Privacy Policy | POTYL & CO.

1. Who we are

POTYL & CO. (“POTYL,” “we,” “us,” or “our”) is a consulting practice operated by Peter Mark Potylicki, an individual sole proprietor based in South Carolina, United States. We provide business performance diagnosis, strategy, systems, and implementation services.

For questions about this Privacy Policy or requests concerning your personal information, email [email protected] or call 803-470-3938.

This Policy describes personal information processed through potyl.com, communications about our services, and initial inquiries. A separate client agreement or privacy notice may govern information processed during a consulting engagement.

2. Information we collect

Depending on how you interact with us, we may collect:

Information you provide: name, email address, company or organization, website, the primary concern you select, details of your business challenge, project timing, message content, your acknowledgment that you have read this Privacy Policy, and other information you choose to share in our contact form, emails, or phone calls.
Business communications: correspondence, meeting arrangements, proposals, and notes reasonably needed to respond to inquiries or provide services.
Technical and security information: IP address, device/browser details, request timestamps, and security signals that our hosting, anti-abuse, and infrastructure providers may process when you visit the site or submit a form.
Transaction and contractual information: billing, payment, and engagement details if you become a client, subject to additional disclosures and the service providers actually used.
Analytics information (only if you accept analytics cookies): pages visited, how you arrived at the site, approximate location derived from your IP address, device and browser type, and when an inquiry is sent successfully (without any of the information you enter in the form). See Section 5.

All contact-form fields except your website are required, because we need them to understand and respond to your inquiry. If you prefer not to use the form, you can email or call us instead.

Please do not submit passwords, bank credentials, sensitive health information, government identification numbers, or confidential third-party data through the public inquiry form.

3. How and why we use information

We process information to:

Respond to your inquiry, discuss a potential engagement, and take steps you request before entering an agreement.
Provide consulting services and administer our relationship with clients.
Secure the website, identify spam or abuse, and troubleshoot technical problems.
Maintain records, meet legal and tax obligations, and protect legitimate legal interests.
Send marketing communications only where permitted by applicable law and consistent with your preferences. An inquiry alone does not automatically enroll you in a newsletter.
Understand how visitors use the website so we can improve it, only if you accept analytics cookies.

Legal bases (EU/UK GDPR). If the EU or UK General Data Protection Regulation applies to your information, we rely on:

Responding to inquiries: steps you request before entering a contract, and our legitimate interest in responding to business inquiries.
Providing services: performance of a contract.
Website security and spam prevention (including Cloudflare Turnstile): our legitimate interest in protecting the website and our inbox.
Records and compliance: legal obligations and our legitimate interest in maintaining appropriate business records.
Website analytics (Google Analytics): your consent, given through our cookie banner or Cookie Settings. You can withdraw it at any time.
Marketing: consent where the law requires it.

Where we rely on legitimate interests, we balance them against your rights, and you may object as described in Section 9. The checkbox on our contact form records that you have read this Policy; it is not a request for your consent.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Turnstile’s automated check is used only to filter out spam.

4. Service providers and disclosures

We use the following service providers to operate the website and communicate with you:

Cloudflare Pages hosts and delivers this website. When you submit the contact form, server code running on Cloudflare (Pages Functions) checks your submission and passes it to our email delivery service. The website does not store form submissions in a database.
Cloudflare Turnstile helps distinguish people from automated traffic on our contact page (see Section 5).
Zoho CPaaS / ZeptoMail delivers each contact-form submission as an email to our business mailbox. Email open and click tracking is turned off for these messages.
Zoho Mail is our business email service, where inquiries are received and stored and from which we reply.
Google Analytics 4 (provided by Google) measures how the website is used, only if you accept analytics cookies (see Section 5).

We may disclose relevant data to professional advisers, contractors working under appropriate confidentiality arrangements, or authorities where reasonably necessary or legally required. We may also transfer business records in a legitimate restructuring or sale, subject to applicable law.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

5. Cookies, security technology, and tracking choices

Essential technologies (always on). Our hosting and security providers may use cookies or similar technologies that are necessary for security and normal operation. We also store your cookie choice in your browser’s local storage (under the name potyl-consent) so we can respect it as you move between pages; it stays until you change your choice or clear your browser data. These essential technologies, including the contact form and its spam protection, work whether or not you accept analytics.

Cloudflare Turnstile. Turnstile is loaded only on our contact page. It may process device and interaction signals to distinguish human visitors from automated traffic. When you submit the form, our server sends the Turnstile token generated in your browser, together with your IP address, to Cloudflare to confirm the check.

