MarginPeak Consulting LLC

Privacy Policy

Last updated: 22 October 2026

1. Who we are and what this Policy covers

MarginPeak Consulting LLC is responsible for deciding how personal information is used for the website and prospect activities described in this Policy. We are a Wyoming limited liability company operating from the United States.

Website: marginpeakconsulting.com
Email: info@marginpeakconsulting.com
Business postal address: 30 North Gould Street, Sheridan, WY 82801, United States

This Policy covers visitors, people who make enquiries or book introductory calls, and newsletter subscribers. It covers information collected through our website and related prospect communications. It does not describe the handling of records when we deliver client services under a separate engagement. Relevant information and terms for that work are provided separately.

2. Information we collect

Information you provide

• Contact and business details, such as your name, email address, company, website, business country and optional telephone number.
• The services you are interested in, enquiry text and related correspondence.
• Booking details, such as your name, contact information, meeting time and any information you choose to provide when arranging a call.
• Newsletter subscription details and your communication preferences.
• Information needed to respond to a privacy request or resolve a complaint.

Information generated through use of the website

• Technical information such as IP address, browser/device information, request times and security or error logs, where generated by the website and its infrastructure.
• Aggregate website usage statistics, such as page views, referring sites, approximate country and device or browser type, collected through the website platform's built-in analytics.
• Records of your cookie choices, subscription requests, confirmations, withdrawals and the versions of the notices presented to you.
• If you enable advertising measurement, information about ad interactions, website visits and conversion events, including cookie or click identifiers, device/browser information, IP address and the pages or actions involved. The Cookie Policy explains this in more detail.

Information from other sources

• Calendly provides information relating to meetings you book with us.
• Google Ads provides campaign and conversion reports where measurement is enabled.
• A colleague or business contact may introduce you to us or send us your business contact details. We use those details to address the introduction or enquiry, not to subscribe you automatically to promotional emails.

Please do not submit sensitive personal information or confidential financial records through the public enquiry form. We do not need that information to assess an initial enquiry.

3. Why we use information and our legal bases

Where EU or UK data protection law applies, we use the following bases:

Responding to enquiries, arranging calls and discussing proposed work
We use contact details and relevant messages to respond, understand the request and follow up about it. Our basis is our legitimate interest in communicating with prospective business contacts. Where you personally request steps before entering a contract with us, the basis may instead be taking those requested pre-contract steps.

Newsletters and promotional emails
We use your email address, optional name and preferences to send the newsletters and service updates you have chosen. Our basis is consent. We require a positive subscription choice and email confirmation before activating a marketing subscription. We do not treat an enquiry as consent to ongoing marketing.

Advertising measurement
When you enable the relevant cookie setting, we use Google Ads conversion measurement to understand whether advertising leads to actions such as completed enquiries. Our basis for optional tracking and the associated processing is consent. This is separate from newsletter consent.

Security and administration
We use proportionate technical data to operate and secure the website, prevent abuse, investigate faults and manage records. Our basis is our legitimate interest in maintaining a reliable and secure business and website.

Compliance and legal matters
We use information where necessary to meet a legal obligation, respond to lawful requests, maintain proportionate evidence of consent or opt-outs, or establish, exercise or defend legal rights. The basis is a legal obligation where one applies, or otherwise our legitimate interest in compliance and protecting legal rights.

Where we rely on legitimate interests, we consider your rights and reasonable expectations and use information only as necessary for the purpose. You can contact us for more information about that assessment.

4. Marketing choices

You can make an enquiry or book a call without joining our newsletter. You can subscribe without enabling advertising cookies. Choosing one does not authorise the other.

You can unsubscribe from promotional emails at any time using the unsubscribe facility in an email or by contacting info@marginpeakconsulting.com. We keep a minimal opt-out record where necessary so that we do not accidentally add you back. We may still send non-promotional replies and administration messages that are necessary for an enquiry you have made.

Withdrawing consent does not affect processing that was lawful before withdrawal. We do not use email-open pixels or individual promotional link tracking in the initial newsletter setup.

5. Who receives information

Access is limited to people and providers who need information for the purposes described above. Providers used for website and prospect administration include:

• Lovable and the deployed hosting/infrastructure services supporting the website.
• Lovable's built-in website analytics, which records aggregate visit information such as pages viewed, referring sites, approximate country and device or browser type so we can understand how the website is used.
• Supabase for the website database and related backend functions.
• Google Workspace for business email and related administration.
• Calendly when you choose to book a meeting.
• Notion where we use it to organise relevant prospect notes and follow-ups.
• Google for optional Google Ads conversion measurement.

We may also use an email-delivery or newsletter provider to send messages you request or subscribe to. We provide information about any material change to our processing through an updated Policy and, where required, a separate notice or fresh consent before the change takes effect.

Providers acting on our behalf receive appropriate instructions and contractual requirements. Some providers also act independently for aspects of their own services, such as account security, legal compliance or the processing described in their own privacy notices. You can review those notices when using their services. Google's explanation of partner-site data use is available at https://policies.google.com/technologies/partner-sites and Calendly's notice at https://calendly.com/legal/privacy-notice.

We may share relevant information with professional advisers, authorities or other parties where necessary to meet legal requirements or protect legal rights. If the business is reorganised or transferred, relevant records may be disclosed under appropriate safeguards and with any required notice.

