00 / Legal
California Privacy Notice
Updated and Effective: September 29, 2026
01
Scope
This notice supplements our Privacy Policy for California residents. It covers information handled through the Vesta Consulting website and the preceding 12 months, to the extent applicable. A signed client agreement may address additional information separately.
Categories collected and disclosed in the last 12 months
We collect only categories relevant to an inquiry or website delivery. The table describes categories handled and business-purpose recipients; it does not mean every visitor supplies every category.
| Category | Examples | Business-purpose recipients |
|---|---|---|
| Identifiers | Name, email, optional phone, IP address processed by site infrastructure | Hosting, database, email delivery |
| Customer records | Contact details and inquiry details provided in forms | Database and email delivery |
| Commercial information | Nature, timeline, and approximate size of the proposed advisory inquiry | Database and email delivery |
| Internet activity | Landing page, referrer, UTM tags submitted with a Checkup; request information processed by hosting | Hosting, database and email delivery |
| Professional information | Company and role provided with an inquiry | Database and email delivery |
| Inferences | A source category inferred from a campaign tag or referral host; fit assessment based on inquiry | Database and email delivery as needed |
Retention
We keep information as long as reasonably necessary to answer inquiries, maintain a potential or active relationship, resolve privacy requests, protect our rights and security, and meet legal obligations. There is no single fixed period for every record. Deletion requests are subject to legal exceptions and backup cycles.
Sources of collection
You provide form details directly. On Checkup submission, the site captures the landing path, referrer and URL campaign tags, if available. Hosting services process technical request details necessary to serve and secure pages. We do not independently collect click IDs into our form records.
Purposes of use
We use these categories to reply, arrange conversations, assess potential advisory fit, process rights requests, maintain and secure the site, understand inquiry attribution, and comply with law.
Disclosures for business purposes
We disclose necessary data to our hosting, database, and email-delivery service providers, and as needed to professional advisors, lawful authorities, or a successor in a business transfer. We do not disclose information for cross-context behavioral advertising.
We do not sell or share personal information
We have not sold or shared personal information as defined by the CCPA in the preceding 12 months and do not currently do so. We do not sell information about anyone under 16. We honor Global Privacy Control signals; there is no sale or advertising-sharing activity to opt out of.
Sensitive personal information
Our forms do not request Social Security numbers, government IDs, account credentials, precise location, or uploaded identity documents. Please do not include sensitive personal information in free-text fields. If you choose to provide it, we will handle it only as reasonably necessary to respond and protect your information.
Your CCPA rights
Subject to legal exceptions, California residents may request to know the categories, sources, purposes, disclosures, and specific pieces of information collected; obtain a copy; correct inaccurate information; and delete personal information. We do not use sensitive information to infer characteristics or sell/share information, so related limitation and sale opt-out rights do not apply to our current practices.
How to submit and verification
Use the Data Privacy Request form or email privacy@vestaconsulting.co. We match the information you provide to an existing inquiry and may ask for additional confirmation. Authorized agents must show written authority; we may ask you to verify directly. We do not require you to create an account.
Response timing
We confirm receipt within 10 business days and respond within 45 days, unless we notify you of a single 45-day extension and its reason. We will explain any denial and available appeal rights.
Non-discrimination
We do not discriminate against you for exercising a privacy right.
Shine the Light
California residents may ask about disclosure of personal information for others' direct marketing. We do not disclose information for others' direct marketing. Send questions to privacy@vestaconsulting.co.
Changes
We may revise this notice and will post an updated effective date here.
Contact
Vesta Consulting · privacy@vestaconsulting.co.