Legal

Privacy Policy

Placeholder notice. This page is a structural draft prepared for attorney review. It is not legal advice and should be reviewed by qualified counsel before the site handles real visitor data.

Last updated: 2026-11-09

What we collect

When you submit a form or book a call, we collect the information you provide: name, email address, phone number, company name, current CRM platform, and whatever you write in the message field. If you complete the Revenue Leak Self-Assessment, your contact details are sent together with your answers and the scored result, so we can follow up on it. If you enter your email to read a case study, we record the email and which case study you opened.

Website activity, only if you accept

If you accept analytics in the cookie banner, we record which pages you visit, roughly how long you spend and how far you scroll, the buttons and links you click, the site that referred you, and any campaign tags in the link. This uses a random identifier stored in your browser, not your name. If you later submit a form, that browsing history is linked to your enquiry so we understand what you were interested in. If you decline, none of this is recorded.

Why we collect it

To respond to your enquiry, to prepare for a conversation with you, and to deliver services you engage us for. We do not sell your information.

How long we keep it

Enquiry records are retained while a commercial relationship is active or reasonably prospective. Client engagement records are retained per the terms of the relevant service agreement.

Client system access

During an engagement, Corlan may be granted access to your CRM, website, email platform, or analytics tools. Access is requested on a least-privilege basis, used only for the agreed scope of work, and revoked at the end of the engagement.

Where it is stored

Form submissions and website activity are stored in Corlan's own private CRM, hosted on Netlify. Form submissions are also kept by Netlify Forms as a backup. Access is limited to Corlan.

Third parties

We use third-party providers for hosting, scheduling, email, CRM, and payment processing. Each processes data under its own terms. The specific providers are confirmed at engagement start.

Your rights

You may request access to, correction of, or deletion of the personal information we hold about you. Contact us and we will respond within a reasonable period.

Contact

Questions about this policy can be sent through the contact page.