Privacy Policy
Last updated: [LAST UPDATED DATE]
This policy explains, in plain language, what aslanconsulting.co collects, what it deliberately does not collect, and what you can ask us to do about it.
Who we are
aslanconsulting.co (“Aslan”, “we”, “us”, “our”) is operated by Aslan LLC. Our mailing address is [BUSINESS MAILING ADDRESS] and you can reach us at [CONTACT EMAIL].
If you are in the European Economic Area, the United Kingdom or Switzerland, Aslan LLC is the data controller for the information described below. That is the legal term for the party that decides why and how your information is handled.
What we collect
Information you give us
There is exactly one form on this site: the Book a revenue diagnostic flow. It asks five questions, so when you complete and submit it, it collects:
- your name;
- your work email address;
- your monthly revenue band (a range you pick from a list, not an exact figure);
- where you think revenue is leaking (a choice you pick from a list); and
- whether you record your sales calls.
We use those answers for one purpose: to prepare and schedule a revenue diagnostic for you, and to reply to you about it. We do not use them for advertising, and we do not add you to an unrelated marketing list.
Maintainer note: keep this accurate
As this policy is written, the booking form does not transmit your answers anywhere. They exist only inside your own browser for as long as the tab is open, and they are discarded when you close it. Nothing is emailed, stored on a server, or sent to a third party.
We intend to connect the form to a customer relationship management (CRM) system or an email provider so that submissions actually reach us. When that connection is made, this section must be updated: the provider has to be named as a processor, and this policy has to say what that provider receives and how long it keeps it. This note should stay here until that update happens.
Information collected automatically
Loading any page causes your browser to send the technical details our host needs in order to deliver it. That includes your IP address, the page you requested, the date and time of the request, your user agent (your browser and operating system) and, where your browser sends one, the page you came from. This is standard web request data, handled by our hosting provider rather than collected by us directly.
We do not add anything of our own to those request logs, and we do not combine them with your form answers to build a profile of you.
What we do not do
Most of this policy is short because the site is deliberately plain. Specifically:
- No cookies. This site sets no cookies at all, which is why you never see a cookie banner here.
- No browser storage. We do not use localStorage, sessionStorage or IndexedDB (these are places a site can quietly keep data inside your browser).
- No analytics. There is no Google Analytics, Google Tag Manager, Meta pixel, Hotjar, Segment, Mixpanel, Plausible or PostHog on this site.
- No advertising or retargeting trackers. Nothing on this site follows you to other websites or feeds an ad audience.
- No selling or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Third parties
Two companies receive data automatically, purely because of how this page is built and delivered. Neither one is optional from a visitor’s point of view, which is why they are named here.
Google Fonts
The typeface used across this site, Red Hat Display, is loaded from Google’s font servers at fonts.googleapis.com and fonts.gstatic.com. Your browser requests those font files directly from Google, which means Google receives your IP address and basic request headers (such as your user agent and the referring page) at the moment the page loads.
Why: so the site renders in its intended typeface. What Google does with that request is governed by Google’s own privacy policy, not by this one.
Cloudflare
This site is hosted and delivered through Cloudflare Pages. Cloudflare handles every request to aslanconsulting.co and may log IP addresses, timestamps and user agents as part of delivering the page and protecting it.
Why: delivery, security and abuse prevention, which includes filtering malicious traffic and keeping the site available. That processing is governed by Cloudflare’s own privacy terms.
How long we keep things
- Form answers. We keep a submission only as long as we need it to run your diagnostic and keep a reasonable record of our dealings with you, and then we delete it. Once the form is connected to a CRM or email provider, that provider’s own retention period will also apply, and this policy must be updated to say what it is.
- Request and security logs. These sit with Cloudflare and are kept under Cloudflare’s retention schedule, not ours.
- Analytics history. None exists, because we do not run analytics.
How we protect it
The site is served only over an encrypted HTTPS connection. Access to anything you submit is limited to the people who need it in order to respond to you, and we keep the number of tools that touch your data deliberately small. These are reasonable measures, not a guarantee: no method of transmitting or storing information is perfectly secure, so we cannot promise absolute security.
Your rights
If you are in California (CCPA and CPRA)
California residents have the right to:
- know what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to;
- delete the personal information we hold about you, subject to the narrow exceptions the law allows;
- correct personal information about you that is inaccurate;
- opt out of the sale of personal information and of sharing it for cross-context behavioral advertising; and
- not be discriminated against for exercising any of these rights.
To be plain about the fourth point: we do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is nothing here for you to opt out of. If you send us an opt-out request anyway, we will honor it and confirm that status to you. We will also never give you worse service, a different price, or a reduced experience because you exercised a privacy right. You may use an authorized agent to make a request on your behalf, and we may ask that agent for proof that you authorized them.
If you are in the EEA, the UK or Switzerland (GDPR and UK GDPR)
You have the right to request:
- access to the personal data we hold about you, and a copy of it;
- rectification of data that is wrong or incomplete;
- erasure of your data, often called the right to be forgotten;
- restriction of how we process your data while a question about it is being resolved;
- portability, meaning a copy in a commonly used machine-readable format; and
- objection to processing we carry out on the basis of our legitimate interests.
Where we rely on your consent (you choosing to fill in and submit the booking form), you can withdraw that consent at any time, which does not affect anything done before you withdrew it. Where we rely on legitimate interests, that interest is keeping the site available, fast and free of abuse.
You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom that is the Information Commissioner’s Office; in the EEA it is the data protection authority for the country where you live or work. You can complain to them whether or not you raise the issue with us first, although we would rather have the chance to put it right.
How to exercise any of this
Email [CONTACT EMAIL] and tell us what you want. We may need to ask you a question or two to confirm who you are, and we do that only so we never hand your information to the wrong person. We respond as quickly as we reasonably can, and within the time limit the applicable law sets.
Children’s privacy
This site is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16, and the site is not intended for children under 13. If you believe a child has sent us information, email [CONTACT EMAIL] and we will delete it.
International visitors
The information described in this policy is processed in the United States, including by the hosting and font providers named above. If you visit from outside the United States, your information will be processed in a country whose privacy laws may differ from the ones where you live. By using the site or submitting the booking form, you understand that this transfer takes place.
Changes to this policy
We will update this policy when the site changes, and in particular when the booking form starts transmitting data. The “Last updated” date at the top of the page always tells you which version you are reading. If a change is significant, we will make that clear rather than quietly editing a line.
Contact