Privacy Policy

1. Who We Are

Sierra Vista Studio LLC is a strategy and consulting studio incorporated in the state of Delaware, United States. We support organizations across the United States, Latin America, and Ibero-America.

For privacy inquiries: [email protected]

2. Information We Collect

We collect only what is necessary to respond to your inquiry and deliver our services.

Information you provide directly

• Contact form: name, email address, industry, city/country, and your message.
• Strategy call booking: name, email address, and scheduling preferences via Google Calendar (operated by Google LLC).
• Email correspondence: any information you choose to include in messages sent to us.

Information collected automatically

• Server logs: IP address, browser type, pages visited, and timestamp — retained briefly for security and uptime monitoring.
• Cloudflare Turnstile: our contact form uses Cloudflare Turnstile to prevent spam. Turnstile may collect interaction signals (mouse movements, timing) to distinguish humans from bots. No persistent tracking cookies are set. See Cloudflare's Privacy Policy.

We do not use advertising cookies, tracking pixels, or third-party analytics on this website.

3. How We Use Your Information

• To respond to your inquiry and assess whether we can help.
• To schedule and conduct strategy calls.
• To deliver contracted services and communicate about ongoing engagements.
• To comply with legal obligations.

We do not use your data for advertising, profiling, or automated decision-making. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Union or United Kingdom, our legal bases are:

• Legitimate interests: responding to business inquiries and maintaining communication with prospective and current clients.
• Contract performance: processing data necessary to deliver agreed services.
• Legal obligation: retaining records as required by applicable law.
• Consent: where explicitly requested (e.g., newsletter sign-ups, if applicable in the future).

5. Data Retention

We retain contact inquiry data for up to 24 months to allow for follow-up on slow-moving discussions. Engagement records are retained for the duration of the engagement plus 5 years for legal and accounting purposes. You may request deletion at any time (see Section 7).

6. Third-Party Services

We use the following third-party services that may process your data:

• Google Calendar (strategy call booking): governed by Google LLC's privacy policy.
• Cloudflare (website infrastructure and Turnstile): governed by Cloudflare's privacy policy.
• Email provider (InMotion Hosting): email sent to our address is handled by our hosting provider's mail servers.

We do not use Facebook Pixel, Google Analytics, HubSpot, or any CRM that tracks site behavior.

7. Your Rights

Under GDPR (EU/UK residents)

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate data.
• Right to erasure: ask us to delete your data, subject to legal retention requirements.
• Right to restriction: ask us to limit how we use your data.
• Right to data portability: receive your data in a machine-readable format.
• Right to object: object to processing based on legitimate interests.

Under CCPA (California residents)

• Right to know: request details about the personal information we have collected and how it is used.
• Right to delete: request deletion of personal information, subject to certain exceptions.
• Right to opt-out of sale: we do not sell personal information.
• Right to non-discrimination: we will not discriminate against you for exercising any of your rights.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Cookies

This website does not use persistent tracking cookies. Cloudflare Turnstile (on our contact form) may use transient signals during the challenge interaction. No cookie consent banner is displayed because no tracking cookies are set.

9. Data Security

This site is served over HTTPS. Access to contact form submissions is restricted to authorized personnel. We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

10. International Transfers

Our servers are located in the United States. If you are located in the EU/UK, your data is transferred to and processed in the US. We rely on the necessity of contract performance and legitimate interests as the transfer mechanism for non-EU residents, and applicable standard contractual clauses or equivalent safeguards where required.

11. Children's Privacy

Our services are directed to businesses and professionals. We do not knowingly collect personal data from anyone under 16 years of age.

12. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page reflects the most recent revision. Material changes will be communicated via email to active clients.

13. Contact

For privacy questions, data requests, or complaints:

Sierra Vista Studio LLC
Delaware, United States
Email: [email protected]

If you are an EU/UK resident and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.