What we collect
When you submit the fit-call request form, we collect the information you provide: your name, work email, company, role, the reason you’re reaching out, your preferred call window, and any optional notes you include. We use this information only to schedule the consultation and to evaluate fit.
Our website hosting provider automatically receives basic technical information when you visit any page on this site: your IP address, browser type, referring page, and time of visit. This is standard for any website on the public internet and is used by the hosting provider for security and operational purposes (for example, blocking abusive traffic). A bot-protection service checks fit-call form submissions for spam, and an email delivery service delivers them to us.
We use a privacy-friendly analytics service to count page visits. It does not use cookies and does not identify you. We do not run advertising or behavioral tracking on this site.
If you book a consultation through our scheduler, a third-party scheduling service collects information directly. That information is covered by the scheduler’s own privacy policy.
What we do not collect
- We do not sell your information.
- We do not share your information with marketers or data brokers.
- We do not use your contact-form information for any purpose other than responding to your inquiry and conducting the consultation.
- We do not place advertising cookies on this site.
How we use your information
Information from the fit-call form is used to (a) respond to your request with three time options for the call, (b) prepare for the call (so we know what you’re asking about), and (c) document our scoping conversation if it leads to an engagement. If we don’t engage, we retain only enough record-keeping to recognize you if you reach out again later.
Engagement-time data handling
When an engagement starts, the data we handle (your security policies, technical architecture, audit evidence, etc.) is governed by our signed engagement letter and Master Services Agreement. This privacy policy does not cover it. The engagement letter specifies confidentiality, data handling, and any specific obligations under your industry’s requirements.
Your rights
You can request a copy of any information we hold about you. You can request that we delete it. To do either, email us at hello@northstar-demo.example with “Privacy request” in the subject line. A principal of the firm handles these requests and will confirm when it is done. [TO CONFIRM: the inbox for privacy requests, the person who handles them, and that someone checks that inbox.]
[Replace with attorney-reviewed jurisdiction-specific rights language. The placeholder above is illustrative; specific GDPR / CCPA / state-law rights enumeration must be drafted by a licensed attorney for the firm and the regions it serves.]
Updates
We may update this policy. The “Last updated” date above shows the most recent revision.
Contact
Questions about this Privacy Policy? Email hello@northstar-demo.example or call (617) 555-0142.