Privacy Policy

This page explains what I collect when you use atconsultingpro.com or work with me, what I do with it, and what you can ask me to do about it.

The short version: I collect what I need to answer you and do the work. I don't sell it, I don't use it for advertising, and you can ask to see it, correct it or have it deleted.

Who's responsible for your information

atconsultingpro.com is operated by Alexander Kuznetsov, a sole proprietor trading as AT Consulting Pro, 48 Bambi Crescent, Keswick, Ontario L4P 4C6, Canada. Email: support@atconsultingpro.com.

Everywhere else on this page, "I" and "me" mean AT Consulting Pro.

Privacy Officer

The person responsible for protecting personal information at AT Consulting Pro is the Privacy Officer. You can reach the Privacy Officer at support@atconsultingpro.com (put "Privacy" in the subject line) or by mail at the address above.

What I collect

When you ask for a discovery call

The discovery-call form asks for your name, your email address, your business stage, a monthly budget range and a timeline. You can also add your company name, website, country or region, the topics you're dealing with, and anything else you want me to know.

When you use the contact form

Your name, your email address, your message, and the reason for writing if you pick one.

When you email me directly

Your email address, your name, and whatever you choose to write or attach.

When we work together

• Contact details for you and anyone on your team I work with.
• The business information you share so I can do the work: plans, sales and marketing figures, pricing, customer feedback, access to tools and accounts you choose to give me. If you're a sole proprietor, some of the financial information for a business plan may be about you personally. I use it only for the work you've hired me for.
• The proposal, Statement of Work, invoices and payment records. For a bank transfer, that means the payer name and reference that come with the payment.

I never collect card numbers. Payment is by bank transfer against an invoice, and this site never asks for card or banking details.

Please don't send me sensitive information the work doesn't need, such as health information or your Social Insurance Number.

The tools

"Sort your month" and "Retainer vs. Hourly" run entirely in your browser. What you tick or type isn't sent to me or to anyone else, and it isn't saved on your device. Close the page and it's gone.

There's one exception, and only if you ask for it. If you tick "Email me this result" and enter your email address, the site sends that address and your result to my server so the email can go out. That's a single informational message. Your address isn't kept after it's sent and isn't added to any list.

When you click "Book a discovery call with these picks", the link to the discovery form carries short fixed codes for the topics you ranked and a suggested starting point (for example topics=no-clear-plan). They're the same codes for everyone. They don't include your name, your email or anything you typed, and nothing reaches me until you fill in the form and press submit.

Technical information

Like every website, this one receives some technical information when you visit: your IP address, browser type, the page you asked for and the time. My web hosting provider keeps this in server logs for a limited period, for security and troubleshooting.

To stop spam, the forms keep a scrambled (hashed) version of your IP address for a short time so the same address can't send dozens of messages. It's deleted within 24 hours. The forms also contain a hidden field that catches bots; it holds nothing about you.

The site doesn't embed videos, maps, social media widgets or fonts from other companies.

Analytics

This site doesn't use analytics, advertising or social media tracking at the moment. If I add analytics later, it will stay off until you agree to it, and this policy will be updated before that happens.

Why I use it

I use your information only for the reason you gave it to me, or for a closely related reason you'd reasonably expect, unless you agree to something else or the law requires it. Under Canadian law, I rely on your consent. You give it when you send a form or an email for the purpose the form describes, and you can withdraw it (see "Your rights").

If you're in the European Union or the United Kingdom, the GDPR or UK GDPR asks me to name a legal basis for each use:

Sending you a tool result by email relies on your consent (the checkbox).

Emails I send you

Replies to your messages and requests are just that: replies. There's no newsletter and no mailing list.

If I ever want to email you about my services on my own initiative, for example to check whether a retainer might help after a project, I'll only do it where Canada's anti-spam law (CASL) allows. That means you've agreed to it, or you asked about my services in the last 6 months, or you've been a client in the last 2 years. Any email like that identifies me with my mailing address and email, and includes a simple way to say no more. I act on an unsubscribe request within 10 business days, and usually much sooner.

Who I share it with

I don't sell or rent personal information, and I don't share it with anyone for advertising.

