Privacy Policy

1. Information We Collect

Meyers-Hall Advisory ("we," "us," or "our") collects information when you visit our website, use our services, or communicate with us. The types of information we collect include:

• Personal Information: Name, email address, phone number, and company name when you submit a contact form, book a call, or work with us.
• Usage Data: Pages visited, time spent on site, referral source, browser type, device type, operating system, and IP address.
• Communications: Records of correspondence when you contact us via email, phone, or our website forms.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our website-system services.
• Respond to your inquiries and schedule calls.
• Send relevant communications about our services (with your consent).
• Analyze website usage patterns to improve user experience.
• Comply with legal obligations and enforce our terms.

3. Analytics and Tracking Technologies

We use first-party analytics to understand how visitors interact with our website. Analytics events are sent to our own /api/track endpoint and may include pages viewed, referral source, UTM parameters, device/browser information, scroll depth, CTA clicks, form starts, form submissions, and session activity.

We use anonymous visitor and session cookies to recognize repeat visits and group activity into sessions. These cookies do not contain your name, email address, company name, or form message. We respect browser Do Not Track signals where available.

IP addresses may be used briefly for rate limiting, security, and approximate location enrichment, but analytics records store a hashed IP value rather than the raw IP address. We do not currently use Google Analytics on this website.

4. Cookies

Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential Cookies: Required for the website to function properly. These may support security, sessions, authentication, and form or admin functionality.
• Analytics Cookies: Anonymous first-party visitor and session cookies help us understand repeat visits, sessions, and conversion paths.
• Third-Party Service Cookies: Some embedded or linked services, such as booking, payment, or chat tools, may set their own cookies when you use those features.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

5. Geo-IP Services

We use MaxMind GeoIP2 services to determine the approximate geographic location of visitors based on IP addresses. This helps us:

• Provide region-appropriate content and services.
• Ensure compliance with regional privacy regulations.
• Analyze traffic patterns for business planning.

MaxMind does not receive any personally identifiable information beyond your IP address, which is processed to return geographic data (country, region, city). No precise location data is collected or stored.

6. Data Retention

We retain your data according to the following schedule:

• Contact form submissions: 24 months from date of submission, unless an ongoing business relationship is established.
• Client project records: 7 years from the end of the project, as required for tax and legal compliance.
• Raw analytics events: generally up to 90 days before being summarized into aggregate reporting tables.
• Cookie data: anonymous visitor cookies may last up to 365 days; session cookies typically expire after about 30 minutes.

You may request deletion of your personal data at any time by contacting us. We will process such requests within 30 days, unless we are required by law to retain the data.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party vendors who assist with website hosting, analytics infrastructure, email delivery, scheduling, payments, realtime chat, and approximate location lookup (for example, Netlify, Neon, Mailgun, Calendly, Stripe, Ably, and MaxMind).
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected individuals.

8. Your Rights Under the GDPR

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure:Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing of your data for direct marketing or legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Your Rights Under the CCPA

If you are a California resident, the California Consumer Privacy Act grants you the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: Direct us not to sell your personal information. We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at [email protected] or call us. We will verify your identity before processing any request and respond within 45 days.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information, including:

• SSL/TLS encryption for all data in transit.
• Secure storage practices where supported by our systems and vendors.
• Regular security assessments and updates.
• Access controls limiting data access to authorized personnel only.

While we take reasonable steps to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. For material changes, we will provide additional notice, such as a prominent notice on our website or an email notification. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Meyers-Hall Advisory
Email: [email protected]
Web: meyershalladvisory.com/contact