Privacy Policy

Scope and controller

Consltr, LLC (“Consltr,” “we,” “us,” or “our”) operates consltr.com and is the controller or business responsible for the personal information described in this policy. Consltr is based in the San Francisco Bay Area, California. You can contact us at info@consltr.com.

This policy covers the public consulting website, its project-inquiry form, and related website analytics. It does not govern a client product shown in Selected Work, a linked third-party website, or data Consltr processes for a client under a separate agreement.

Notice at collection

Providing a name, email, and project description is required to submit the form. Other fields are optional. Please do not include passwords, government identifiers, financial account details, health data, or other sensitive information in the free-text message.

Information we collect

• Contact and identity information: name, email address, company, and information you include in correspondence.
• Project and commercial information: project type, description, budget range, timeline, source, and later business communications.
• Technical and usage information: page path, page title, referrer, device type, campaign parameters, interactions, timestamps, browser language, time zone, screen dimensions, session and visitor identifiers when permitted, and IP address processed by network services.
• Preference information: theme choice, consent choice, and analytics preference stored in your browser.
• Derived information: approximate region derived from IP address, experiment assignment, and aggregate engagement measurements.

We collect this information directly from you, automatically from your browser and our infrastructure, and from providers that operate the website on our behalf.

How and why we use information

Respond and take pre-contract steps

Review inquiries, communicate with you, scope work, and prepare a possible proposal or agreement.

Operate and secure the site

Deliver pages and APIs, prevent spam and misuse, troubleshoot failures, and protect Consltr and visitors.

Measure and improve

Understand aggregate usage, evaluate accessible design and content, and measure A/B experiments through Salsa.

Meet legal obligations

Maintain records, respond to lawful requests, establish or defend claims, and enforce these policies.

Where the GDPR or similar law applies, our legal bases are steps requested before entering a contract, performance of a contract, legitimate interests in running and securing our business, compliance with law, and consent for non-essential browser storage or analytics where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.

Salsa analytics and A/B experiments

The site uses the first-party Salsa Analytics SDK at cloud.salsas.io. Before you make a choice, Salsa operates in cookieless mode: it sends aggregate page-view, click, scroll, form-submit, and experiment events with an in-memory page session and no persistent visitor identifier. These events can include the page path and title, referrer, device class, campaign parameters, interaction labels, and a request IP used server-side to derive an approximate region.

If you allow analytics, Salsa also uses a random first-party visitor identifier, a session identifier, browser language, time zone, and screen dimensions so visits and experiment assignments can remain consistent. Choosing “Required only” stops Salsa analytics and removes the Salsa visitor and session identifiers from browser storage. Consltr does not intentionally send the inquiry form’s name, email, company, or free-text message to Salsa. Salsa does not use third-party cookies, cross-site tracking, or fingerprinting on this site.

See the Cookie Policy for the exact browser-storage inventory and how to change your choice.

How information is disclosed

Consltr may disclose information only as reasonably necessary to the following recipients:

• Service providers: Salsa for analytics and experimentation; DigitalOcean and technical infrastructure providers for hosting; database, backup, security, and email-delivery providers; and Google Fonts when the browser requests font files.
• Professional advisers: lawyers, accountants, insurers, and other advisers subject to appropriate duties.
• Legal and safety recipients: authorities or other parties when required by law or reasonably necessary to protect rights, safety, and system integrity.
• Business transaction recipients: a successor or counterparty in a merger, financing, reorganization, or sale, subject to appropriate protections.

Consltr does not sell personal information, share it for cross-context behavioral advertising, or offer financial incentives for personal information. We do not use sensitive personal information to infer characteristics.

Retention and security

Consltr keeps personal information only as long as reasonably necessary for the purposes described above. The period depends on whether an inquiry remains active, becomes a client engagement, is needed for legitimate business records, or must be retained for tax, legal, security, dispute, or enforcement reasons. We delete or de-identify information when it is no longer needed. Browser-storage periods are listed in the Cookie Policy.

We use administrative, technical, and physical safeguards appropriate to the nature of the information, including encrypted transport, access controls, rate limits, hardened production services, and restricted database access. No system is completely secure, so we cannot guarantee absolute security.

California privacy rights

Where the California Consumer Privacy Act and California Privacy Rights Act apply, California residents may request access to categories and specific pieces of personal information, correction, deletion, information about collection and disclosure, and portability. They may also opt out of sale or sharing and limit certain uses of sensitive personal information, and they have a right not to receive discriminatory treatment for exercising privacy rights.

During the preceding 12 months, Consltr may have collected the categories described above: identifiers; professional, commercial, and project information; internet or electronic network activity; approximate geolocation derived from IP; and limited inferences such as experiment assignments. These categories are disclosed to service providers for the business purposes described in this policy. They are not sold or shared for cross-context behavioral advertising, including for people under 16.

To submit a request, email info@consltr.com with the subject “California Privacy Request.” We will verify the request using information reasonably related to your relationship with Consltr. An authorized agent may submit a request with proof of authority. We honor legally recognized opt-out preference signals, including Global Privacy Control, where applicable. Because Consltr does not sell or share personal information, a separate “Do Not Sell or Share” link is not currently required for our practices.

California’s official explanation of these rights is available from the California Attorney General (opens in a new tab).

GDPR and international privacy rights

If the GDPR, UK GDPR, or a similar law applies to you, you may have rights to be informed, access personal data, correct inaccurate data, erase data, restrict processing, receive portable data, object to processing based on legitimate interests, and withdraw consent. You may also complain to the data-protection authority where you live or work. Consltr does not use website information for solely automated decisions that produce legal or similarly significant effects; A/B assignments only change website presentation.

Consltr is established in the United States, and the providers described above may process information in the United States or other countries. Where required, transfers are made under an approved legal mechanism and appropriate safeguards. Contact us for information relevant to a particular transfer or request.

The European Commission provides an official overview of individual data-protection rights (opens in a new tab).

Children and policy changes

This business-to-business consulting site is not directed to children under 16, and Consltr does not knowingly collect personal information from them. If you believe a child submitted information, contact us so we can review and delete it as appropriate.

We may update this policy when our practices, vendors, or legal obligations change. The “last updated” date will change, and material changes will receive additional notice where required.

Contact and privacy requests

Email privacy questions or requests to info@consltr.com. Include “Privacy Request” in the subject and identify the right you want to exercise. Do not send identity documents unless we specifically request a secure verification method.