This Privacy Policy describes how Citorian ("we," "us," or "our") collects, uses, and protects information from visitors to citorian.com and from prospective and current clients who engage with our services. We are committed to transparency about our data practices and to protecting the privacy of everyone who interacts with us.
1. Information we collect
Information you provide directly
When you fill out a contact form, request a strategy call, or otherwise communicate with us, we collect the information you provide. This typically includes:
- Your name and work email address
- Your firm name and primary practice area
- Your current monthly SEO investment (if disclosed)
- Any additional information you choose to share in form fields, emails, or conversations
Information collected automatically
When you visit citorian.com, we automatically collect limited technical information through standard web analytics, including:
- Your IP address (typically anonymized at collection)
- Browser type, operating system, and device type
- Referring website and pages visited on citorian.com
- Approximate geographic location (country and region, not precise location)
- Date and time of your visit
Cookies and tracking technologies
We use a minimal set of cookies for essential site functionality and aggregated analytics. We do not use cookies for advertising retargeting or sell cookie-based data to third parties. You can control or disable cookies through your browser settings.
2. How we use information
We use the information we collect for the following purposes:
- To respond to your inquiries and conduct strategy calls when you request them
- To deliver services if you become a client, including communicating about your engagement
- To improve our website and understand how visitors interact with our content
- To comply with legal obligations applicable to our business operations
We do not sell, rent, or trade your personal information to third parties. We do not use your information for advertising retargeting on other websites.
3. Confidentiality of client engagements
For current and prospective clients, we operate under a strict confidentiality standard. All engagements are covered by a Non-Disclosure Agreement (NDA) executed as part of the contracting process. Your firm's strategy, data, performance metrics, internal operations, and competitive positioning remain confidential.
We do not publish client names, case studies, or results without explicit written approval from the client. Selected engagements may be published with permission beginning in Q3 2026 and beyond.
4. Information sharing
We share your information only in the following limited circumstances:
- Service providers: Trusted vendors who help us operate our business (email, CRM, analytics, payment processing). All such providers are contractually obligated to handle your information securely and only for the purposes we direct.
- Legal compliance: When required by law, court order, or to protect our legal rights or the rights of others.
- Business transitions: In the unlikely event of a merger, acquisition, or asset sale, client and visitor information may be transferred as part of that transaction, subject to confidentiality obligations.
5. Data retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, deliver our services, or comply with legal obligations.
- Contact form submissions: Retained for up to 24 months from last contact unless you become a client.
- Client engagement records: Retained for the duration of the engagement plus the period required by applicable law and regulation.
- Analytics data: Aggregated and anonymized data may be retained indefinitely; identifiable analytics data is retained for no more than 26 months.
6. Your rights
Depending on your jurisdiction, you may have certain rights regarding your personal information:
- Right of access: Request a copy of the personal information we hold about you
- Right of correction: Request that inaccurate information be corrected
- Right of erasure: Request deletion of your personal information, subject to legal retention requirements
- Right to object: Object to certain processing of your personal information
- Right of portability: Request your information in a portable format
To exercise any of these rights, contact us using the information at the bottom of this policy. We respond to verified requests within 30 days.
7. International visitors and data transfers
Citorian serves clients in the United States. Our website is accessible globally. If you visit citorian.com from outside the United States, please be aware that information you submit may be transferred to and processed in countries with different data protection standards than your home jurisdiction.
For visitors from the European Economic Area (EEA), the United Kingdom, or Switzerland, we process personal information consistent with the principles of the General Data Protection Regulation (GDPR), including lawful basis, purpose limitation, data minimization, and the rights described in Section 6.
8. Security
We implement reasonable and appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security of information transmitted over the internet.
9. Children's privacy
Our services are directed to businesses and professional practitioners. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected information from a person under 18, we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice through the site or by email.
11. Contact us
If you have questions about this Privacy Policy, want to exercise any of the rights described above, or have any other privacy-related concern, contact us:
- Email: [email protected]
- Or through: the contact form on our home page at citorian.com
We aim to respond to all privacy inquiries within 30 days.