This Privacy Policy explains how ConsultEvo LLC processes personal data when you visit consultevo.com, contact us, book a meeting, communicate with us or enter a business relationship with us. It is designed to provide the information required under Articles 12, 13 and 14 of the EU General Data Protection Regulation where those rules apply.
1. Scope of this policy
This policy applies to the main ConsultEvo website and to business communications initiated through it. The separate Portfolio and Interactive Lab at portfolio.consultevo.com may provide additional notices when a demonstration collects or processes information differently.
During a client project, ConsultEvo may process information on a client's instructions inside the client's systems. In that situation, the client may be the controller and ConsultEvo may act as a processor or service provider. The applicable proposal, service agreement, data processing agreement and the client's own privacy notice govern that processing.
2. Controller and contact details
Primary business and privacy contact: Evrim Aslan, Founder. ConsultEvo has not appointed a data protection officer. Privacy questions and requests can be sent to the email address above.
3. Personal data we process
The information we process depends on how you interact with ConsultEvo. We apply data minimization and ask that you do not send passwords, private keys, health data, government identifiers or other sensitive information through a normal website form.
| Interaction | Typical data | Purpose and legal basis |
|---|---|---|
| Website visit | IP address, request time, requested URL, browser, device, referrer, response status and security events | Delivering and protecting the website. Legitimate interests under Article 6(1)(f) GDPR and strictly necessary storage or access under Section 25(2) TDDDG where applicable. |
| Inquiry or contact form | Name, email, phone number, company, selected service areas, project details and message | Responding to your request, evaluating fit and taking requested steps before a contract. Article 6(1)(b) GDPR or legitimate interests under Article 6(1)(f). |
| Meeting booking | Name, contact details, time zone, availability, booking answers and meeting metadata | Scheduling and preparing the requested meeting. Article 6(1)(b), Article 6(1)(a) where consent is requested, or Article 6(1)(f). |
| Business relationship | Business contacts, proposal details, contracts, project communications, account access records, billing details and deliverables | Providing services, managing the relationship, billing, compliance and legal claims. Articles 6(1)(b), 6(1)(c) and 6(1)(f). |
| Phone, email or messaging | Contact details, message content, attachments, call metadata and communication history | Responding, providing support and maintaining business records. Articles 6(1)(b) and 6(1)(f). |
| Review or case study | Name, role, company, rating, review text, public profile link and approved project information | Displaying genuine feedback and examples with permission, contractual authorization or a documented legitimate interest under Article 6(1)(a), 6(1)(b) or 6(1)(f). |
4. Sources of personal data
We usually receive personal data directly from you. We may also receive business contact information from your employer, a colleague, a referral partner, a platform through which you contact us, a payment provider or a publicly available professional source such as a company website or LinkedIn profile.
If a client gives ConsultEvo access to a workspace, CRM, database or other business system, the client is responsible for confirming that it has the right to provide that access and for limiting access to what is necessary for the agreed work.
5. How we use personal data
- Operate, secure, troubleshoot and improve the website.
- Respond to inquiries and determine whether ConsultEvo is a suitable provider.
- Schedule calls, prepare proposals and take requested pre-contract steps.
- Provide consulting, implementation, automation, development and support services.
- Maintain project, communication, billing and accounting records.
- Prevent fraud, abuse, unauthorized access and security incidents.
- Establish, exercise or defend legal claims and meet legal obligations.
- Publish approved reviews, partner credentials and project examples.
We do not use website inquiry information for unrelated advertising without an appropriate legal basis. We do not sell or rent personal data.
6. Cookies, local storage and consent
The ConsultEvo site plugin does not itself activate advertising cookies or analytics. WordPress, security tools, embedded booking tools, consent management tools or other active components may store or access information on your device.
- Strictly necessary technologies: used for security, load balancing, administration, session handling, consent storage or functionality you request. Where Section 25 TDDDG applies, consent is generally not required if the technology is strictly necessary to provide the requested service.
- Optional analytics or marketing technologies: used only after consent where consent is legally required. Consent may be refused or withdrawn without losing access to basic website content.
If optional analytics, advertising pixels, embedded media or similar technology is added, the consent interface and this policy must be updated to identify the active provider, purpose and storage period before production use.
7. Contact forms, scheduling and communications
When you submit an inquiry, the data is sent to ConsultEvo and may be stored in email, CRM, scheduling, project management or automation systems used to manage the request. Required fields are limited to information needed to respond. If you do not provide required contact information, we may be unable to answer or schedule the requested service.
If you contact ConsultEvo through WhatsApp, LinkedIn, a marketplace or another third-party channel, that provider independently processes account and communication data under its own privacy terms. You can use email if you prefer not to use those services.
8. Client projects, credentials and workspace data
ConsultEvo may need access to client platforms such as ClickUp, HubSpot, GoHighLevel, Make, Zapier, Google Workspace, WordPress or a database. Clients should use invitations, role-based access and least-privilege permissions instead of sending reusable passwords. Access should be removed when it is no longer needed.
Client data is used only for the agreed work, support, security and legal administration. Project-specific processing may require a separate data processing agreement, security schedule or approved list of subprocessors.
