BYMARKALLAN.COM PRIVACY POLICY
Effective Date: September 22, 2026
Last Updated: September 22, 2026
This Privacy Policy explains how ByMarkAllan.com and its operator ("Mark Allan," "ByMarkAllan," "we," "us," or "our") collect, use, disclose, retain, and protect personal information when you visit ByMarkAllan.com, submit an inquiry or intake form, schedule or purchase a service, communicate with us, participate in a consultation, provide project materials, or otherwise interact with our websites, forms, tools, content, and professional services (collectively, the "Services").
This Privacy Policy is intended to describe our practices in a clear and accessible manner. It also explains privacy rights that may be available to you under applicable law.
By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree with our practices, you should not submit personal information through the Services.
1. SCOPE
This Privacy Policy applies to personal information we process in connection with:
- ByMarkAllan.com and related webpages or landing pages.
- Contact, inquiry, request-for-proposal, intake, survey, and consultation forms.
- Product strategy, product design, UX, information architecture, research, advisory, workshop, and consulting engagements.
- Booking, scheduling, invoicing, payment, and customer-support interactions.
- Email, direct messages, or other communications sent to or from us.
- Project files, notes, requirements, screenshots, documents, design materials, and other content you choose to provide.
- Website analytics, security logs, cookies, and similar technologies.
This Privacy Policy does not govern third-party websites, platforms, applications, or services that we do not control, even if they are linked from our Services.
2. PERSONAL INFORMATION WE MAY COLLECT
The information we collect depends on how you interact with us.
2.1 Information You Provide Directly
We may collect:
Contact Information
- Name.
- Email address.
- Telephone number.
- Company, organization, or brand name.
- Job title or professional role.
- Website, portfolio, or social profile links.
Inquiry and Intake Information
- Information about your project, product, company, users, goals, problems, constraints, timeline, budget, priorities, or desired outcomes.
- Responses to intake questions, surveys, assessments, workshop exercises, or consultation forms.
- Information you provide when requesting a proposal, booking a session, or asking for support.
Project and Professional Information
- Project briefs.
- Product requirements.
- Research notes.
- User interview materials.
- Screenshots.
- Wireframes.
- prototypes.
- information architecture.
- analytics summaries.
- strategy documents.
- brand materials.
- design files.
- business documents.
- workshop outputs.
- content or files you submit for review.
Communications
- Emails.
- Messages.
- Meeting notes.
- Feedback.
- Support requests.
- Questions and responses.
- Other correspondence.
Transaction Information
- Service purchased.
- Billing status.
- Invoice information.
- Transaction date and amount.
- Payment confirmation or payment-provider reference data.
We generally rely on third-party payment processors to handle payment-card details. Unless specifically stated otherwise, we do not intentionally store complete payment-card numbers or card security codes.
2.2 Information Collected Automatically
When you use our website or online tools, we or our service providers may automatically collect information such as:
- IP address.
- Browser type and version.
- Device type.
- Operating system.
- Referring URL.
- Pages viewed.
- Date and time of access.
- Approximate geographic region derived from IP address.
- Session activity.
- Link and button interactions.
- Error logs.
- Security events.
- Cookie or similar technology identifiers.
We may use this information to operate the website, understand usage, improve content and navigation, prevent abuse, diagnose technical issues, and protect the Services.
2.3 Information From Third Parties
We may receive personal information from third parties when you choose to interact with us through them, including:
- Scheduling providers.
- Payment processors.
- Form providers.
- Email providers.
- Cloud-storage providers.
- Analytics providers.
- Social or professional networking platforms.
- Referral sources.
- Business partners or collaborators.
The information received depends on the third party, your settings, and the permissions you grant.
3. SENSITIVE PERSONAL INFORMATION
We do not ask you to provide highly sensitive personal information unless it is reasonably necessary for a specific engagement.
Please do not submit Social Security numbers, government-issued identification numbers, complete financial account credentials, medical records, passwords, private authentication credentials, or other highly sensitive information unless we specifically request it through an appropriate secure channel.
