Privacy Policy

1. Information you provide

A newsletter subscription asks for your email address. An advisory application asks for your name, email, role or company, intended result, current challenges, and whether the engagement may be a fit. You may also supply your website, timing, what you have tried, and what prompted the enquiry.

Please do not put medical records, payment credentials, or sensitive information about other people in a public application form.

If we work together, records may include agreed goals, session notes, action items, progress observations, and correspondence. Health or physiological information is optional and should only be shared when relevant to the agreed work. Payment providers process payment details; do not send card details by email or through this website.

2. How information is used

Information is used to respond to enquiries, deliver requested emails, assess fit, arrange and deliver advisory, maintain working records, handle billing, protect the service, and meet legal obligations. Applying for advisory does not itself subscribe you to the newsletter.

Health information is used to personalize the engagement. We do not sell, rent, or license it, or disclose it for third-party advertising or marketing.

3. Website and engagement providers

• Netlify hosts the primary site and processes newsletter and application requests through server-side functions. A retained diagnostic may also use Netlify Forms for its email gate.
• Kit stores newsletter subscriptions and advisory application responses and supports email delivery. The application includes any source and journey information described below.
• Notion is used for advisory workspaces and working records.
• Email and session tools handle correspondence and meetings. A scheduling link, including TidyCal when used, processes the information you provide to book a call. Payment and meeting providers may be identified separately when arranging an engagement.

Providers receive information needed for their role. We may also disclose information when legally required, or to professional advisers subject to appropriate confidentiality. We do not sell personal information. Third-party websites you choose to visit have their own policies.

4. Client confidentiality and publication

Private engagement information is confidential. Private client identities and identifying details are withheld unless the client has approved their publication. Approved public testimonials may identify the reviewer and link to their original account. Removing a name alone does not make sensitive information suitable for publication.

We obtain explicit written permission before publishing identifiable client information, private quotations, or sensitive client details. General, non-identifying observations about the work may inform teaching and writing. They must not reveal private health information, confidential business information, or a recognizable client identity.

To raise a concern about a quotation or case account, email Marcus directly.

5. AI tools and permission

We may use AI for general research, drafting, and analysis. Before any new use of confidential client records, session notes, identifiable information, or health information in a third-party AI service, we will ask for your explicit written permission. The request will identify the service, the information involved, and the purpose.

Silence, a general application, or acceptance of this policy is not permission for that use. You may decline and discuss an alternative way to do the work. Permission can be withdrawn for future processing by emailing Marcus. AI does not replace professional medical care or your own decisions.

6. Browser storage and source information

The site's own attribution code uses sessionStorage in your current browser tab to retain selected pages visited, the first selected article read, campaign labels, and a referring hostname. When you submit a form, relevant source and journey information is sent with it. This is not cross-device tracking.

This attribution feature does not set advertising cookies or create cross-device profiles. Hosting, email, scheduling, and other providers may process technical information such as IP addresses and service activity under their own policies. Kit may record email opens and link clicks. Browser privacy settings, email settings, or blocking storage may affect these features.

7. Retention

Engagement records are retained for the engagement plus up to 36 months. Application and diagnostic lead records are retained for up to 24 months after the last interaction. Newsletter records are retained while subscribed, with limited suppression records afterward to honor unsubscribe requests. Billing, legal, or dispute records may need to be kept longer where required by law.

You may request access, correction, or deletion by email. We aim to respond to verified requests within 30 days, subject to applicable law and necessary recordkeeping.

8. Security and international processing

We use reasonable safeguards and limit access to information needed for the work. No online service can promise absolute security. Providers may process information outside your country. This update does not remove restrictions or protections that already apply to previously collected information or under a signed agreement. Any proposed new use requiring permission will be explained before that use.

9. Your choices

Use the unsubscribe link in newsletter emails to stop the newsletter. Contact Marcus to discuss engagement communications, data access, correction, deletion, or withdrawal of consent. Additional rights may apply where you live. The website and advisory are intended for adults.

10. Updates and existing commitments

We will date policy updates. Updates do not retroactively authorize new uses of previously collected information or override existing confidentiality commitments. Where a new use requires consent, we will ask before proceeding.

11. Contact and disputes

VYRTŪOSITI LLC · Phoenix, Arizona, United States
marcus@marcuslefton.com

Subject to mandatory law and any different dispute process in a signed engagement agreement, Arizona law applies and disputes are handled in the appropriate state or federal courts in Maricopa County, Arizona. This policy does not require arbitration or waive rights that cannot lawfully be waived.