Privacy Policy

1. Scope of this Policy

This Policy applies to personal information handled by Sloan's Lake Managing Member through this website, direct correspondence, discovery conversations, proposals, consulting engagements, and ordinary business administration. It applies to visitors, prospective clients, current clients, client representatives, vendors, and other people who communicate with us.

This Policy does not govern the independent practices of Shopify, internet service providers, email providers, payment processors, professional advisers, or other third parties. Those organizations may process information under their own notices and instructions. If a client supplies personal information about employees, customers, contractors, or other individuals, the client is responsible for having an appropriate legal basis and for providing any notice required by law.

2. Who is Responsible for the Information

For information processed for our own business purposes, Sloan's Lake Managing Member determines why and how the information is used. In some consulting engagements, we may process information only under a client's documented instructions. In that situation, the client generally determines the purposes and means of processing, and the applicable engagement agreement will allocate responsibilities between the parties.

Questions about this Policy or our privacy practices may be directed to the contact details at the end of this page. Please do not send highly sensitive information, government identification numbers, account credentials, or payment-card details in an ordinary email.

3. Information We May Collect

Information you provide

We may receive your name, company name, professional role, email address, telephone number, postal address, preferred contact method, project goals, operational concerns, budget context, scheduling information, and the contents of messages or documents you choose to send. If an engagement begins, we may also receive billing contacts, invoice information, contract records, project notes, feedback, and information required to provide the agreed services.

The inquiry form included in the supplied website configuration validates entries and displays an on-screen confirmation, but it does not transmit the entered information to us or to an external endpoint. Information typed into that form remains in the visitor's browser unless the site configuration is later changed. A future connection to a form processor must be reflected in this Policy before it is activated.

Information collected automatically

When you visit the website, the hosting and commerce platform, network providers, security services, and any analytics tools enabled by the site operator may receive technical data. This can include IP address, approximate location inferred from IP, browser and device type, operating system, language, referring page, pages viewed, time and date of access, interaction events, diagnostic information, and identifiers stored through cookies or similar technologies.

Information from business sources

We may receive professional contact information from your employer or colleagues, public company websites, professional directories, referrals, event organizers, service providers, or publicly available business records. We use this information only for legitimate business communication, relationship administration, due diligence, or service delivery.

4. How We Use Personal Information

Depending on the context, we may use personal information to:

• respond to questions and evaluate whether a requested service is appropriate;
• prepare proposals, scopes of work, estimates, schedules, and engagement documents;
• deliver consulting services, communicate about work, and maintain project records;
• manage billing, accounting, tax, insurance, and other administrative obligations;
• operate, secure, troubleshoot, maintain, and improve the website and our systems;
• protect clients, visitors, our business, and third parties from fraud, abuse, misuse, or security incidents;
• enforce agreements, establish or defend legal claims, and comply with lawful requests;
• maintain professional relationships and send service-related communications;
• send marketing communications where permitted, with a practical way to request that they stop; and
• create aggregated or de-identified business information that is not reasonably linked to an individual.

We seek to collect information that is reasonably necessary for the stated purpose. We do not use personal information for materially different purposes without appropriate notice, consent, or another lawful basis.

5. Legal Bases Where Applicable

Some privacy laws require a legal basis for processing. Depending on the relationship and jurisdiction, we may rely on performance of a contract or steps requested before entering a contract; our legitimate interests in operating, securing, and improving a consulting business; compliance with legal obligations; protection of vital or legal interests; or consent. Where processing is based on consent, consent may generally be withdrawn for future processing, although withdrawal does not invalidate earlier lawful processing.

Our legitimate interests include answering genuine business inquiries, managing client relationships, maintaining accurate records, protecting systems, preventing misuse, and improving how services are delivered. We consider the nature of the information, the reasonable expectations of the individual, and the potential impact of processing.

6. When Information May Be Disclosed

We may disclose personal information to service providers that support website hosting, cloud storage, email, communications, document management, scheduling, payment processing, accounting, analytics, security, and professional administration. These providers receive information for defined services and are expected to handle it consistently with applicable contractual and legal obligations.

Information may also be disclosed to attorneys, accountants, insurers, auditors, financial institutions, and other professional advisers; to a prospective buyer or successor in a legitimate corporate transaction subject to appropriate safeguards; or to public authorities and other parties when reasonably necessary to comply with law, respond to valid process, protect rights and safety, investigate misuse, or establish or defend claims.

We do not disclose confidential client materials for advertising. We do not publish a client's name, testimonial, project details, or results without authorization.

