PRIVACY
POLICY

1. Information We Collect

Information you provide directly:

• Name, email address, phone number, and company details submitted through contact or inquiry forms
• Project information, goals, or briefs shared during consultation
• Communications sent via email or any scheduling tool linked from this site

Information collected automatically:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time on site, and referring URLs
• Cookie and session data (see Section 4)

Information from third parties:

• If you schedule a call via a linked scheduling platform, that platform's privacy policy also governs that interaction
• Analytics providers may share aggregated behavioral data with us (see Section 5)

2. How We Use Your Information

We use collected information to:

• Respond to inquiries and evaluate project fit
• Deliver SEO, technical, and AI search consulting services under active engagements
• Send follow-up communications you've requested or consented to
• Improve website content, user experience, and service positioning
• Maintain records required for legal, financial, or contractual purposes
• Comply with applicable laws and regulations

We do not use your information for unsolicited outbound marketing, automated profiling, or sale to third parties.

3. Legal Basis for Processing (GDPR)

For visitors and clients in the European Economic Area (EEA), we process personal data under the following legal bases:

• Contractual necessity — to fulfill a consulting engagement you've entered into
• Legitimate interests — to respond to inquiries, improve our services, and maintain security
• Consent — where you have explicitly opted in (e.g., email list enrollment)
• Legal obligation — where processing is required by applicable law

4. Cookies

Kretz.co uses cookies to support basic site functionality and analytics.

Type	Purpose	Duration
Strictly necessary	Session management, form functionality	Session
Analytics	Usage tracking via analytics provider	Up to 13 months
Preference	Stores user settings if applicable	Persistent

You may disable cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the site, but may limit our ability to improve it.

We do not serve advertising cookies or track users across third-party sites.

5. Third-Party Services

We use third-party tools that may process data in connection with site operation, including analytics, scheduling, CRM, and form tools. Each third party operates under its own privacy policy. We do not authorize these providers to use your data for their own independent purposes beyond what's necessary to provide their service to us.

We do not sell, rent, or trade personal information to any third party for commercial purposes.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Inquiry data (no engagement): up to 12 months
• Active client data: duration of engagement plus 3 years for legal/financial records
• Analytics data: governed by the respective platform's retention settings, typically 13–26 months

You may request deletion at any time (see Section 8).

7. California Privacy Rights (CCPA/CPRA)

California residents have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know — what personal information we collect, use, and share
• Right to Delete — request deletion of your personal information
• Right to Correct — request correction of inaccurate personal information
• Right to Opt-Out — of the sale or sharing of personal information (we do not sell personal information)
• Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights

To exercise any of these rights, contact us at privacy@kretz.co. We will respond within 45 days as required by law. We may need to verify your identity before processing a request.

8. Your Rights (General / GDPR)

Regardless of location, you may:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain types of processing
• Request a portable copy of your data in a common format
• Withdraw consent at any time where processing is consent-based

Submit requests to: connect@kretz.co

EEA residents who believe their rights have not been upheld may file a complaint with their local data protection authority.

9. Data Security

We implement industry-standard technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These include:

• Encrypted data transmission (TLS/HTTPS)
• Access controls limiting who can view personal data
• Regular review of data handling practices

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information.

10. Children's Privacy

Kretz.co is a professional B2B service. We do not knowingly collect data from individuals under 16. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this policy as our practices evolve or as laws change. When we do, we will update the "Last Updated" date at the top of this page. For material changes affecting active clients, we will provide direct notice.

12. Contact

Kretz Consulting
Email: connect@kretz.co
Website: kretz.co