Google Analytics 4 (optional, off by default). We use Google Analytics 4 only if you choose “Accept analytics” in our cookie banner or turn analytics on in Cookie Settings. Until you do, the Google Analytics script is not loaded and no analytics data is sent to Google. If you accept:

Google Analytics sets first-party cookies named _ga and _ga_ followed by an identifier. By Google’s default, these expire after up to two years.
We send page-view information and, when an inquiry is sent successfully, a “lead” event that contains none of the information you enter in the contact form.
Advertising features are turned off: we do not enable Google signals or ad personalization, and advertising-related consent is always set to “denied.”
Google states that Google Analytics 4 does not log or store IP addresses; it uses them to derive approximate location.

Changing your choice. You can change or withdraw your choice at any time using Cookie Settings in the website footer. If you withdraw consent, we stop analytics on the site and delete the Google Analytics cookies from your browser. Data collected before you withdrew is not affected.

Other analytics and advertising. Cloudflare Web Analytics is disabled. We do not use advertising pixels or cross-site advertising trackers.

Do Not Track and Global Privacy Control. If your browser sends a Global Privacy Control signal and you have not made a choice in our cookie banner, we keep analytics off and do not show the banner; you can still turn analytics on through Cookie Settings. We do not respond differently to Do Not Track signals, but analytics stays off unless you accept it.

Third-party services requested by the site may collect information subject to their own policies.

6. Retention

We keep inquiry and communication records only as long as reasonably necessary to address requests, maintain appropriate business records, comply with law, or resolve disputes.

General contact inquiries: we keep inquiry messages and related correspondence for up to 24 months after the last meaningful communication, unless you ask us to delete them sooner or a longer period is needed for legal, contractual, tax, accounting, or legitimate business reasons (for example, if you become a client or a dispute arises). Inquiries are not deleted automatically; we review and delete them manually as part of our regular record-keeping.

Client and transaction records: according to applicable contractual, tax, accounting, and legal obligations.

Analytics data: if you accept analytics cookies, Google Analytics keeps the data according to the data-retention setting in our Google Analytics account.

Service-provider records: our hosting, security, and email providers may keep technical, security, and delivery logs under their own retention schedules, which we do not control.

7. Security

We use reasonable administrative and technical safeguards appropriate to the information processed, including server-side validation and anti-spam protection for website inquiries. No website, email system, or transmission method is completely secure. Do not send confidential or sensitive business materials until an appropriate secure channel and confidentiality terms have been arranged.

8. International visitors and transfers

POTYL operates from the United States and may serve clients in other countries. Information submitted through the site may be processed or stored in the United States and in other countries where our service providers operate. Those jurisdictions may have different privacy protections. Our Zoho Mail and Zoho CPaaS / ZeptoMail accounts use Zoho’s United States data center; Cloudflare processes website traffic through its global network; and, if you accept analytics cookies, Google may process analytics data in the United States and other countries.

Where applicable data-protection law requires a specific transfer mechanism or safeguard, we will assess and implement the appropriate arrangement.

9. Your privacy choices and rights

You may contact us at [email protected] or 803-470-3938 to request access to, correction of, or deletion of personal information we hold about you, or to object to or restrict certain uses. We will evaluate requests under the laws that apply to you and to our business. Some information may need to be retained for legitimate legal or contractual reasons.

EU/UK residents. If the EU or UK GDPR applies, you may also have rights to data portability, to withdraw consent where processing depends on consent, to object to processing based on legitimate interests, and to complain to a competent supervisory authority. Withdrawing consent does not affect processing that occurred before withdrawal.

California residents. This Policy describes the categories of personal information we collect (Section 2), the third parties we use (Section 4), how you can ask to review or correct your information (this section), how we respond to Do Not Track signals (Section 5), and how we notify you of changes (Section 11). The California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies only to businesses that meet its definitions and thresholds; if it applies to us, we will honor the rights it provides. Whether or not it applies, California residents may contact us with privacy questions and requests. As stated in Section 4, we do not sell or share personal information for cross-context behavioral advertising.

We do not discriminate against individuals for exercising privacy rights provided by applicable law.

10. Children

Our services and website are intended for business audiences and not directed to children under 16. We do not knowingly solicit personal information from children. If you believe a child has sent us personal information, contact us so we can evaluate and address it.

11. Changes to this policy

We may update this Policy to reflect changes in our practices, providers, or legal obligations. The effective date above will be updated when we publish a revised version. For material changes, we will provide additional notice where required by law.

12. Contact

POTYL & CO.
Operated by Peter Mark Potylicki, sole proprietor
South Carolina, United States
Email: [email protected]
Phone: 803-470-3938