Who we are
Atitlan Consulting (“we”, “us”, “our”) is the controller for the personal data described in this notice.
Email: contact@atitlanconsulting.com.
What data we collect
We collect and process:
1) Contact form submissions
- Name, email address, message content
- Optional: newsletter opt‑in
2) Minimal, cookie‑free analytics (pseudonymous)
- ts_utc_minute (timestamp rounded to the nearest minute)
- path (page URL visited)
- referrer_domain (if provided by the browser)
- source (e.g. google, direct, newsletter)
- ua_family (browser family, e.g. Chrome/Safari)
- city / country (approximate)
- anon_ip (a non‑reversible hashed identifier)
We do not use advertising cookies and do not track individuals across sites.
Why we collect it (lawful bases)
- Contact form: to respond to enquiries and manage our relationship (legitimate interests) and, where appropriate, to take steps prior to entering into a contract (contract).
- Newsletter: only if you opt in (consent).
- Analytics: to understand site performance, detect issues and improve content (legitimate interests), implemented in a privacy‑preserving way.
Analytics (cookie‑free)
Our analytics are server‑side and cookie‑free. Records contain the minimal fields listed above and a non‑reversible IP hash used only for grouped analysis (e.g., first page of a visit, broad geography). We do not build profiles or try to re‑identify visitors.
Contact form & reCAPTCHA
To protect the form from automated abuse we use Google reCAPTCHA which only loads after you click “Yes, enable the form”.
When enabled, Google may process your device/network data to provide the protection service.
- Provider: Google Ireland Ltd.
- Data: usage & device data; see Google’s privacy policy.
- Lawful basis: legitimate interests (fraud prevention) and consent (you choose to enable it).
If you prefer not to enable reCAPTCHA, you can email us at contact@atitlanconsulting.com.
Retention
- Contact enquiries: normally retained up to 24 months unless a longer period is required for legal/contractual reasons.
- Newsletter data: kept until you unsubscribe.
- Analytics records: aggregated for reporting; raw rows typically retained up to 12 months.
Sharing & international transfers
We may share data with trusted providers who help us operate the site (e.g., hosting, security). These processors only act under our instructions. Some services may process data outside the UK/EEA with appropriate safeguards (e.g., Standard Contractual Clauses).
Current key providers: - Hosting (site infrastructure) - Google reCAPTCHA (form protection)
We do not sell personal data.
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing, and data portability, where applicable.
Where we rely on consent, you may withdraw it at any time.
To exercise your rights, email contact@atitlanconsulting.com.
How to contact us
Email: contact@atitlanconsulting.com
If your query relates to data protection, please include “Privacy” in the subject.
Complaints
You can complain to the ICO (Information Commissioner’s Office) if you are unhappy with how we handle your data: ico.org.uk.
Changes to this notice
We may update this notice from time to time. The latest version will always be available on our website.