Privacy Policy

ConsensusIntel ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit consensusintel.com or contact us through our website.

Effective date: May 15, 2026
Business: ConsensusIntel
Location: St. Louis County, Missouri, United States
Contact: [email protected]

1. Information We Collect

1.1 Information You Provide

When you submit our contact form, we collect the information you enter, which may include:

• Full name
• Email address
• Law firm or organization name
• Your role (attorney, investigator, etc.)
• A description of your matter or inquiry

We collect only what you voluntarily submit. You are not required to provide any information to browse this website.

1.2 Automatically Collected Information

When you visit our website, certain information is collected automatically, including:

• Analytics data via Google Analytics 4: pages visited, session duration, approximate geographic location (country/region), browser type, device type, and referral source. IP addresses are anonymized by default in GA4.
• Server log data: IP address, request timestamp, requested URL, HTTP status code, and user agent string. Logs are maintained by our hosting provider, Railway.
• Cookies: See Section 8 (Cookie Policy) for details.

2. How We Collect Information

• Contact form: Processed by Formspree, Inc. Submissions are transmitted to Formspree and forwarded to our email address.
• Google Analytics 4: A JavaScript tracking script embedded in our pages sends behavioral data to Google's servers when you visit the site.
• Server infrastructure: Our hosting provider, Railway, generates server logs as part of normal HTTP request handling.
• Browser cookies: Set by our analytics provider and necessary site functions. See Section 8.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiry and evaluate whether we can assist with your matter
• Conduct conflict checks before entering any engagement
• Analyze website usage to improve content, navigation, and user experience
• Maintain the security and integrity of our website
• Comply with applicable legal obligations

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Bases for Processing (GDPR)

For individuals in the European Economic Area or United Kingdom, our legal bases for processing personal data are:

• Legitimate interests (Art. 6(1)(f) GDPR): responding to contact form submissions and conducting conflict checks, where our interest in providing professional services is not overridden by your interests.
• Legitimate interests (Art. 6(1)(f) GDPR): analytics, where our interest in understanding site usage does not override your interests. You may opt out at any time via the Google Analytics opt-out browser add-on.
• Legal obligation (Art. 6(1)(c) GDPR): where processing is required by applicable law.

5. Third-Party Processors

We share information with the following service providers that process data on our behalf:

5.1 Resend

Role: Transactional email delivery. Contact form submissions are transmitted server-side through Resend to deliver messages to our inbox. Resend's privacy policy governs their handling of email delivery data. See resend.com/legal/privacy-policy.

5.2 Google LLC (Google Analytics 4)

Role: Website analytics. Analytics data is transmitted to Google's servers, which may be located in the United States. Google may use standard contractual clauses or other transfer mechanisms for cross-border data transfers. See policies.google.com/privacy. You can opt out of Google Analytics tracking via the Google Analytics opt-out browser add-on.

5.3 Railway (Hosting Infrastructure)

Role: Website hosting and server log collection. Server logs are retained on Railway's infrastructure. See railway.app/legal/privacy.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

• Contact form submissions: Retained for up to 7 years given the litigation context of our professional services work.
• Google Analytics data: Retained per Google's configurable retention settings (default: 14 months for user-level and event data). Aggregated, non-personal analytics reports are retained indefinitely.
• Server logs: Retained for 90 days by our hosting provider.

7. Your Rights

Depending on your location, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal information, subject to our legal retention obligations.
• Portability: Request that we provide your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Withdraw consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing certain requests.

8. Cookie Policy

We use cookies and similar tracking technologies. Cookies are small text files stored on your device.

8.1 Strictly Necessary Cookies

These cookies are required for the website to function properly. They do not require consent. Examples include cookies that maintain your session state or remember your cookie consent preference.

8.2 Analytics Cookies

We use Google Analytics 4, which sets cookies to collect information about how visitors use our site (pages visited, session duration, etc.). You can opt out of Google Analytics tracking via the Google Analytics opt-out browser add-on.

8.3 Do Not Track

Our website does not respond to Do Not Track (DNT) browser signals. To limit analytics tracking, please use our cookie consent mechanism or the Google Analytics opt-out tool described above.

9. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with the following rights:

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to correct: You may request correction of inaccurate personal information.
• Right to opt out of sale or sharing: ConsensusIntel does not sell or share personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information: We do not use sensitive personal information beyond the purposes permitted by the CPRA.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a CCPA request, contact us at [email protected]. We will verify your identity and respond within 45 days, with an extension of up to 45 additional days if required.

10. European and UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the GDPR and UK GDPR apply to our processing of your personal data. In addition to the rights described in Section 7, you have the right to lodge a complaint with your local supervisory authority.

International Data Transfers

Your data may be transferred to and processed in the United States, which is not recognized by the EU Commission as providing an adequate level of data protection equivalent to EU standards. Where we or our processors transfer data from the EEA or UK, we rely on appropriate safeguards, including standard contractual clauses (SCCs) as adopted by the European Commission, where applicable. For more information, see the Formspree and Google privacy policies referenced in Section 5.

11. U.S. State Privacy Laws

Residents of the following states have rights under their respective state privacy laws. The specific rights available vary by state, but generally include rights to access, correct, delete, and opt out of the sale of personal information and certain targeted advertising.

• Virginia: Consumer Data Protection Act (VCDPA)
• Colorado: Colorado Privacy Act (CPA)
• Connecticut: Connecticut Data Privacy Act (CTDPA)
• Utah: Utah Consumer Privacy Act (UCPA)
• Texas: Texas Data Privacy and Security Act (TDPSA)
• Oregon: Oregon Consumer Privacy Act (OCPA)
• Montana: Montana Consumer Data Privacy Act (MCDPA)

ConsensusIntel does not sell personal information and does not engage in targeted advertising as those terms are defined under applicable state law. To submit a privacy request under any applicable state law, contact us at [email protected].

12. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe we may have collected such information, please contact us at [email protected].

13. Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These include:

• TLS encryption for all data in transit
• Access controls limiting who can access contact form submissions
• Reliance on Formspree and Google, which maintain their own security programs

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Breach Notification

In the event of a data breach that creates a risk of harm to affected individuals, we will notify affected individuals and relevant regulators as required by applicable law.

14. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date shown at the top of this page and, where we hold your email address, notify you by email. We may also post a banner on the website indicating that the policy has been updated. Continued use of the website after the effective date of any change constitutes acceptance of the updated policy.

16. Governing Law

This Privacy Policy is governed by the laws of the State of Missouri, without regard to its conflict of law provisions.

17. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

ConsensusIntel
St. Louis County, Missouri
[email protected]