7. Sale, Sharing, Targeted Advertising, and Profiling

We do not sell personal information for money. We do not currently use personal information collected through this website for cross-context behavioral advertising or targeted advertising, and we do not use it to make decisions producing legal or similarly significant effects through automated profiling. If these practices change, this Policy and any required choice mechanisms will be updated before the new use begins.

Where a law treats certain analytics or advertising disclosures as a “sale” or “sharing,” applicable visitors may have a right to opt out. Where legally required and technically applicable, we will also process recognized universal opt-out signals, such as Global Privacy Control, as a request relating to the browser or device that sends the signal.

8. Cookies and Similar Technologies

The website platform may use cookies, local storage, pixels, server logs, and similar technologies for security, load balancing, session management, preferences, performance, and analytics. The custom theme control stores a light-or-dark preference in browser local storage under the key “sl-theme”; it does not by itself create a cookie or transmit the preference to us. More detail is provided in the Cookie Policy.

You can adjust browser settings to block or delete many cookies, but doing so may affect security, saved preferences, or website functionality. Any optional analytics or advertising technology should be activated only with the notices and consent controls required for the intended audience.

9. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including service delivery, relationship administration, recordkeeping, security, dispute resolution, and legal compliance. Retention periods vary by record type and may be influenced by contractual commitments, limitation periods, tax and accounting rules, professional obligations, backups, and the need to preserve evidence.

Inquiry records that do not lead to an engagement are generally reviewed periodically and deleted or de-identified when no longer useful for legitimate follow-up or legal protection. Client engagement, contract, invoice, and core work records may be kept for a longer period consistent with business and legal needs. Backup copies may remain temporarily until overwritten through routine cycles.

10. Security

We use reasonable administrative, technical, and physical safeguards designed for the nature and volume of information processed. Measures may include access controls, authentication, role-based permissions, software updates, provider due diligence, secure transmission where supported, backups, and procedures for responding to suspected incidents.

No internet transmission, email system, storage service, or security measure can guarantee absolute protection. You are responsible for choosing appropriate communication channels and avoiding unnecessary sensitive information. If we determine that a security incident requires notice under applicable law, we will provide notice in the manner and time required.

11. Your Privacy Choices and Rights

Depending on your residence, the law that applies, and whether statutory thresholds or exceptions are met, you may have rights to confirm processing; access or obtain a copy of personal information; correct inaccuracies; delete information; obtain data portability; opt out of certain sales, sharing, targeted advertising, or profiling; limit certain uses of sensitive information; withdraw consent; or appeal a decision about a request. You may also have the right not to receive discriminatory treatment for exercising an applicable privacy right.

These rights are not absolute. A request may be limited or denied where identity cannot reasonably be verified, the information is not covered, an exception applies, retention is required, or fulfilling the request would adversely affect another person's rights. We will explain a denial when required.

Submitting a request

Send a clear request to advisory@sloanslakemanagingmember.com or use the postal address below. Describe the right you wish to exercise, the relationship you have had with us, and the information needed to locate relevant records. Do not include copies of sensitive identity documents unless specifically requested through a suitable channel.

We may ask for reasonable verification information and may need authorization before acting for an agent. We will respond within the period required by applicable law. If we deny a Colorado privacy request that carries an appeal right, you may appeal by using the same contact details and stating “Privacy Appeal” in the subject or first line. The appeal will be reviewed by someone able to reconsider the original decision.

12. California and Colorado Disclosures

For California residents, the categories described in this Policy may include identifiers, customer-record information, internet or network activity, professional information, commercial information relating to an engagement, and inferences drawn from project context. We collect and disclose these categories for the business purposes described above. We do not knowingly sell or share personal information of people under 16.

For Colorado residents acting in an individual or household context, applicable law may provide rights to access, correct, delete, or obtain portable data and to opt out of sale, targeted advertising, or certain profiling. Colorado rights do not necessarily apply to information handled in an employment or business-to-business context, and the law includes coverage thresholds and exemptions. We honor applicable rights when the relevant law covers the processing.

13. Children

This website and our consulting services are intended for business decision-makers and are not directed to children. We do not knowingly solicit personal information from children under 13 through this website. If you believe a child has provided personal information, contact us so the situation can be reviewed and appropriate action taken.

14. International Visitors

Our operations are based in Colorado, United States. If you provide information from another country, it may be processed in the United States or another location where a service provider operates. Privacy and government-access rules may differ from those in your jurisdiction. Where a legally required transfer mechanism applies, the relevant parties should implement it through an appropriate agreement or provider arrangement.

15. Changes to this Policy

We may revise this Policy to reflect changes in law, services, technology, vendors, or information practices. The “Last updated” date will be changed when a revision is posted. If a change materially affects how previously collected information is used, we will provide additional notice or obtain consent where required.