Last updated: February 11, 20261. Controller/Data Controller
Strategic Assessment is the controller of personal data processed via this website.
Contact: [email protected]2. What data we collect
We may collect:
Identity & contact data: name, email, (optional) phone/WhatsApp
Business data you submit: business links, revenue ranges, ticket ranges, assets, goals, constraints, answers to application questions
Technical data: IP address, device/browser info, approximate location, and site usage data (only if analytics/marketing tools are enabled)3. Why we collect it (purposes)
review your application and determine fit/eligibility
communicate about your submission and, if applicable, invite you to pay
deliver the Strategic Assessment if purchased
prevent fraud/abuse and maintain security
improve the website and marketing performance (only with consent where required)4. Legal bases (EU/UK GDPR + Brazil LGPD)
Depending on your location and context, we process data based on:
performance of a contract / steps prior to contract (reviewing your application; delivering service)
legitimate interests (security, fraud prevention, service improvement)
consent (marketing cookies, analytics, pixels where required)
legal obligation (tax/accounting compliance when applicable)
LGPD is broadly aligned with GDPR principles and requires lawful bases and transparency.5. Sharing your data
We may share limited data with service providers strictly to operate the business, such as:
form provider (Typeform)
website builder/hosting (Carrd and domain/DNS providers)
email provider (Google Workspace/Gmail)
automation tools (e.g., Make)
payment processor (Stripe)
These providers act as processors/service providers under contract where applicable.6. International transfers
If you are in the EU/UK/Brazil, your data may be transferred to and processed in the United States or other countries. Where required, we use appropriate safeguards (e.g., contractual protections) for such transfers.7. Retention
We keep application data only as long as needed to:
evaluate your submission,
deliver the service if purchased, and
comply with legal/accounting obligations.
Typical retention: up to 12 months for applications not accepted; longer for clients due to records obligations.8. Your rights (EU/UK GDPR + LGPD)
Depending on your jurisdiction, you may have the right to:
access, correct, update, or delete your data
object or restrict processing
withdraw consent (where processing is based on consent)
portability (where applicable)
You can request this by emailing [email protected]. LGPD provides rights to data subjects and is enforced by Brazil’s data protection authority (ANPD).9. California (CCPA/CPRA) — Notice at Collection
If you are a California resident and we are a “business” under CCPA/CPRA, we provide this notice at collection:
Categories collected: identifiers (name/email), commercial information (transaction/payment confirmation), internet activity (if analytics enabled), and professional/business information submitted in the form.
Purposes: application review, service delivery, communications, security, and site improvement/marketing (where enabled).
CCPA requires providing a notice at collection describing categories and purposes.
We do not sell personal information. If that changes, we will update this page and provide required opt-out mechanisms.10. Security
We take reasonable measures to protect your data, but no online system is 100% secure.11. Children
This site is not intended for children under 18, and we do not knowingly collect data from them.12. Contact
[email protected]