If you voluntarily provide sensitive information that is relevant to a project or engagement, we will use it only for the purpose for which it was provided, as otherwise permitted by law, or as necessary to protect legal rights.
4. HOW WE USE PERSONAL INFORMATION
We may use personal information to:
Provide and Manage Services
- Respond to inquiries.
- Review intake information.
- Schedule meetings or consultations.
- Prepare proposals, recommendations, or project plans.
- Deliver consulting, strategy, design, research, or advisory work.
- Manage projects and client communications.
- Provide requested documents, files, or deliverables.
Process Transactions
- Create invoices.
- Confirm payments.
- Maintain transaction records.
- Address billing questions.
- Prevent fraud or payment abuse.
Communicate
- Send service-related notices.
- Confirm appointments.
- Send follow-up information.
- Respond to support requests.
- Communicate about changes to a project or engagement.
Improve the Services
- Understand how visitors use our website.
- Improve page structure, content, and usability.
- Evaluate service demand.
- Develop or refine offerings and workflows.
Protect the Services
- Detect suspicious activity.
- Prevent fraud, spam, abuse, and unauthorized access.
- Investigate security incidents.
- Enforce our Terms of Service.
Comply With Legal Obligations
- Maintain records.
- Respond to lawful requests.
- Protect rights, safety, and property.
- Establish, exercise, or defend legal claims.
With Your Consent
- Use information for another purpose that we clearly describe when requesting your consent.
5. LEGAL BASES FOR PROCESSING
Where a legal basis is required, we may process personal information because:
- It is necessary to perform a contract or take steps you request before entering into a contract.
- It is necessary for our legitimate interests, such as operating, securing, and improving the Services.
- It is necessary to comply with a legal obligation.
- You have provided consent.
- It is otherwise permitted under applicable law.
Where we rely on consent, you may withdraw that consent where permitted by law. Withdrawal does not affect processing that lawfully occurred before withdrawal.
6. COOKIES AND SIMILAR TECHNOLOGIES
We and our service providers may use cookies, local storage, pixels, tags, log files, and similar technologies.
These technologies may be used for:
Essential Functions
- Security.
- Fraud prevention.
- Session management.
- Form functionality.
- Basic site operation.
Preferences
- Remembering settings.
- Maintaining user-selected preferences.
Analytics
- Measuring site visits.
- Understanding page performance.
- Identifying navigation patterns.
- Diagnosing errors.
- Improving usability.
You can control many cookies through your browser settings. Blocking certain cookies may affect website functionality.
Where required by law, we will seek consent before using non-essential cookies or similar technologies.
7. ANALYTICS AND THIRD-PARTY SERVICES
We may use third-party services to support website hosting, analytics, forms, scheduling, email, payments, file storage, productivity, and other business functions.
These providers may process information on our behalf or under their own privacy terms.
Depending on the tools used at a given time, categories of service providers may include:
- Website hosting and content delivery.
- Domain and DNS providers.
- Analytics and performance tools.
- Form and survey tools.
- Scheduling and calendar tools.
- Payment processors.
- Email and communication tools.
- Cloud file-storage providers.
- Customer relationship management tools.
- Collaboration and productivity platforms.
- Security and fraud-prevention providers.
We encourage you to review the privacy terms of third-party services before providing information through them.
8. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information in the following circumstances.
8.1 Service Providers and Contractors
We may disclose information to vendors, contractors, and service providers that help us operate the Services, such as hosting, payment, scheduling, analytics, email, file storage, or security providers.
We expect providers handling personal information on our behalf to use the information for authorized purposes and maintain appropriate safeguards consistent with their role and applicable law.
8.2 Professional Advisors
We may disclose information to attorneys, accountants, insurers, auditors, or other professional advisors where reasonably necessary.
8.3 Legal, Safety, and Security Reasons
We may disclose personal information when we believe disclosure is reasonably necessary to:
- Comply with law, regulation, court order, subpoena, or lawful governmental request.