We do not sell or rent our prospect contact list for money. Google measurement involves the disclosures explained in this Policy; we do not describe those disclosures as anonymous or assume they fall outside every jurisdiction's definition of sale or sharing. Your available choices are explained below and in the Cookie Policy.

6. Google Ads measurement

Our initial Google Ads setup measures advertising conversions after you opt in. It is not configured for remarketing, personalised advertising, customer-list uploads or enhanced conversions using your email address or telephone number. We do not send enquiry text, names, email addresses or phone numbers as Google conversion-event fields.

Google may receive technical identifiers and interaction information when you allow measurement. Its processing is also described in its privacy information. Our initial setup blocks optional Google measurement before consent and after rejection. We do not send advanced consent-mode measurement pings before permission.

You can withdraw permission through “Cookie settings”. This stops future optional measurement from the website; it does not automatically erase information already lawfully received by a provider. Contact us if you want to exercise a relevant data-protection right.

7. International processing

MarginPeak operates from the United States, so information you send us may be received and used there. Our providers may process information in the United States and other countries where they or their authorised service providers operate. Those countries may have different data-protection laws from your location.

Where applicable law requires a safeguard for a restricted international transfer, we use an appropriate lawful arrangement, such as applicable standard contractual clauses and UK transfer provisions, or a valid adequacy arrangement where the recipient and processing are covered. We do not assume that every US recipient is covered by an adequacy arrangement.

You can contact info@marginpeakconsulting.com for information about the safeguards relevant to your information and to request an available copy or explanation, subject to necessary redactions. Choosing a regional database location does not mean that every provider or support activity occurs only in that region.

8. How long we keep information

We use the following retention approach, subject to a specific legal obligation or a documented need to keep relevant information longer:

• Unconverted enquiries, booking notes and related prospect correspondence: normally 12 months after the last substantive interaction.
• Newsletter information: while your confirmed subscription remains active. We review relevance annually and remove subscriptions after 24 months without a fresh confirmation, preference update or substantive direct interaction.
• Unconfirmed newsletter requests: up to 30 days.
• Routine application and security logs under our control: normally up to 90 days, unless needed to investigate an incident or another specific issue. Infrastructure providers may maintain separate operational records under their own retention arrangements.
• Proportionate consent evidence: normally up to three years after the relevant consent expires or is withdrawn, unless a specific legal need justifies a different period.
• Minimal suppression records: for as long as reasonably necessary to honour an unsubscribe or objection, reviewed periodically.

If an enquiry becomes a client engagement, relevant information moves into the records and retention arrangements for that engagement, which are addressed separately.

We delete or anonymise information when it is no longer required. Backup copies may remain until they are overwritten under the relevant recovery schedule and are restricted from ordinary use. If recovery is necessary, we reapply relevant deletion and suppression instructions. Cookie lifetimes are addressed separately in the Cookie Policy.

9. Security

We use reasonable technical and organisational measures appropriate to the information and risk, including access restrictions and secure handling of account credentials. No website, email system or storage method can be guaranteed completely secure. Please use the public form only for initial business enquiries and avoid sending information it does not request.

10. Your rights and choices

Depending on your location and the law that applies, you may have rights to:

• obtain information about our processing and access your personal information;
• correct inaccurate information;
• request deletion or restriction of processing;
• receive certain information in a portable form;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• withdraw consent where processing relies on consent; and
• complain to a relevant supervisory authority or regulator.

Some applicable US state laws may also give rights to opt out of sale, sharing or targeted advertising, appeal a denied request, use an authorised agent, and receive equal treatment when exercising rights. These rights depend on the law's applicability and exceptions. You can submit a request or appeal to info@marginpeakconsulting.com.

Use “Cookie settings” to reject optional advertising measurement. We also treat a detected Global Privacy Control signal as a request to keep that measurement off in the browser sending the signal. We do not currently use a separate legacy “Do Not Track” browser signal as a substitute for these controls.

To exercise a right, email info@marginpeakconsulting.com with enough detail for us to understand the request. We may need proportionate information to verify identity or authority, but do not require additional information unnecessarily. We respond within the applicable legal period and explain any lawful limitation or refusal. Requests are generally free, subject to any lawful exception.

If EU/EEA data protection law applies, you may complain to the relevant data protection authority, including where you live or work or where an alleged infringement occurred. If UK data protection law applies, you may complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. You do not have to contact us first, although we welcome the opportunity to address concerns.

We do not make decisions about you that produce legal or similarly significant effects solely through automated processing under this website/prospect workflow.

11. Required and optional information

We identify required form fields. If you do not provide the contact details or enquiry information necessary to respond, we may be unable to deal with the request. Newsletter signup, optional telephone details and advertising measurement are not required to send an enquiry.

12. External services and children

External websites, including the Calendly booking page, have their own privacy information. We are responsible for our use of booking information we receive, but we do not control all independent processing by the external provider.

The website is intended for a professional business audience and is not directed to children. Please contact us if you believe a child has provided personal information through it so we can assess and address the matter.

13. Changes and contact

We may update this Policy as our website, providers or practices change. We publish the revised date and provide additional notice or request fresh consent where required. We will not treat a policy update alone as consent to a new optional purpose.

Contact: info@marginpeakconsulting.com
MarginPeak Consulting LLC
30 North Gould Street
Sheridan, WY 82801
United States