use, modification, or disclosure.
8. DATA BREACH
We notify both affected individuals and the Florida Department of Legal Affairs in the event of a data breach involving personal information. Such notice must be provided “as expeditiously as practicable and without unreasonable delay,” and in no case later than 30 days following the determination or reasonable belief that a breach has occurred. Noncompliance may lead to substantial civil penalties.
9. CONTACT
If you have questions about data protection, would like information, would like to object to data processing or would like to have your data deleted, please contact us by sending an email to: [email protected].
Please send your request by letter to the following address:
PRISM CONSULTANCY CO. (USA) INC.
19 DEL PRADO BLVD. NORTH
SUITE 4, CAPE CORAL, FL 33909
10. ADAPTION
This Privacy Policy does not form part of any contract with you. We may amend this privacy policy at any time. The version published on www.worldwide-visas.com is the current version.
Last updated: 14 August 2025.
