LEGAL

Privacy Policy

Effective Date: August 9, 2026 · Last Updated: August 14, 2026

GHIDORA Consulting LLC ("GHIDORA," "Ghidora," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, process, disclose, and protect information when you visit ghidoraconsulting.com, contact us, submit a form, schedule a consultation, communicate with us, receive marketing communications, use a GHIDORA-operated portal, application, software product, or digital service, or otherwise interact with our business. By using our website or services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Information You Provide Directly

• Name, email address, phone number, company or organization name, and job title or role.

• Business information, operational information, workflows, processes, technology, and project requirements.

• Information submitted through contact, intake, assessment, scheduling, onboarding, support, or other forms.

• Consultation and appointment information, communications, feedback, and support requests.

• Billing, invoice, subscription, transaction, and payment-status information.

• Any other information you voluntarily provide.

Client and Business Data

In connection with providing our services, GHIDORA may access, receive, store, process, transmit, organize, modify, or otherwise use client-provided business data when reasonably necessary to perform the services requested by the client. This may include information contained in CRM systems, portals, software platforms, databases, documents, or other client-authorized systems, including customer or prospect names, employee or contractor information, contact information, CRM records, communications, reports, photos or uploaded files, business records, contact histories, operational information, and other information relevant to the client's systems or requested services.

The type and amount of information GHIDORA accesses depends on the project, the client's systems, and the services provided. GHIDORA reserves the right to use client-authorized information to the extent reasonably necessary to design, configure, integrate, maintain, troubleshoot, support, improve, or otherwise provide the applicable services.

Clients are responsible for ensuring that they have the appropriate authority and legal basis to provide GHIDORA access to the information, accounts, systems, and data involved in their project. Additional data-access, confidentiality, security, retention, or processing requirements may be established in the applicable proposal, service agreement, data-processing agreement, or other written agreement.

2. Information Collected Automatically

When you use our website or digital services, we or our providers may automatically collect technical and usage information, such as IP address, browser and device type, operating system, approximate location derived from IP address, referring website, pages viewed, links clicked, date and time of visits, session information, device identifiers, website interactions, conversions, advertising interactions, and diagnostic data. This information may be collected through cookies, pixels, tags, analytics tools, server logs, SDKs, and similar technologies.

3. Cookies, Analytics, and Advertising

GHIDORA may use cookies and similar technologies for functionality, security, preferences, traffic measurement, performance analysis, conversion tracking, marketing measurement, personalized advertising, audience creation, and retargeting. We may use Google Analytics, Google Ads, and similar services now or in the future. Those providers may process information under their own privacy practices. Where required, we will provide appropriate cookie controls, disclosures, consent mechanisms, or opt-out choices.

4. How We Use Information

• Respond to inquiries; schedule and manage appointments; conduct strategy calls; evaluate prospective clients; and develop proposals.

• Design, build, configure, integrate, maintain, troubleshoot, support, and improve workflows, automations, CRM systems, applications, portals, dashboards, reports, and custom tools.

• Provide consulting, development, implementation, and ongoing managed services.

• Communicate about projects, services, accounts, support, security, billing, and transactions.

• Process and track payments; maintain business, tax, accounting, and legal records.

• Analyze and improve our website, products, services, operations, advertising, and marketing.

• Protect systems and users; prevent fraud and misuse; investigate incidents; enforce agreements; comply with law; and protect legal rights.

• Conduct marketing and advertising and send promotional communications when legally permitted or appropriately consented to.

5. Marketing Communications

Email Marketing

We may send promotional email as permitted by applicable law. We may also request separate, affirmative consent through an optional email-marketing checkbox. Marketing emails will identify the sender as required, include an appropriate valid postal address, and provide a clear method to unsubscribe. We will honor valid opt-out requests as required by law. Opting out of marketing does not prevent transactional, administrative, security, billing, project, or service-related communications.

SMS and Text Message Marketing

GHIDORA may offer marketing texts, appointment reminders, alerts, and other SMS communications. Where required, marketing or automated texts will be sent only after appropriate consent. Providing a phone number or submitting a general form does not by itself constitute consent to receive automated or promotional texts.

When SMS marketing is offered, GHIDORA will use a separate consent disclosure or unchecked checkbox. Consent to marketing texts is not a condition of purchasing services. Message frequency may vary; message and data rates may apply. A recipient may revoke consent by replying STOP, using another method stated in the message, or contacting GHIDORA.

