Privacy policy
What we collect
When you submit the enquiry form we collect your full name, company (optional), business email, project sector, primary challenge, message and your consent to this policy.
To prevent spam and abuse we also store a one-way hash of your IP address (not the address itself) and your browser's user-agent string.
How we use it
Your details are used only to read and reply to your enquiry. They are not used for marketing, newsletters or profiling, and are never sold.
The IP hash is used only to limit repeated submissions from one connection.
Who processes it
Clear Milestone is responsible for your enquiry details. Lovable hosts this website, and Lovable Cloud provides the managed database where enquiries are stored. These services and their infrastructure providers process data on our behalf. Automatic enquiry-notification emails are not currently enabled.
Google Fonts supplies the website fonts, and Lovable's asset hosting supplies images. Loading these resources involves sending your IP address and browser information to those services, but not your enquiry message. This site loads no advertising or analytics scripts by default.
How long we keep it
The retention window is 24 calendar months from receipt, not from our last contact. When a new enquiry is successfully stored, the site removes enquiry records older than this window. This is not a daily scheduled deletion: if no further enquiries arrive, older records may remain until the next successful enquiry or a manual deletion. You can request earlier deletion at any time. Separately held engagement correspondence is not part of this enquiry database.
Deletion removes a record from the active enquiry database. Hosting backups and operational logs are managed by our service providers and may follow their own retention schedules; we do not promise immediate deletion from those systems.
Your rights
To request access, correction or deletion, email contact@clearmilestoneconsulting.com from the address you used on the form with the subject “Privacy request”. Say which action you want and, if known, the approximate date of your enquiry. Do not send passwords or identity documents. We confirm who is asking before acting and respond within 30 days.