1. Who we are
This Privacy Policy describes how we collect, use, share and protect information when you visit or use our website at https://dlconsulting.co (the “Site”) and when you contact us about our services.
DL Consulting is a registered fictitious business name (d/b/a) used by Daniel Lawrence, a sole proprietor. In this policy, “DL Consulting”, “we”, “us” and “our” refer to that business.
DL Consulting
1065 SW 8th Street, #5887, Miami, Florida 33130, United States of America
Email: privacy@dlconsulting.co
By accessing or using the Site, you consent to the collection, use and disclosure of your information as described here. If you do not agree, please do not use the Site.
2. What this policy covers, and what it does not
This policy covers information collected through the Site and through general inquiries about our services.
It does not cover client data handled during a paid engagement. Information a client provides to us in the course of an engagement, including operational data, systems access, exports and documents, is governed by the confidentiality, data handling and security terms of the signed Master Services Agreement and the applicable Statement of Work. Where those terms and this policy differ, the signed agreement governs.
3. Information we collect
3.1 Information you give us
- Name and job title
- Company or organization name
- Email address and, where you provide it, telephone number
- The content of any message, inquiry, document or file you send us
- Meeting and scheduling details when you book a call with us
We do not take payment through the Site and we do not collect card or bank account details anywhere on it. Section 6.1 explains how invoices are paid.
3.2 Information collected automatically
The Site is hosted by DreamHost and built on WordPress. Their servers keep standard records of visits, which include:
- IP address and approximate location derived from it
- Browser type, device type and operating system
- Pages viewed, the time of the visit, and the referring page or search that brought you here
- Cookie and analytics identifiers set by WordPress, its plugins and Google Analytics, as described in section 7
We do not knowingly collect special categories of personal data, and we ask that you do not send them to us through the Site.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
4. How we use your information
- To respond to your inquiry and to correspond with you about our services
- To schedule, prepare for and follow up on calls and meetings
- To prepare proposals, statements of work and other engagement documents at your request
- To prepare and administer proposals, contracts and invoices where you become a client, which we do in our contract system rather than on the Site
- To operate, secure and improve the Site, and to understand which content is useful
- To send occasional updates about our work, where you have asked to receive them or where we have a legitimate interest in contacting a business address, subject always to your right to opt out
- To comply with legal, tax and record keeping obligations, and to establish, exercise or defend legal claims
If we want to use your information for a purpose not listed above, we will ask for your consent first, unless the law requires or permits us to act otherwise.
5. Legal bases for processing
Where the General Data Protection Regulation or a comparable law applies to you, we rely on the following legal bases:
- Your consent, for analytics cookies and marketing communications, which you may withdraw at any time
- The performance of a contract, or steps taken at your request before entering into one
- Our legitimate interests in operating and securing the Site, responding to business inquiries and developing our practice, balanced against your rights
- Compliance with a legal obligation, including tax and accounting requirements
6. How we share your information
We do not sell your personal information, and we do not transfer it to third parties except as set out below.
We use a small number of service providers, each of which processes information on our behalf and only for the purpose it was given:
- DreamHost, which hosts the Site and its underlying WordPress installation
- Microsoft, which provides our email, calendar and file storage, so any message you send us is held in that environment
- Google, which provides Google Analytics, the tool we use to understand how the Site is used
- Dubsado, which we use for proposals, contracts, client onboarding and invoicing, and which operates the client portal described in section 6.1
We may also disclose information to:
- Professional advisers, including our accountant and legal counsel, where necessary and under a duty of confidentiality
- Authorities or other parties where required to comply with applicable law, regulation, court order or legal process, to enforce our agreements, or to respond to claims that your use of the Site infringes third party rights
- A successor entity, if the business is reorganized, incorporated, merged or acquired, in which case your information may transfer as a business asset and this policy will continue to apply until replaced
We require our service providers to use your information only for the purpose for which it was shared, and not to retain it longer than necessary for that purpose. Each of them holds the information under its own agreement with us and its own privacy notice.
6.1 Invoices and payment
No payment is taken on the Site. When an invoice is due, we send it through Dubsado, which invites you to set up an account on its client portal with your own login and password, and payment is made there.
That means your login credentials for the portal, and any card or bank details you use to pay, are given to Dubsado and its payment processor. We never see, collect or store them. Your use of the portal is subject to Dubsado’s own terms and privacy notice as well as to this policy.