We may keep records of consent status, timestamp, source, and the wording shown at opt-in.

6. Third-Party Business Platforms

We use third-party providers to operate our business. These may include Calendly for scheduling, Fillout for forms and intake, HubSpot for CRM, contact management, communications, and marketing, and Google and Google Workspace services for email, calendar, meetings, storage, analytics, advertising, and productivity. We may add, replace, or discontinue providers as our infrastructure changes. Providers may receive and process information needed to perform their functions under their own terms and privacy practices.

7. Payments

Our primary payment processor is Stripe. Payment information may be transmitted directly to Stripe or another authorized processor. GHIDORA generally does not directly store complete payment-card numbers processed by third parties. We may retain customer name, billing contact information, invoices, transaction amounts, payment status and date, subscriptions, and transaction identifiers.

If Stripe is unavailable or another method is appropriate, GHIDORA may use a backup method such as PayPal, Mercury, bank transfer, or another payment provider. Payment providers process information under their own terms and privacy practices.

8. Artificial Intelligence

GHIDORA may use artificial-intelligence-enabled tools for research, analysis, documentation, workflow and software development, automation, content assistance, data organization, support, and business process improvement. Depending on the engagement, information may be processed by AI providers or within AI-enabled features of other platforms. We seek to limit information shared to what is reasonably appropriate for the task and applicable client instructions. AI outputs may be incomplete or inaccurate and may receive human review. Project-specific restrictions may be established in a written agreement.

9. How We Disclose Information

• To service providers and contractors that support hosting, email, scheduling, forms, CRM, payments, cloud storage, communications, analytics, advertising, development, automation, AI, IT, security, legal, accounting, or other business functions.

• To client-selected platforms, integration partners, or recipients as directed or reasonably necessary to perform requested services.

• In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.

• To comply with law, legal process, or lawful government request; protect rights, safety, and property; investigate fraud or security incidents; or establish, exercise, or defend legal claims.

• With your direction or consent.

GHIDORA does not sell personal information for monetary compensation as part of its ordinary business operations. Some advertising or analytics activity may be treated as "sale," "sharing," or targeted advertising under certain state laws; where applicable, we will provide required notices and choices.

10. Data Security and Retention

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No internet transmission, website, software system, or storage method is completely secure. Clients remain responsible for security of their own accounts, passwords, devices, personnel, and systems.

We retain information for as long as reasonably necessary for the purposes collected, including providing services, maintaining records, supporting clients, resolving disputes, enforcing agreements, meeting legal, tax, accounting, and regulatory duties, and protecting against fraud and security incidents. Retention varies by information type and relationship.

11. Privacy Rights and Choices

Depending on your location and applicable law, you may have rights to request access, correction, deletion, confirmation of processing, portability, information about disclosures, or opt-out from certain processing. Exceptions may apply. To submit a request, email info@ghidoraconsulting.com. We may verify your identity. If applicable law provides an appeal process, you may request review at the same address.

You can adjust cookies through browser or available website controls, unsubscribe from promotional email through the message link, and revoke SMS consent as described above.

Sale, Sharing, and Targeted Advertising Choices. GHIDORA does not sell personal information for monetary compensation as part of its ordinary business operations. However, certain advertising, analytics, audience-creation, or retargeting activities may be treated as a "sale," "sharing," or targeted advertising under some state privacy laws. Where those laws apply, GHIDORA will provide the notices and opt-out methods required by law, which may include website privacy controls or a "Do Not Sell or Share My Personal Information" choice. Until or unless a dedicated website control is required and made available, privacy requests may be submitted to info@ghidoraconsulting.com. Availability of a particular right depends on applicable law.

12. Third-Party Links and International Processing

Our services may link to third-party websites or services. GHIDORA is not responsible for their privacy, security, content, or practices. Information may be processed in the United States or other locations where our providers operate, subject to applicable legal safeguards.

13. Age Requirement

Our website and services are intended for businesses and adults age 18 or older. They are not directed to minors. We do not knowingly collect personal information directly from anyone under 18 through our website. If we learn that we have done so, we will take reasonable steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy as our business, services, technologies, or legal obligations change. We will post the revised policy and update the Effective Date or Last Updated date, as applicable. Material changes may also be communicated through the website or other appropriate means.

15. Contact Us

Questions, concerns, and privacy requests may be sent to:

GHIDORA Consulting LLC
Email: info@ghidoraconsulting.com
Website: ghidoraconsulting.com