YOUR INFORMATION
Privacy with
a clear purpose.
This notice explains how we handle website enquiries and service-standard briefs.
Who is responsible
Secret Gold Star is operated by Secret Gold Star. Business contact address: 1523 Auburn Dr., Colorado Springs, CO 80908, United States. For privacy questions or rights requests, contact hello@secretgoldstar.com.
What we collect and why
We collect the contact details, business information, service preferences and assessment goals you choose to submit. We use these to answer your enquiry, prepare a proposal and coordinate a potential service. Please do not include employee or guest personal information, medical details or payment-card information.
Where applicable, our basis is taking steps at your request before a contract, or our legitimate interest in responding to business enquiries and protecting the service. We do not use these forms to enroll you in marketing.
Access, hosting and transfers
Authorized operators can access enquiries in a protected management inbox. Website and database infrastructure providers process information to run the service. Hosting and processing arrangements: Hosted on DigitalOcean Kubernetes in New York, United States. Authorized Secret Gold Star operators may access enquiries from the United States, United Kingdom and Netherlands. DigitalOcean provides its Data Processing Agreement, including applicable contractual transfer provisions; contact us for information about your enquiry and its handling.. We do not sell enquiry information or publish it.
How long we keep it
Website enquiries and briefs are retained for up to 90 days from submission, then deleted from the active enquiry store. Backups expire within a further 30 days. If you become a client, the service agreement explains the separate records and retention needed to deliver that work.
Your choices and rights
You can ask us to access, correct or delete your information, and to consider a restriction or objection to processing. Portability and other rights may apply depending on your location and the legal basis. You may complain to the relevant data-protection authority, including the UK ICO or a competent EU supervisory authority where applicable. We may need to verify a request before acting.
Cookies and technical information
The form and management area use a necessary session cookie for request protection and authentication. We do not use advertising cookies or analytics trackers. A keyed hash of a connection address is used for short-lived request limiting. Hosting systems may process technical connection logs under the stated hosting arrangements.
Before an assessment
A separate service agreement defines the visit scope, evidence, recipients and handling of assessment data. Submitting an enquiry does not book a visit or create a paid contract.