7. Cookies, analytics and server logs
WordPress and the plugins that run the Site set a small number of cookies that keep it working and secure. These are strictly necessary and are always on. DreamHost, as our host, keeps standard server logs of requests to the Site, which it retains under its own retention schedule.
7.1 Google Analytics
We use Google Analytics to understand how the Site is used, so that we can improve it. It sets its own cookies and identifiers, and it records information such as the pages you visit, how long you spend on them, the approximate location derived from your IP address, and the device and browser you use. That information is processed by Google as our service provider.
We do not use Google Analytics for advertising. We do not enable its advertising features or audience sharing, and we do not use it to identify you personally or to follow you across other websites.
Analytics cookies are optional. Where the law that applies to you requires your consent before they are set, they are not set until you give it through the cookie banner on the Site, and you can withdraw that consent at any time through the same banner. You can also opt out of Google Analytics in every browser using the opt-out add-on that Google provides.
You can control cookies through your browser settings. Blocking strictly necessary cookies may affect how parts of the Site work; blocking analytics cookies will not.
8. How long we keep your information
- Inquiries that do not lead to an engagement, held in our Microsoft environment: up to 24 months from the last contact, then deleted
- Client records, contracts, invoices and correspondence, held in Dubsado and in our Microsoft environment: for the duration of the relationship and for the period required by tax, accounting and limitation of actions rules, currently taken as seven years
- Google Analytics records: for the retention period set in the analytics account, in aggregate or pseudonymous form
- Server logs kept by our host: for the period set by that provider
Anonymous and aggregate information that does not identify you, directly or indirectly, may be kept indefinitely.
9. Your rights
Depending on where you live and which law applies, you may have the right to:
- Access the personal information we hold about you, and receive a copy of it
- Correct information that is inaccurate or incomplete
- Ask us to delete information we no longer need
- Restrict or object to certain processing, including profiling for marketing
- Receive your information in a portable format, or ask us to send it to another organization
- Withdraw consent you previously gave, without affecting processing already carried out
- Lodge a complaint with your data protection or consumer protection authority
To exercise any of these rights, write to daniel@dlconsulting.co. We will respond within the time allowed by the law that applies to you. We may ask you to confirm your identity before we act on a request.
You may opt out of marketing messages at any time by replying to any message or by writing to the address above.
9.1 Residents of the United States
Where a state privacy law applies to you, you may have rights of access, correction, deletion and portability, and a right not to be discriminated against for exercising them. We do not sell personal information and we do not share it for cross-context behavioral advertising, so no opt out of sale or sharing is required.
9.2 Residents of the European Union and the United Kingdom
The rights described above are available to you under the General Data Protection Regulation and equivalent United Kingdom law, including the right to complain to your national supervisory authority.
9.3 Residents of Chile, Argentina, Mexico and other Latin American countries
We honor requests for access, correction, cancellation and objection, and comparable rights available under your national data protection law, on the same terms as the rights described above. Write to daniel@dlconsulting.co.
10. International transfers
We operate across borders. Our principal is resident in Chile, the business is administered from the United States, and our service providers may process information in the United States, the European Union and elsewhere. Your information may therefore be transferred to, stored in and processed in a country other than your own, where data protection law may differ from the law of your country.
Where such a transfer is subject to a legal transfer requirement, we rely on an approved transfer mechanism, such as standard contractual clauses in our agreements with the relevant provider, or on your consent where that is the applicable basis.
11. Security
We use reasonable technical and organizational measures to protect information under our control against loss, misuse and unauthorized access or alteration. These include access controls, encryption in transit, and limiting access to information to those who need it.
No system is completely secure. We cannot guarantee absolute security, and information you transmit to us over the internet is transmitted at your own risk. If a breach affects your personal information and the law requires notification, we will notify you and the relevant authority within the time the law allows.
12. Children
The Site is directed at businesses and is not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, write to daniel@dlconsulting.co and we will delete it.
13. Links to other sites
The Site may link to third party websites and services that we do not control. This policy does not apply to them. We encourage you to read the privacy notice of any site you visit from ours.
14. Changes to this policy
We may update this policy from time to time. The revised policy will be posted on the Site with a new “last updated” date, and will take effect on that date unless a later date is stated. Where a change is material, we will take reasonable steps to bring it to your attention. Your continued use of the Site after the change takes effect constitutes acceptance of the revised policy.
15. How to contact us
For any question about this policy or about how we handle your information, write to:
DL Consulting
Attention: Daniel Lawrence
1065 SW 8th Street, #5887, Miami, Florida 33130, United States of America
Email: privacy@dlconsulting.co