- Protect the rights, property, or safety of our users, clients, business, or others.
- Investigate fraud, security incidents, or abuse.
- Enforce an agreement or protect legal claims.
8.4 Business Transactions
If all or part of the business is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.
8.5 At Your Direction
We may disclose information when you ask us to, authorize us to, or when disclosure is reasonably necessary to deliver a service you requested.
9. SALE, SHARING, AND TARGETED ADVERTISING
As a business practice reflected in this Privacy Policy, we do not sell personal information for monetary consideration.
We also do not intend to use personal information for targeted advertising or cross-context behavioral advertising unless we provide appropriate notice and any legally required choice mechanisms.
If our practices materially change, we will update this Privacy Policy and provide opt-out rights where required by applicable law.
10. GLOBAL PRIVACY CONTROL AND DO-NOT-TRACK SIGNALS
Where legally required and technically applicable, we will honor recognized opt-out preference signals such as Global Privacy Control for activities covered by applicable law.
Because there is not a single universally accepted standard for browser "Do Not Track" signals, our website may not respond to all such signals.
11. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
- Providing Services.
- Maintaining client or project records.
- Fulfilling contractual obligations.
- Resolving disputes.
- Maintaining financial and tax records.
- Protecting against fraud or abuse.
- Enforcing agreements.
- Complying with legal requirements.
Retention periods vary based on the type of information, the nature of the engagement, legal requirements, and legitimate business needs.
When information is no longer reasonably needed, we may delete, anonymize, de-identify, or securely archive it as appropriate.
12. DATA SECURITY
We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
Depending on the system, these safeguards may include:
- Access controls.
- Password protection.
- Multi-factor authentication where available.
- Encryption in transit where supported.
- Restricted access to project files.
- Security monitoring.
- Vendor security controls.
- Data minimization.
- Record-retention practices.
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
If you believe your information has been compromised in connection with the Services, please contact us promptly using the contact method published on ByMarkAllan.com.
13. YOUR PRIVACY RIGHTS
Depending on where you live and which laws apply, you may have rights concerning your personal information.
These rights may include the right to:
- Confirm whether we process your personal information.
- Access personal information we hold about you.
- Obtain a portable copy of personal information where applicable.
- Correct inaccurate personal information.
- Delete personal information, subject to legal exceptions.
- Opt out of the sale of personal information.
- Opt out of targeted advertising.
- Opt out of certain profiling activities.
- Restrict or object to certain processing.
- Withdraw consent where processing depends on consent.
- Appeal certain decisions concerning a privacy request.
- Receive equal service and not be unlawfully discriminated against for exercising privacy rights.
These rights are subject to applicable legal limitations and exemptions.
14. TEXAS PRIVACY RIGHTS
Where the Texas Data Privacy and Security Act applies, Texas consumers may have rights to:
- Confirm whether we process their personal data and access that data.
- Correct inaccuracies.
- Delete personal data.
- Obtain a portable copy of personal data where applicable.
- Opt out of targeted advertising.
- Opt out of the sale of personal data.
- Opt out of certain profiling in furtherance of decisions producing legal or similarly significant effects.
- Appeal a decision concerning a privacy-rights request.
- Exercise applicable rights without unlawful discrimination or retaliation.
To submit a Texas privacy request, use the contact method published on ByMarkAllan.com and clearly state that your message is a "Texas Privacy Request."
If we deny a request, you may appeal by responding to the decision or submitting a new message labeled "Texas Privacy Appeal" and explaining why you believe the decision should be reconsidered.
15. CALIFORNIA PRIVACY RIGHTS
If California privacy law applies to our processing, California residents may have rights that include:
- The right to know or access categories and specific pieces of personal information.
- The right to request deletion, subject to exceptions.
- The right to correct inaccurate personal information.
- The right to opt out of sale or sharing where applicable.
- The right to limit certain uses of sensitive personal information where applicable.
- The right to non-discrimination for exercising applicable rights.
We do not sell personal information for monetary consideration as described above.
