Privacy Policy

1. Information we collect

Information you send us. When you email Rystedt Advisory or submit the website contact or application form, we collect what you provide. This typically includes your name, business email, company name, company revenue range, your main goal and what is holding it back (with any details you add), and, if you choose to give it, your phone number. If you reach the website through a link with campaign tags (UTM parameters), the form also records those tags. Each form submission is saved in a private database on our web server and sent to Rystedt Advisory by email through Resend.

Client and billing information. When you engage Rystedt Advisory, we collect business contact details for your team, billing contacts, and billing addresses, plus contracts, invoices, and payment records.

Payment information. Payments are processed by Stripe. Card and bank account details are entered with and stored by Stripe. Rystedt Advisory does not receive or store full card numbers. We receive limited payment details from Stripe, such as the payer name, payment amount, payment status, and the last four digits and type of the card or bank account.

Client project data. During an engagement, we may access your systems, credentials, and business data, and records about your employees, customers, or vendors held in those systems. This is covered in section 4.

Technical information. When you visit the website, our web server and hosting provider process technical data such as IP address, browser type, device information, pages requested, and timestamps. This is used to deliver the website, keep it secure, and block abuse, such as repeated form submissions.

Cookies and analytics. Rystedt Advisory does not use cookies, analytics, advertising, or tracking on the website. If you switch between light and dark mode, the website saves that choice in your browser's local storage. It stays on your device and is not sent to us.

2. How we use information

We use information to:

• Respond to inquiries and applications, and schedule discovery calls.
• Evaluate fit, prepare proposals, and deliver services.
• Send invoices, collect payments, and keep business and tax records.
• Communicate about an engagement, including service notices and support.
• Operate, secure, and improve the website.
• Comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not send marketing email.

3. Service providers we use

We share information only with providers that help us run the business, and only as needed for their service:

Contractors and vendors who work on an engagement receive only the information needed for the approved work and are bound by confidentiality obligations.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a sale or transfer of the business.

4. Client project data

Information you give us access to during an engagement (system access, credentials, business data, and personal data inside your systems) is treated as your confidential information. Rystedt Advisory:

• Uses it only to deliver the services you engaged us for.
• Limits access to Joshua Rystedt and to contractors and vendors who need it for the approved work.
• Stores credentials in a password manager, not in plain text.
• Does not sell it or use it for any other purpose.
• Returns or deletes it, and removes our access to your systems, at the end of the engagement or on your request, unless the law requires us to keep it.

For personal data inside your systems, your company remains the party responsible for that data, and Rystedt Advisory acts on your instructions. If you need a data processing agreement, ask and we will review one with you.

5. Data retention

• Inquiries and applications that do not become engagements: kept for up to 24 months, then deleted.
• Contracts, invoices, and payment records: kept for 7 years for tax and accounting purposes.
• Client project data: returned or deleted within 30 days after the engagement ends, unless you request otherwise.
• Server logs: kept for up to 90 days.

6. Security

Rystedt Advisory uses reasonable safeguards for the size of the business, including encrypted connections (HTTPS) on the website, multi-factor authentication on business accounts, and restricted access to client data. No method of transmission or storage is fully secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your information, we will notify you as required by law and any signed agreement.

7. Your choices and rights

You may ask to access, correct, or delete personal information we hold about you, or ask us to stop contacting you, by emailing joshua@rystedtadvisory.com. We will respond within 30 days. We may keep information we are required to retain by law or need for billing records. Depending on where you live, you may have additional rights under local privacy law, and we will honor requests as required.

8. Business audience and children

The website and services are for businesses. They are not directed to children, and Rystedt Advisory does not knowingly collect personal information from anyone under 13. If you believe a child has sent us information, contact us and we will delete it.

9. International visitors

Rystedt Advisory is based in the United States, and information is processed in the United States and wherever our service providers operate.

10. Changes to this policy

We may update this policy by posting a new version on the website with a new "Last updated" date. Material changes affecting current clients will be communicated by email.

11. Contact

Joshua Rystedt DBA Rystedt Advisory
Atlanta, Georgia
Email: joshua@rystedtadvisory.com
Phone: (443) 536-8989
Website: https://rystedtadvisory.com