All TODO items below remain unresolved. Legal-counsel review is not confirmed. Consultation sending remains disabled.
Who this policy covers
This draft concerns the Curtis Wiltse Advisory website and its proposed consultation process. The brand name used here does not identify a confirmed legal entity.
Client approval required: TODO — Confirm the responsible legal entity, business address, privacy contact and scope of this policy. Effective date: pending approval; no effective date has been assigned.
Current preview: no live inquiries
Consultation delivery is disabled. Selecting Review sends the entered answers to the website server for validation, but the application does not save an inquiry or forward it to HubSpot or advisors. Please use fictional details, not real personal or confidential business information, while reviewing the preview.
The rate limiter stores a hashed visitor network identifier, a time window and an attempt count—not consultation answers. The valuation calculator processes its inputs in the browser and does not submit them as a lead.
Client approval required: TODO — Confirm hosting request/error logs, access to those logs, their contents and retention before launch. The application’s no-inquiry-storage behavior is not a statement that hosting providers keep no technical records.
Information requested by the consultation form
The form asks for first name, last name, email and company name, together with a primary objective and timeline. These fields are required for the proposed inquiry process.
Phone, industry description, state, annual revenue band, annual EBITDA and years in business are optional. Financial information may concern your company and may be sensitive. Do not include account numbers, identification documents or additional confidential transaction materials in this initial form.
The form records your agreement to use details to respond to the inquiry. It does not offer marketing-email signup; an inquiry is not consent to marketing.
Client approval required: TODO — Confirm the final field list, which fields the new HubSpot form accepts, and any additional data requested during advisor follow-up.
Proposed uses of consultation information
Once separately approved and enabled, consultation details would be sent to Curtis Wiltse Advisory to understand your inquiry, respond, arrange a conversation and manage related CRM follow-up. Providing optional company and financial details would help advisors understand the context of the inquiry.
The owner has chosen consultation inquiries only, not marketing signup. The prepared adapter includes inquiry-processing consent only; it does not request marketing subscriptions or marketing-contact enrollment. Actual HubSpot outcomes still require verification before launch.
Client approval required: TODO — Approve the purposes, inquiry wording, follow-up practices and applicable legal basis. Verify that HubSpot form processing and account workflows do not enroll inquiry contacts in marketing; no account settings have been changed by this preview.
Proposed HubSpot processing and other providers
HubSpot is the proposed processor for form intake and CRM follow-up. The prepared adapter is disabled and is not connected to the website’s submission path. No consultation information is being sent to HubSpot by this preview.
If approved, the form would send the mapped contact and company fields and relevant consent information to the new website-specific HubSpot form. Sending Company fields does not itself confirm creation of a Company record or its association with a Contact; those outcomes require a separately authorized controlled test.
Client approval required: TODO — Confirm provider roles, contract terms, access permissions, processing locations, international transfers if relevant, and any further recipients. Confirm actual contact/company creation and association. Sale, sharing, advertising and disclosure practices have not been established by this draft; do not infer a promise about them.
Website technology, cookies and analytics
The reviewed website code loads fonts from Google’s font service. Administrator sign-in persists authentication information in browser local storage outside certain embedded previews; preview storage may be managed by the editor. A sidebar component also contains a preference-cookie mechanism; whether it is used must be checked. These features are distinct from consultation marketing consent.
No dedicated public analytics or advertising tracker was identified in the reviewed application code. Optional hosting/editor error-reporting hooks exist, but their active configuration and data handling have not been confirmed. This is not a claim that the hosting environment uses no cookies, logs or other technology. The video template can load a YouTube privacy-enhanced embed when a video is configured; provider processing must be reviewed before such an embed is used.
Client approval required: TODO — Inventory the deployed website’s actual cookies, local storage, hosting telemetry and third-party requests. If analytics, advertising, embeds or other optional technologies are configured, describe their data, purposes, providers and applicable choices before enabling them. Do not add a cookie list or analytics claim based on assumptions.
Security and access
The current application includes input validation, spam checks and rate limiting. The consultation handler does not log personal payloads, and administrator access is role-restricted. These measures do not establish that every provider or deployment has been assessed or that information is guaranteed secure.
Client approval required: TODO — Confirm production safeguards, authorized recipients, provider access, technical-log handling and incident-response responsibilities. Verify deployed rate limiting and trusted network-address handling before enabling inquiries.
Retention
The preview does not persist consultation inquiries. Its application rate-limit routine removes expired counter records after a day when the routine runs; this does not describe hosting-log retention or a future CRM retention policy.
No retention duration has been approved for future consultation records, CRM follow-up, marketing preferences, backups or provider logs.
Client approval required: TODO — Approve retention criteria and deletion procedures for each category, including backups, legal requirements and provider records. Do not replace this marker with an invented fixed period.
Questions and privacy requests
Depending on the applicable law and circumstances, individuals may have rights concerning their information. This draft does not determine which rights apply or make state-specific compliance claims.
A dedicated privacy request channel has not been confirmed. The preview consultation form is not a privacy-request delivery channel because inquiry sending remains disabled.
Client approval required: TODO — Supply an approved privacy contact and request process. Confirm applicable rights, identity verification, response periods, preference changes and any appeal or complaint process with legal counsel; do not invent an email address or deadline.
Approval and future changes
The owner has approved this preview draft. This records owner approval only, not legal-counsel review or verification of the marked facts. It does not make the policy effective, activate consultation delivery or authorize a HubSpot test.
Future material changes to the website’s data practices require a corresponding policy review.
Client approval required: TODO — Approve the final text, policy owner, effective date and change-notification process. Launch requires separate explicit authorization.