To submit an applicable California privacy request, use the contact method published on ByMarkAllan.com and clearly identify the request as a "California Privacy Request."
16. OTHER U.S. STATE PRIVACY RIGHTS
Residents of other U.S. states may have similar rights under applicable comprehensive state privacy laws.
If a law applies to us and your information, we will process verified requests in accordance with that law.
17. EEA, UNITED KINGDOM, AND OTHER INTERNATIONAL USERS
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar privacy rights, applicable law may provide rights such as access, correction, deletion, restriction, objection, portability, and withdrawal of consent.
You may also have the right to complain to a local supervisory authority.
If personal information is transferred to a country with different privacy protections, we will use legally recognized transfer mechanisms where required.
18. HOW TO EXERCISE PRIVACY RIGHTS
You may submit a privacy request through the contact method published on ByMarkAllan.com.
Please include:
- Your name.
- Your email address.
- The jurisdiction or state associated with your request.
- The right you want to exercise.
- Enough information for us to reasonably identify relevant records.
We may need to verify your identity before completing certain requests.
We will only request information reasonably necessary for verification.
Where permitted by law, an authorized agent may submit a request for you. We may request proof of authorization and may independently confirm the request with you.
19. CHILDREN'S PRIVACY
The Services are designed primarily for adults and businesses.
We do not knowingly collect personal information from children under 13 through the Services.
If you believe a child under 13 has provided personal information to us, contact us through the contact method published on ByMarkAllan.com so we can evaluate and, where appropriate, delete the information.
Individuals under 18 should not purchase professional services or enter into a service agreement without the involvement of a parent, guardian, or other legally authorized adult.
20. CLIENT AND PROJECT MATERIALS
During a professional engagement, you may provide confidential or proprietary information.
We will use such materials for the engagement, related business administration, legal compliance, security, and other purposes authorized by the applicable agreement.
If a separate nondisclosure agreement, proposal, statement of work, or client contract includes privacy or confidentiality terms that conflict with this Privacy Policy, the more specific written agreement will govern to the extent of the conflict.
21. PORTFOLIO AND CASE-STUDY MATERIALS
We may wish to describe or display completed work in a portfolio, case study, presentation, proposal, or professional profile.
We will not knowingly publish confidential client information in violation of a written confidentiality obligation.
Any project-specific portfolio rights, attribution rights, confidentiality restrictions, embargoes, or approval requirements may be further defined in the applicable proposal, statement of work, or contract.
22. DE-IDENTIFIED AND AGGREGATED INFORMATION
We may create de-identified or aggregated information that cannot reasonably be linked to an identifiable individual.
We may use such information for analytics, service improvement, business planning, research, or other lawful purposes.
Where required by law, we will take reasonable measures to maintain de-identified data in de-identified form and not attempt to re-identify it.
23. THIRD-PARTY LINKS
The Services may contain links to websites or services operated by others.
We are not responsible for the privacy, security, content, or practices of third parties.
A link does not necessarily mean we endorse the third party.
24. SECURITY INCIDENTS
If we become aware of a security incident affecting personal information, we will investigate and take reasonable steps based on the nature and scope of the incident.
Where required by law, we will provide legally required notices to affected individuals or authorities.
25. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time.
When we make changes, we will update the "Last Updated" date.
If changes are material, we may provide additional notice when legally required or reasonably appropriate.
Your continued use of the Services after an updated policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by law.
26. CONTACT
For privacy questions, requests, or complaints, contact us through the current contact method published on:
ByMarkAllan.com
Please include "Privacy Request" in the subject line or first line of your message when requesting access, correction, deletion, opt-out, or another privacy right.
27. IMPORTANT IMPLEMENTATION NOTE
This policy describes the intended privacy commitments for ByMarkAllan.com. Before publishing, confirm that the website's actual forms, analytics tools, cookies, payment systems, scheduling services, email tools, storage systems, advertising tools, and other integrations match these statements. Privacy notices should reflect actual data practices.