The only people and companies who see it are those who help me run the business, and only as far as they need to:

• My web hosting provider, which runs the site, passes form submissions to my email and keeps the server logs.
• My email provider, which carries and stores email.

• The video-call platform we use for calls, named in the calendar invitation. I don't record calls unless we both agree first.
• Banks, mine and yours, which process payments.
• My professional advisers (an accountant or a lawyer) when I need their help, under a duty of confidentiality.

I'll also disclose information if the law requires it, for example under a court order, or where the law allows it to protect my rights or someone's safety.

Where your information is stored

I'm based in Ontario, Canada. Some of my service providers store or process information outside your province and outside Canada, including in the United States. While it's there, it's subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.

Québec residents: before your information is communicated outside Québec, I assess whether it will be adequately protected, as Québec's privacy law (Law 25) requires.

EU and UK visitors: the European Commission and the United Kingdom both recognize Canada as providing adequate protection for personal information handled by businesses subject to PIPEDA. When a provider processes information outside Canada, the transfer relies on that provider's contractual safeguards, such as standard contractual clauses.

How long I keep it

I don't keep personal information longer than I need it.

• Contact messages and discovery-call requests: as long as needed to reply and deal with your request, and for any engagement that follows. After that, they're deleted within a reasonable time.
• Engagement files: for the length of the engagement and as long as afterwards as I need them to answer questions about the work. You can ask me to return or delete your materials when we finish.
• Contracts, invoices and payment records: as long as Canadian tax law requires, which is generally six years from the end of the tax year they relate to.
• Server logs: kept by my hosting provider for a limited period for security.
• Hashed IP addresses used against spam: deleted within 24 hours.

You can ask me to delete your information sooner. I will, unless the law requires me to keep it.

Your rights

Wherever you are, you can ask me to:

• tell you what personal information I hold about you, how I've used it and who I've shared it with, and give you a copy;
• correct anything that's wrong or incomplete;
• delete it, where I'm not required to keep it;
• stop using it for something you consented to. Withdrawing consent doesn't undo what I've already done, and if I need the information to do work you've hired me for, I'll tell you what withdrawing would mean for that work.

In Québec, you can also ask for your information in a structured, commonly used technological format, and ask me to stop disseminating it where the law allows.

In the EU or UK, you also have the right to restrict how I use your information, to object to uses based on legitimate interests, and to data portability.

To make a request, email support@atconsultingpro.com with "Privacy request" in the subject line. I may ask you to confirm who you are before I hand anything over. I'll answer within 30 days, and requests are free in almost every case.

Complaints

Please come to me first; most things can be sorted out by email. If you're not satisfied with my answer, you can complain to:

• Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca
• Québec: the Commission d'accès à l'information du Québec, cai.gouv.qc.ca
• United Kingdom: the Information Commissioner's Office, ico.org.uk
• European Union: the data protection authority in the country where you live or work

How I protect it

The site uses HTTPS. The accounts I use for email, files and hosting are protected with strong passwords and two-factor authentication where the service offers it, and I'm the only person with access to them. I only ask for access to your accounts when the work needs it, and I give it up when we finish.

No system is perfectly secure, so I can't promise that nothing will ever go wrong. If a breach creates a real risk of significant harm to you, I'll tell you and report it to the Office of the Privacy Commissioner of Canada, and, for Québec residents where there's a risk of serious injury, to the Commission d'accès à l'information. I keep a record of any breach, as the law requires.

Automated decisions

The tools on this site suggest a starting point based only on what you tick. They don't make any decision about you. I read every discovery-call request myself, and no one is accepted or turned away by software.

Children

This site and my services are for businesses. They're not meant for anyone under 18, and I don't knowingly collect information from children.

Changes to this policy

When I change this policy, I'll update the date at the top. If a change affects information you've already given me in a significant way, I'll tell you before it applies.

Contact

Privacy Officer, AT Consulting Pro
48 Bambi Crescent, Keswick, Ontario L4P 4C6, Canada
support@atconsultingpro.com

See also the Cookie Policy and the Terms of Service.