9. AI and automated workflows
Some client services may use AI providers or automated workflows to classify, summarize, route or transform information. ConsultEvo does not intentionally send confidential or personal data to an AI provider unless the project scope, client instructions, provider settings and applicable safeguards support that use.
The public website does not make decisions that produce legal or similarly significant effects about visitors. Any future automated qualification or personalization with a significant effect must be separately assessed and disclosed.
10. Service providers and recipients
ConsultEvo uses providers only where they support website operation or business delivery. The exact provider used for a particular engagement depends on the requested service and client environment.
| Category | Examples | Purpose |
|---|---|---|
| Website and security | WordPress hosting, domain, caching, backup and security providers | Hosting, delivery, monitoring, backups and protection against misuse. |
| Email and files | Google Workspace | Email, documents, calendars and business administration. |
| Scheduling and communication | Cal.com, WhatsApp and video meeting providers | Booking, reminders, calls and requested communication. |
| CRM and project delivery | HubSpot, GoHighLevel, ClickUp and similar client-selected tools | Inquiry management, proposals, project work, support and documentation. |
| Automation and integration | Make, Zapier and n8n | Moving data between authorized systems and performing defined workflow actions. |
| Database and application services | Supabase and managed application infrastructure | Serving approved public review data and supporting custom applications. |
| Payments and accounting | Stripe, banks and accounting providers | Payment processing, invoices, tax records and fraud prevention. |
| Professional networks and directories | LinkedIn, GitHub, ClickUp and Zapier partner directories | External profiles, credentials and links selected by the visitor. |
Providers receive only the information reasonably necessary for their role. They may act as processors, independent controllers or client-selected providers depending on the service.
11. International data transfers
ConsultEvo LLC is established in the United States and works internationally. Personal data may therefore be processed in the United States, the European Economic Area and other countries where ConsultEvo, a client or a provider operates.
Where the GDPR restricts a transfer outside the European Economic Area, ConsultEvo relies on an applicable adequacy decision, the EU Standard Contractual Clauses, the EU-US Data Privacy Framework where the recipient validly participates, another approved safeguard or a lawful exception. You may contact us for information about the safeguard relevant to your data.
12. Retention periods
We keep personal data only for as long as needed for the stated purpose, legal compliance, security and claims. Typical criteria are:
- Website and security logs: normally retained for a short operational period set by the hosting or security provider, often between 7 and 90 days, unless an incident requires longer preservation.
- Unsuccessful inquiries: normally retained for up to 24 months after the last meaningful contact so we can respond to follow-up and understand prior discussions.
- Client and project records: retained for the engagement and a reasonable claims period afterward.
- Contracts, invoices and accounting records: retained for the period required by applicable company, tax and accounting rules, commonly between 6 and 10 years.
- Consent records: retained while consent is active and afterward for the period reasonably needed to demonstrate compliance.
- Published reviews: retained while relevant and authorized, subject to applicable rights and contractual commitments.
13. Security measures
ConsultEvo uses reasonable technical and organizational measures appropriate to the nature of the information and the service. Measures may include encrypted transport, role-based access, multifactor authentication where supported, least-privilege permissions, secure credential sharing, backups, logging, provider review and prompt access removal.
No website or internet transmission can be guaranteed completely secure. If you believe information connected with ConsultEvo has been exposed or misused, contact us immediately and do not include sensitive credentials in the report.
14. Your data protection rights
Where the GDPR applies, you may have the following rights, subject to legal conditions and exceptions:
- Access to personal data and information about its processing under Article 15.
- Correction of inaccurate or incomplete information under Article 16.
- Deletion in the circumstances described by Article 17.
- Restriction of processing under Article 18.
- Data portability for certain data processed by automated means under Article 20.
- Objection to processing based on legitimate interests under Article 21.
- Withdrawal of consent at any time for future processing under Article 7(3).
- The right not to be subject to certain solely automated decisions under Article 22.
We may need to verify your identity before completing a request. Rights are not absolute, and we may retain information where required by law, contract administration, security or legal claims. We normally respond within one month where the GDPR applies, subject to a permitted extension for complex requests.
15. Complaints
You may lodge a complaint with the data protection supervisory authority responsible for your location or for the alleged infringement. If you are in Germany, the competent state authority depends on the relevant establishment and processing activity. You can also contact ConsultEvo first so we have an opportunity to address the concern.
16. Children
The ConsultEvo website and services are intended for businesses and professionals, not children. We do not knowingly request personal data from children. If you believe a child has provided information, contact us so it can be reviewed and deleted where appropriate.
17. External websites
The website links to the ConsultEvo Portfolio, partner directories, social networks, GitHub and other external services. A normal link does not give ConsultEvo control over the destination. The external provider's privacy notice applies when you visit or use that service.
18. Changes to this policy
We may update this policy when the website, providers, business processes or legal requirements change. Material changes will be reflected on this page, and the date at the top identifies the latest published version.
19. Privacy contact
For a privacy question, objection or rights request, email [email protected]. Please describe the request and the interaction it relates to. Do not send identification documents unless we specifically request an appropriate verification method.