Privacy Policy

This Privacy Policy describes how KLUN Consultancies LLC ("KLUN", "we", "us", or "our") collects, uses, and protects personal information when you visit klunconsultancies.com or otherwise interact with us.

1. Who we are

For any question about this Privacy Policy or how we handle your personal information, contact Michael Klun at michael@klunconsultancies.com.

2. Data controller

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, KLUN Consultancies LLC is the data controller of the personal information we collect through this website.

3. What personal information we collect

We collect only the personal information necessary to respond to your inquiry and operate the website. This includes:

3.1 Information you provide directly

There is no contact form on this website. The only structured way to reach us from the site is the HubSpot Meetings booking calendar embedded on our Contact page; everything else is a direct email, phone call, or LinkedIn message you choose to send us.

When you book a call through that calendar, we collect:

• —Full name
• —Email address
• —Company name (if provided)
• —The date, time, and time zone of the slot you select
• —Anything you write in the booking notes field
• —Whether the booking was subsequently rescheduled or cancelled

The booking is created inside HubSpot, which acts as our processor for it, and a calendar invitation is sent to the email address you give. If you instead email, call, or message us on LinkedIn, we collect whatever you choose to put in that message, together with the contact details it reaches us from.

3.2 Information collected automatically

When you visit the website, our hosting infrastructure and consent management system may automatically log:

• —IP address (partially anonymized where feasible)
• —Browser type and version
• —Operating system
• —Referring URL
• —Pages visited and time spent
• —Approximate geographic region (country-level) for consent-management purposes
• —Browser privacy signals (Global Privacy Control / Do Not Track)

We do not currently use third-party analytics, advertising pixels, or behavioral tracking on this website. If we introduce these in the future, this Privacy Policy will be updated and — where required — consent will be requested through our cookie banner before any such tools are activated.

4. How we use your personal information

We process your personal information for the following purposes:

We do not sell your personal information, and we do not use it for automated decision-making or profiling that produces legal effects.

5. How long we keep your personal information

We retain personal information only for as long as necessary to fulfil the purposes described above:

• —Booking records and inquiry correspondence: up to 24 months from the date of your booking or message, unless a longer retention period is required to fulfil a contract or comply with legal obligations.
• —Signed contracts and related invoicing records: retained for as long as required under applicable tax and commercial law (typically up to 7 years).
• —Website logs: typically 30–90 days.
• —Cookie consent records: as required to demonstrate proof of consent under GDPR, typically 12 months.

After the retention period, personal information is deleted or anonymized.

6. Who we share your personal information with

We share personal information only with the third-party service providers necessary to operate the website and respond to inquiries. These providers process personal information on our behalf under written data processing agreements, and only for the purposes we specify.

Current sub-processors:

If we engage additional third-party processors in the future (for example, analytics or advertising platforms), this Privacy Policy will be updated and — where required — consent will be requested.

We do not sell, rent, or trade personal information to third parties for their own marketing purposes.

We may disclose personal information where required by law, court order, or valid legal process, or where necessary to protect our legal rights, safety, or property.

7. International transfers

Because KLUN Consultancies LLC is established in the United States and our sub-processors may be located outside your country of residence, personal information may be transferred to and processed in the United States and other countries whose data protection laws differ from those in your jurisdiction.

Where personal information is transferred outside the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate safeguards, including:

• —Standard Contractual Clauses approved by the European Commission
• —Data processing agreements with sub-processors that include GDPR-equivalent safeguards
• —Vendor-specific certifications such as EU-U.S. Data Privacy Framework participation, where available

You may request a copy of the safeguards in place by contacting us.

8. Your rights under GDPR (EU / EEA / UK residents)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights in relation to your personal information:

• —Right of access — obtain confirmation whether we process your personal information and receive a copy of it
• —Right to rectification — correct inaccurate or incomplete personal information
• —Right to erasure ("right to be forgotten") — request deletion of your personal information where legally permitted
• —Right to restriction of processing — request that we limit how we process your personal information
• —Right to data portability — receive your personal information in a structured, commonly used, machine-readable format
• —Right to object — object to processing based on our legitimate interest
• —Right to withdraw consent — withdraw your consent at any time where processing is based on consent (this does not affect the lawfulness of processing before withdrawal)
• —Right to lodge a complaint — file a complaint with your local data protection supervisory authority

To exercise any of these rights, email us at michael@klunconsultancies.com. We will respond within one month of receiving your request, or explain why we need more time.

9. Your rights under CCPA / CPRA (California residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you specific rights regarding your personal information:

• —Right to know what personal information we collect, use, disclose, and (if applicable) sell or share
• —Right to delete personal information we have collected from you
• —Right to correct inaccurate personal information
• —Right to opt out of the sale or sharing of your personal information — we do not sell or share personal information as defined by the CCPA
• —Right to limit use of sensitive personal information — we do not use sensitive personal information beyond what is necessary to provide our services
• —Right to non-discrimination — we will not deny services, charge different prices, or provide a different level of quality because you exercised your rights

To exercise any of these rights, email us at michael@klunconsultancies.com. We will verify your identity before responding to any request.

10. Cookies

This website uses a small number of cookies and similar technologies. Non-essential cookies (preferences, analytics, marketing) are set only after you provide consent through our cookie banner.

For details on the specific cookies used and how to manage your preferences, see our Cookie Policy at klunconsultancies.com/cookies.

You can withdraw or change your cookie preferences at any time by clicking Cookie Preferences in the website footer.

11. How we protect your personal information

We apply appropriate technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• —HTTPS encryption for all data transmitted to and from the website
• —Restricted access to personal information on a need-to-know basis
• —Reputable service providers with independent security certifications
• —Regular review of security practices

No transmission of information over the internet or storage system can be guaranteed 100% secure. If you have reason to believe your interaction with us is no longer secure, please notify us immediately.

12. Children's privacy

This website is intended for business audiences and is not directed at children under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete it.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate, notify users through the website.

We recommend reviewing this Privacy Policy periodically.

14. Governing law

This Privacy Policy and any dispute arising out of it are governed by the laws of the State of Florida, United States, without regard to conflict-of-law principles.

Nothing in this section limits your rights under the mandatory laws of your country of residence, including your right to lodge a complaint with your local data protection authority.

15. Contact us

For any questions, requests, or concerns about this Privacy Policy or how we handle your personal information:

This Privacy Policy was drafted for KLUN Consultancies LLC as of August 13, 2026 and revised on September 12, 2026, when the description of a contact form — which this website has never had — was replaced with the HubSpot Meetings booking calendar that is actually embedded on the Contact page. It reflects the tools and processing activities in place at that date. Any material change to the website's tool stack (for example, adding Google Analytics, advertising pixels, or a newsletter platform) requires an update to this policy before those tools are activated.