Legal
Privacy Policy
This policy explains what information Iriondo Advisory LLC, a Pennsylvania limited liability company based in Pittsburgh, Pennsylvania ("Iriondo Advisory", "we", "us" or "our"), collects through robertoiriondo.com (the "site") and in the course of its business, how it is used and shared, and the choices you have. Iriondo Advisory operates the site and is the company through which Roberto Iriondo provides consulting, advisory, fractional marketing leadership, website, SEO, content and related services. Where the site refers to Roberto Iriondo's services, engagements or work for clients, those services are provided by Iriondo Advisory LLC. Iriondo Advisory is responsible for the personal information described here. If you have a question, email contact@robertoiriondo.com.
This policy covers the website at robertoiriondo.com and www.robertoiriondo.com, and the information we collect when we talk with prospective clients and provide services to clients. It does not apply to any subdomain of robertoiriondo.com, such as blog.robertoiriondo.com, which is hosted by Medium and covered by Medium's privacy policy, or to any other website. If a written agreement between Iriondo Advisory and a client covers personal information, that agreement controls where it differs from this policy. Use of the site is also governed by our Terms of Use.
By using the site, you acknowledge this policy. If you do not agree with it, please do not use the site. Where the law requires your consent for something described here, we ask for it separately, and nothing in this policy replaces that consent.
1. Information you give us
Contact form. When you send a message through the contact form, the site collects your first and last name, your email address, your phone number if you add it, the subject you select, your message, and that you agreed to this policy. The form is processed by Formspree, which delivers it by email and filters spam.
Email, calls and meetings. If you email us or speak with us, we receive your contact details and whatever you share, and we may keep notes of the conversation.
Please do not send sensitive information, such as government ID numbers, bank details or health information, through the site or by email unless we ask for it through a secure process.
2. Client and business information
When you or your company become a client, or discuss becoming one, we collect business information needed to agree on and deliver the work: names, job titles and business contact details of your team, company details, proposals, contracts and statements of work, invoices and payment records, tax information, communications, meeting notes, and project files. Payments are handled by our bank or payment provider; we do not store full card numbers.
3. Information we handle for clients
To deliver our services, clients may give us access to their own systems and data, such as websites, content management systems, hosting, analytics, Google Search Console, advertising accounts, email tools or customer relationship management (CRM) tools. These may contain personal information about the client's own visitors, customers or staff.
For that information, we act as a service provider (or "processor") on the client's behalf. We use it only to perform the services the client asked for, under the client's instructions and our agreement with them; we keep it confidential, do not sell it, do not use it for our own marketing, and return or delete it when the engagement ends unless the law requires us to keep it. The client's own privacy policy governs that information, and the client is responsible for having the notices, consents and legal basis needed to share it with us. If you are a visitor or customer of one of our clients and want to use your privacy rights, please contact that client directly. If we receive your request, we will pass it to the client. Where we sign a data processing agreement with a client, that agreement controls.
4. Information collected automatically
When you load a page, our hosting provider and Cloudflare, which delivers and protects the site, receive technical information: your IP address, browser and device type, the page you asked for, the page that sent you, and the date and time. It is used to deliver pages, keep the site secure, block abuse and fix problems. Server logs are kept for a limited time and are not used to identify you.
5. Analytics and cookies
The site uses Google Analytics 4, a service of Google LLC, to understand how the site is used: which pages are viewed, how visitors arrive, and their general region, browser and device type. Google Analytics sets cookies such as _ga and _ga_* and receives information about your visit, including your IP address, which Google uses to estimate your general location. We use these reports in aggregate to improve the site. We do not use them to identify you, and we do not use Google Analytics for advertising. On the free tools, Google Analytics also records which tool was used and, for tools that check a website (the AI Visibility Checker, the Social Preview Debugger and View Source when you open a page by its address), the domain of the site checked, such as example.com, with the result's score or number of issues. It never records the full address, the text or code you paste, or the links you clean. You can read how Google uses this data at policies.google.com/technologies/partner-sites.
How analytics is turned on depends on where you are:
- European Union, European Economic Area, United Kingdom and Switzerland: Google Analytics only loads after you accept analytics cookies in the cookie banner. If you decline, it does not load. If the site cannot tell where you are, it treats you the same way.
- Everywhere else, including the United States: Google Analytics runs from your first page view, and a notice on the site tells you so. By continuing to use the site after seeing the notice, you agree to this use. You can opt out at any time, as explained below, and we will stop collecting analytics from your browser.
How to opt out or change your choice:
- Select "Opt out" in the notice, or use the Cookie settings link at the bottom of every page. When you opt out or withdraw consent, the site deletes the Google Analytics cookies it set on its own domain and stops loading Google Analytics in your browser.
- If your browser sends a Global Privacy Control (GPC) signal, the site treats it everywhere as an opt out of marketing cookies. Outside the regions listed above, it also treats it as an opt out of analytics.
- You can also install the Google Analytics opt-out browser add-on, or block or delete cookies in your browser settings. Some browsers send "Do Not Track" signals; because there is no common standard for them, the site relies on Global Privacy Control instead.
