MARATHONCONSULTING INC.
LEGAL / PRIVACY POLICY · EFFECTIVE 2026

Your data.
Your rights.
Our responsibility.

Marathon Consulting Inc. (“Marathon,” “we,” “our”) is committed to protecting the privacy and rights of every individual whose personal data we process — whether you have requested a consultation, subscribed to research, or simply visited this website. This policy explains what data we collect, why we collect it, how we process it, and how to exercise your legal rights.

01 / SCOPE & CONTROLLER

Who this policy applies to,
and who is responsible.

This privacy policy applies to all visitors, clients, prospects, and business contacts of Marathon Consulting Inc. Marathon Consulting Inc. is the data controller responsible for your personal data under this policy.

DATA CONTROLLER

Marathon Consulting Inc.

Strategic business consulting and corporate advisory services. Specializing in mergers & acquisitions, capital strategy, sports & entertainment, intellectual property, and growth planning.

PRIVACY LEAD · CONTACT

For all GDPR, CCPA, PIPEDA, and personal-data inquiries — including access, correction, erasure, portability, and data-processing-agreement requests — write to our Privacy Lead at the contact below.

Email: privacy@marathonconsultinginc.com
Response SLA: 30 calendar days from receipt.

02 / OUR SIX PRINCIPLES

Six commitments.
Every engagement, every day.

Our data-protection program is built on six concrete, auditable commitments aligned with Article 5 of the GDPR. We do not treat privacy as a legal checkbox — it is a structural design decision for every form, workflow, and service we ship.

01 / LAWFUL BASIS

Lawful, fair, and transparent

We only process personal data when we have a lawful basis to do so — typically your explicit consent, the performance of a contract with you, or a legitimate business interest that does not override your rights. Every processing activity is documented, logged, and reviewed on a regular schedule.

02 / DATA INTEGRITY

Minimality and purpose limitation

We collect only what is necessary. Name, email, company, and your message — nothing more. Data collected for consultation purposes is never repurposed for unrelated marketing, sold to third parties, or combined with shadow profiles from external data brokers.

03 / STORAGE

Secure storage and retention

Submissions and correspondence are retained only as long as required to respond to your inquiry, satisfy legal record-keeping obligations, or defend against potential claims. All at-rest data is encrypted; in-transit data uses TLS 1.3; access logs are retained and reviewed monthly.

04 / SHARING

Limited sharing, strict contracts

Consultation submissions flow through Formspree (our form processor) under a signed data-processing agreement. No other third parties receive your personal information unless you explicitly request it, or we are legally compelled by a valid court order or warrant.

05 / TRANSFERS

International transfers

Marathon Consulting operates globally. Your data may be processed in countries outside your jurisdiction — including the United States, the European Economic Area, and Singapore. Where required by applicable law, transfers rely on Standard Contractual Clauses approved by the European Commission.

06 / YOUR RIGHTS

Access, correction, erasure, portability

Under GDPR, UK GDPR, CCPA, PIPEDA, and equivalent legislation you have the right to access the personal data we hold about you, request its correction or erasure, restrict processing, obtain a machine-readable copy, and withdraw consent at any time. All requests are responded to within 30 calendar days.

03 / CATEGORIES OF DATA

What we collect,
and what we never will.

Our collection is intentionally minimal. We have built Marathon's infrastructure so that you can request a consultation, read every public page on this website, and contact us — without ever being subject to cross-site tracking, third-party advertising cookies, or a hidden analytics spy pixel.

Personal data · Consultation request

Full name, email address, company/organization (voluntary), and the content of your message. Submissions are processed via Formspree under DSA and transmitted encrypted end-to-end during submission.

Technical data · Server logs

Anonymous web-server logs: IP address (stored truncated in production where permitted by law), user agent, timestamp, and the URL you requested. Retention: 30 days. Used exclusively for security and abuse prevention.

Cookies and tracking

Necessary cookies only — session, dialog state, and explicit consent preference. No third-party advertising cookies. No Google Analytics or Meta Pixel. No device fingerprinting. Period.

Data we explicitly refuse to collect

Sensitive special-category data (health, biometrics, racial or ethnic origin, political opinions, religion, trade-union membership, sexual orientation). We never request it and our intake forms reject it if detected.

EXERCISING YOUR RIGHTS

Under Article 15 – 22 GDPR

To exercise any of your rights — or to ask us a specific question about this policy — email our Privacy Lead. We will acknowledge your request within 72 hours and respond substantively within 30 calendar days. No form, no account, and no fee is required.

  • Right of access (Art. 15)
    A copy of all personal data we hold about you
  • Right of rectification (Art. 16)
    Correct any incomplete or inaccurate information
  • Right of erasure (Art. 17)
    “Right to be forgotten” — subject to legal exceptions
  • Right to restriction (Art. 18)
    Pause processing pending verification
  • Right to portability (Art. 20)
    Machine-readable copy of data you provided
  • Right to object (Art. 21)
    Object to processing on legitimate-interest grounds
04 / COOKIES · TRACKING · CONSENT

Necessary cookies only.
Nothing hidden.

We respect the “no” in cookie consent. Marathon Consulting does not operate a cookie wall, does not run third-party advertising, and does not share your visit data with ad networks. The only cookies written are strictly necessary for the site to function.

COOKIE NAMEPURPOSERETENTIONCATEGORY
session-statePreserves your consultation-dialog, mobile-menu, and consent-preference state during a visitSession end (closing browser)Strictly Necessary
cf_captcha_*Cloudflare Turnstile challenge response used to distinguish human submissions from bots during form postingMax 1 hour — always first-partyStrictly Necessary / Security
consent-preferenceExplicit record of any consent choice you submit via the GDPR checkbox on our consultation form12 monthsStrictly Necessary (auditing)
PRIVACY INQUIRIES · SUBJECT ACCESS REQUESTS

Questions about this policy?
Write to us directly.

No account. No ticket system. No fee. Just send an email — or a registered letter — referencing the specific right or concern you wish to raise, and we will respond within the statutory timeframe applicable in your jurisdiction.

Email the Privacy Lead

© 2026 MARATHON CONSULTING INC. · PRIVACY POLICY v1.0 · EFFECTIVE DATE 2026 · WE RESERVE THE RIGHT TO AMEND THIS POLICY; MATERIAL CHANGES WILL BE POSTED TO THIS PAGE WITH A REVISED EFFECTIVE DATE.