Your information
Privacy policy
Plain-language information about this fictional demonstration practice and its website.
Information collected
The firm may collect information submitted through forms, scheduling tools, email, and a secure client portal, including contact details, household information, financial documents, goals, and account information.
Website information
Standard technical information such as browser type, device type, approximate location, pages visited, and referral source may be collected through privacy-conscious analytics and security logs. The site does not sell personal information.
How information is used
Information is used to respond to inquiries, provide advisory services, maintain required records, protect systems, improve the client experience, and meet legal or regulatory obligations.
Security and retention
Reasonable administrative, technical, and physical safeguards are used. No method is completely secure. Records are retained as required and then disposed of appropriately.
Your choices
You may ask to review or correct contact information, unsubscribe from educational email, or ask how information is handled.
Contact
Privacy questions can be directed to hello@cairnplanning.example. Do not send sensitive information through ordinary email or the public contact form.
Allux first-party analytics
Allux records eligible pageviews using the trusted page path, UTC event time and day, hostname-only external referrer when available, and a desktop, tablet, mobile, or unknown device category. To estimate daily unique visitors, Allux stores a daily, project-scoped salted hash. Exact IP addresses and raw user-agent strings are used only transiently in request memory for hashing, bot filtering, and device classification; neither is persisted.
Lead attribution
When a visitor submits a form, Allux may retain best-available context from the current tab since its latest full load: the initial landing page, trusted submission page, hostname-only referrer and channel, and most recently visited advisor article. This context is not joined to anonymous analytics events or used to identify or de-anonymize a visitor. Do Not Track and Global Privacy Control suppress anonymous analytics and optional attribution, while information deliberately submitted through a form may still be accepted to respond to the inquiry. Lead records, including their page, referrer, and article attribution fields, are the advisor's business records and are retained under the advisor's own retention policy rather than the 90-day anonymous-analytics window; visitors should contact the advisor regarding those records.
Retention and data not collected
Anonymous Allux analytics events are hard-deleted from active storage after 90 rolling days. Encrypted backups may retain a deleted record for up to 35 additional days before automatic expiration. Allux analytics uses no cookies or local/session storage, fingerprinting, persistent visitor profile, cross-day, cross-project, or cross-site tracking, full referrer URL, query string, fragment, session recording, or visitor de-anonymization. Allux adds no third-party tracking.