Cookies the site uses:
- Necessary:
cc_consentremembers your cookie choices for up to 180 days and holds no personal information. Cloudflare may set cookies needed to protect the site from bots and attacks. These cannot be turned off on the site, because the site needs them to work safely. - Analytics: Google Analytics cookies, as described above.
- Marketing: we do not use advertising or retargeting cookies. If we add them in the future, they will only load after you accept them, in every region.
Cloudflare may also give us aggregate traffic statistics, such as page views and countries, that do not use cookies.
6. Offline copy of the site
The site saves a copy of its own pages, styles and images in your browser so it loads faster and works offline. This copy holds no personal information.
7. How we use information
- to run, secure and improve the site, and to prevent fraud, spam and abuse
- to understand how the site is used, as described in section 5
- to read and reply to your message, and to follow up about the work you asked about
- to prepare proposals, enter into and perform contracts, and deliver, manage and improve our services
- to invoice, collect payment, keep accounts, and meet tax, insurance and audit requirements
- to keep a record of our conversations and of any engagement
- to comply with the law, respond to lawful requests, and establish, exercise or defend legal claims
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: your consent (analytics cookies, and anything else we ask your consent for), taking steps at your request before entering into a contract or performing one, our legitimate interests in running, securing and improving the site, answering messages and running our business (which we balance against your rights), and compliance with legal obligations. You can withdraw consent at any time; this does not affect processing that already happened.
8. Who we share it with
We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising. We share it only in these cases:
Service providers that help run the site and our business, only for that purpose:
- Formspree, which receives contact form submissions and delivers them by email (privacy policy)
- Cloudflare, which delivers the site, protects it from attacks and bots, and hides email addresses from spam bots (privacy policy)
- Namecheap, which hosts the site and keeps standard server logs (privacy policy)
- Google, which provides Google Analytics, as described in this policy (privacy policy)
- providers of email, file storage, scheduling, video calls, accounting, banking and payments that we use to run the business
- Contractors: people or companies who help us deliver client work, bound by confidentiality, and only for that work.
- Professional advisers: lawyers, accountants, auditors and insurers, under a duty of confidentiality.
- Legal reasons: when we believe in good faith that the law, a court order or a government request requires it, or that it is needed to protect the rights, property or safety of Iriondo Advisory, our clients, users or others, or to investigate fraud or security issues.
- Business transfers: as part of a merger, sale, financing, reorganization or transfer of all or part of our business, in which case the information stays subject to this policy.
- With your permission or at your direction.
9. How long we keep it
We keep personal information only as long as needed for the purposes in this policy, then delete it or keep it in a form that does not identify you. Google Analytics keeps analytics data for up to 14 months. Messages are kept as long as the conversation and any follow-up need them. Client records, contracts and invoices are kept for the length of the engagement and then for as long as tax, legal and insurance rules require (generally up to seven years), and longer if needed to resolve a dispute or enforce our rights. Client data we handle on a client's behalf is kept as described in section 3.
10. Security
We use reasonable administrative, technical and physical measures to protect personal information, including encrypted connections (HTTPS) and access limited to those who need it. No website, transmission or storage system can be guaranteed to be completely secure, so we cannot guarantee the security of information you send, and you share it at your own risk. If we learn of a breach that affects your personal information, we will notify you, and the affected client where section 3 applies, as the law or our agreement requires.
11. Your privacy rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy of it
- correct inaccurate information
- delete your information
- object to or limit how it is used, or withdraw consent you gave
- opt out of the sale or sharing of your information or its use for targeted advertising (we do neither)
To make a request, email contact@robertoiriondo.com. We will reply within 30 days, or within the time your local law sets, and may need to confirm your identity first by asking for information that matches what we already hold. An authorized agent may make a request for you if they show written permission, and we may still ask you to confirm your identity. If we deny your request, you can appeal by replying to our answer, and we will respond to the appeal within the time the law requires. We will not treat you differently for using these rights. Requests about information we handle for a client are passed to that client, as described in section 3.
If you are in the European Economic Area, the United Kingdom or Switzerland, you can also complain to your local data protection authority. Residents of California and other US states with privacy laws can use the rights their state law provides, as described above.
12. International visitors
We are based in the United States, and our service providers may store and process information in the United States and other countries, where privacy laws may differ from those where you live. Where the law requires it, transfers rely on safeguards such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework used by the providers.
13. Children
The site and our services are meant for businesses. They are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has sent us personal information, email contact@robertoiriondo.com and we will delete it.
14. Other websites and services
The site links to other websites, such as LinkedIn, GitHub, Medium and companies Roberto Iriondo has worked with. We do not control them and are not responsible for their content or privacy practices; their own privacy policies apply when you visit them.
15. Changes to this policy
We may update this policy from time to time. When we do, we will post the new version on this page and change the effective date at the top. If a change is significant, we will say so on the site. Your continued use of the site after a change means you accept the updated policy, except where the law requires your consent, which we will ask for.
16. Governing law
This policy is governed by the laws of the Commonwealth of Pennsylvania and applicable United States federal law, without regard to conflict of laws rules. Nothing in this policy limits rights you have under the mandatory privacy laws of the place where you live.
17. Contact
Iriondo Advisory LLC
Attn: Privacy
Pittsburgh, Pennsylvania, United States
contact@robertoiriondo.com