Red Leaf Consulting respects the privacy of visitors, prospective clients, clients, and other people who interact with this website. This Privacy Policy explains what personal information we collect through the site, why we use it, when we share it, and the choices and rights that may apply to you.
Last updated: October 2, 2026
Who Is Responsible for Your Information
Red Leaf Consulting (“Red Leaf,” “we,” “us,” or “our”) is responsible for personal information processed through this website except where a third-party service acts as an independent controller under its own terms and privacy notice. Red Leaf operates from Washington State, United States.
Information We Collect
We collect information you choose to provide, including information submitted through the consultation form such as your name, work email address, work phone number, company website, services of interest, and any notes you provide. Please do not submit sensitive personal information through the website unless it is reasonably necessary for your request.
We may also receive limited technical and usage information, such as IP address, device and browser information, referring pages, pages viewed, approximate location derived from IP address, timestamps, and analytics identifiers. Nonessential analytics and similar technologies are used according to your consent choices and applicable law.
Our consent-management tools may store your cookie and privacy preferences so the site can remember and honor them.
How We Use Information
- Respond to inquiries and consultation requests.
- Evaluate whether Red Leaf services may be relevant to an organization’s needs.
- Provide, secure, maintain, and improve the website and our services.
- Measure website performance and understand aggregate site usage when analytics consent is available.
- Prevent abuse, fraud, security incidents, and technical problems.
- Maintain appropriate business, legal, tax, and compliance records.
- Comply with applicable law and enforce our agreements.
Legal Bases for Visitors in the European Economic Area
Where the EU General Data Protection Regulation (GDPR) applies, we process personal data only when we have a lawful basis. Depending on the activity, that basis may be your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, or Red Leaf’s legitimate interests in operating a secure business website, responding to business inquiries, and improving our services where those interests are not overridden by your rights and freedoms.
You may withdraw consent at any time for future processing that relies on consent. Withdrawal does not affect processing that was lawful before consent was withdrawn.
When We Share Information
We may share personal information with service providers that support website hosting, forms, analytics, security, communications, consent management, and related business operations. They are permitted to use information only as allowed by their agreements with us and applicable law.
We may also disclose information when reasonably necessary to comply with law, respond to lawful process, protect rights or safety, investigate security or fraud, or in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business.
Red Leaf does not currently use this website for targeted advertising and does not intentionally sell personal information for money. If applicable law treats a future disclosure or technology as a “sale,” “share,” or targeted-advertising use, we will provide the notices and opt-out mechanisms required by that law.
International Transfers
Red Leaf is based in the United States and some service providers may process information in the United States or other countries. Privacy laws in those locations may differ from the laws where you live. Where required, we use appropriate contractual or other safeguards for international transfers.
Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including responding to inquiries, maintaining business and legal records, resolving disputes, enforcing agreements, and meeting legal obligations. Retention periods vary by the type of information and the reason it was collected. Consent records and analytics information may also be retained according to the settings of the applicable consent and analytics services.
Your Privacy Rights
United States
Depending on your state and whether a particular privacy law applies to Red Leaf, you may have rights to request access to or information about personal data, correct inaccurate data, request deletion, obtain a portable copy, and opt out of certain sales, sharing, targeted advertising, or profiling. Some laws also provide rights concerning sensitive personal information, authorized agents, appeals of certain denied requests, and non-discrimination for exercising privacy rights. We will honor applicable rights and legally recognized opt-out signals when required.
Canada
Where Canadian privacy law applies, you may have rights to understand how personal information is used, access personal information held about you, request correction of inaccurate information, withdraw consent subject to legal or contractual restrictions, and challenge our compliance. Additional provincial rights may apply depending on where you reside. If a privacy concern cannot be resolved with us, you may also have the right to complain to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy authority.
European Economic Area
Where the GDPR applies, you may have rights to be informed, access your personal data, correct it, request erasure, restrict processing, receive portable data, object to certain processing, withdraw consent, and obtain safeguards regarding qualifying automated decisions. You may also lodge a complaint with the data-protection authority in your country of residence, place of work, or place of the alleged infringement.
Privacy rights are subject to legal conditions and exceptions. We may need to verify your identity before completing a request.
Cookies and Analytics
We use cookies and similar technologies for essential site functions and, where permitted by your consent choices, for analytics. Google Analytics is connected through Site Kit by Google. Consent choices are managed through our consent platform and the WordPress Consent API. See our Cookie Policy for more information and to manage your preferences.
Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. No internet transmission or storage system can be guaranteed to be completely secure, so we cannot promise absolute security.
Children
This business website is not directed to children under 16, and we do not knowingly collect personal information from children through the website. If you believe a child has provided personal information, contact us so we can review and, where appropriate, delete it.
Automated Decision-Making
We do not use personal information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects about you.
Changes to This Policy
We may update this Privacy Policy as our services, technology, or legal obligations change. We will post the revised version on this page and update the “Last updated” date. Material changes may also be communicated through additional notice when appropriate.
Contact and Privacy Requests
To ask a privacy question or exercise an applicable privacy right, contact Privacy Contact, Red Leaf Consulting at hello@redleafhq.com, use the Contact – PACT page, or write to 3815 S Othello St STE 100 PMB 113 Seattle, WA 98118. State that your request concerns privacy. We may ask for information reasonably necessary to verify your identity and locate relevant records.