1. Who we are
AHConsulting.ai is a trading name of [Your legal entity name]. Registered office: [Address]. We act as the data controller for personal data processed via our websites, funnels, courses and client services.
Primary contact: [email protected] • EU/EEA
If you operate from Spain (Tenerife), your lead supervisory authority is likely the AEPD (Spain). If you operate from the Netherlands, it may be the AP. Update this section accordingly.
2. Scope
This Policy covers data collected through ahconsulting.ai, associated subdomains, GoHighLevel funnels, checkout pages, forms, course portals, and community tools we operate. It does not cover third‑party sites we link to.
3. Data we collect
Directly from you
- Identity & contact: name, email, company, role, phone.
- Account data: login, preferences, course progress.
- Transaction data: products, invoices, VAT, shipping/billing details (handled by our payment providers).
- Communications: messages via email, chat, support, forms.
- UGC: testimonials, survey answers, media you upload.
Automatically
- Usage & device: IP address, device type, OS, browser, pages viewed, events.
- Cookies & similar: analytics, A/B testing, conversion tracking, advertising (if enabled).
- Meta from emails/campaigns: opens, clicks, bounces.
We do not intentionally collect special categories of data (e.g., health, beliefs). Do not submit such data to us.
4. Purposes & legal bases
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide our services & website | Account creation, course access, downloads, client delivery | Contract performance (Art. 6(1)(b)); Legitimate interests (Art. 6(1)(f)) |
| Payments & billing | Stripe/PayPal processing, VAT, invoices, fraud prevention | Contract performance; Legal obligation (tax); Legitimate interests |
| Customer support & communications | Email replies, chat, updates | Contract performance; Legitimate interests |
| Marketing (with consent) | Newsletters, launches, webinars, remarketing | Consent (Art. 6(1)(a)); Legitimate interests for B2B soft opt‑in where applicable |
| Analytics & product improvement | GA4, GHL analytics, conversion tracking | Consent (for non‑essential cookies); Legitimate interests for aggregated insights |
| Legal & security | Access logs, backups, abuse prevention | Legal obligation; Legitimate interests |
5. Retention
| Data type | Typical retention | Notes |
|---|---|---|
| Account & course data | Active account + 24 months after last activity | Delete earlier on request unless needed for legal claims |
| Marketing consent & logs | Until you withdraw consent + 24 months | We store proof of consent/opt‑out |
| Billing & tax records | 7–10 years | Per applicable tax law |
| Support tickets | 24 months | For quality and dispute resolution |
| Server & security logs | 90–180 days | Short‑cycle for security |
7. International transfers
Where data is transferred outside the EEA/UK (e.g., to the US), we rely on lawful safeguards such as the EU–US Data Privacy Framework participation of the recipient, Standard Contractual Clauses (SCCs), and supplementary measures.
8. Your rights
You can exercise the following rights under GDPR (subject to conditions):
- Access your data
- Rectification
- Erasure (“right to be forgotten”)
- Restriction of processing
- Data portability
- Object to processing (including direct marketing)
- Withdraw consent at any time (affects future processing)
You also have the right to lodge a complaint with a supervisory authority (e.g., AEPD in Spain or AP in the Netherlands).
10. Security
We apply reasonable technical and organisational measures, including encryption in transit (HTTPS), access controls, least‑privilege practices, regular updates, and vendor due diligence. No online system is 100% secure.
11. Changes
We may update this Policy from time to time. Material changes will be highlighted here and, where appropriate, notified to you by email or on‑site notice.
12. Contact
Questions or requests? Contact our privacy team at [email protected].
Replace placeholders (legal entity name, address, tools actually used) before publishing.
