Privacy Policy & Messaging Terms

1. Who we are

This site is operated by AllStar Advisory, a registered fictitious name (d/b/a) of GuttaBxby LLC ("we", "us", "our"). We are a business consulting firm based in Florida, providing strategy, websites, applications, social media and automation services.

This policy explains what we do with personal information collected through allstar.biz. It does not cover our clients' own websites, which are governed by their own policies.

2. What we collect

Information you give us

When you submit our contact form, we collect what you type into it:

• Your name
• Your business name (optional)
• An email address or phone number, so we can reply
• What you're interested in
• Any message you write
• Your informational, marketing, or no-text preference and when it was recorded

If you contact us by email or phone instead, we hold whatever you choose to tell us.

Information collected automatically

When you submit the form we also record, alongside your submission:

• Your IP address — used to prevent spam and abuse of the form
• Your browser's user-agent string — the browser and device type
• The date and time of submission

Our hosting and security provider, Cloudflare, also processes technical request data (including IP addresses) to route traffic and block attacks.

What we do not collect

We want to be specific, because most privacy policies are vague on this point:

• No analytics or tracking pixels. There is no Google Analytics, Meta Pixel, or similar tracker on this site.
• No advertising cookies and no cross-site tracking.
• No sale of personal information, ever.
• We do not collect payment card details through this website.

3. How we use it

What	Why	Basis
Name, contact details, message	To respond to your enquiry and, if we work together, deliver the services	Your request / performance of a contract
IP address, user-agent	Spam prevention, rate limiting, security	Our legitimate interest in a working, un-abused website
Contact details	Follow-up about the enquiry you made	Your request
Mobile number and SMS preference	To send only the informational and/or marketing texts you actively selected	Your consent, which you may withdraw at any time
Records of work and correspondence	Bookkeeping, tax and legal obligations	Legal obligation / legitimate interest

We do not send marketing email to people who merely submitted the contact form. If we ever start a mailing list, it will be opt-in, and every message will carry a working unsubscribe link.

4. SMS Messaging Terms

AllStar Advisory may send text messages from +1 (888) 402-5578 only according to the preference selected on our contact form:

• Informational messages may include responses to messages you send, consultation scheduling, project updates, service information, and information relevant to your relationship with us.
• Marketing messages may include discount codes, special deals, announcements, or promotions for our products and services. Selecting informational messages does not provide consent for marketing messages.
• No text messages records that you declined both categories. We will not treat providing a phone number by itself as consent.

Consent is not a condition of purchase. You may submit an enquiry and choose not to receive text messages. Message frequency varies. Message and data rates may apply.

Reply STOP to unsubscribe at any time. Reply HELP for assistance or more information. You may also revoke consent by calling (888) 402-5578 or emailing [email protected]. We honor reasonable opt-out requests as soon as practicable. A one-time non-marketing confirmation may be sent after an opt-out request.

5. Who we share it with

We do not sell, rent or trade your personal information. We share it only with service providers who help us operate, and only as far as they need it:

Provider	Role
Cloudflare	DNS, network security and the tunnel that serves this site
Hetzner	Server hosting (Germany) — where our database runs
Google Workspace	Business email; delivers alerts when you submit the form
Google Fonts	Serves the typefaces on this site; receives your IP address as part of that request
Grasshopper and participating mobile carriers	Business phone and delivery of text messages you consented to receive

We may also disclose information if legally required — a subpoena, court order or similar — or where necessary to protect our rights, safety, or those of others.

International transfer: our server is located in Germany. If you're in the United States, your information is transferred to and stored in the EU.

6. Cookies

This site uses one cookie, and only for staff:

Cookie	Purpose	Duration
as_session	Keeps an authorised staff member signed in to our internal portal. Set only after a successful staff login.	14 days

Ordinary visitors are not given any cookie. There is no cookie banner because there is nothing to consent to — we set no analytics, advertising or tracking cookies at all.

Cloudflare may set essential security cookies to identify malicious traffic. These are strictly functional.

7. How long we keep it

• Enquiries that don't become clients: up to 24 months, then deleted.
• Client records: for the engagement plus 7 years, to meet tax and contractual record-keeping requirements.
• Staff portal sessions: 14 days, then automatically purged.
• Spam submissions: deleted as identified.
• SMS preference records: retained as needed to document consent, refusal, and opt-out compliance, subject to applicable legal requirements.

You can ask us to delete your information sooner — see below.

8. Your rights

Whatever jurisdiction you're in, we'll honour these requests:

• Access — ask what we hold about you
• Correction — have inaccurate information fixed
• Deletion — have your information erased, unless we're legally required to keep it
• Copy — receive your information in a portable format
• Opt out — tell us to stop contacting you

Email [email protected]. We'll respond within 30 days. We won't charge you, and we won't treat you differently for asking.

Florida residents: Florida's Digital Bill of Rights applies to businesses above certain revenue thresholds that we do not currently meet. We extend the rights above to you regardless.

California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not process it for cross-context behavioural advertising.

9. Security

Practical measures we actually take:

• All traffic is encrypted in transit (HTTPS/TLS).
• Our server has no publicly exposed ports — traffic reaches it only through an authenticated Cloudflare tunnel.
• Staff passwords are stored as scrypt hashes, never in plain text.
• Staff sessions are stored as hashed tokens; session cookies are HttpOnly and Secure.
• The contact form is rate-limited and protected against automated abuse.
• Access to enquiry data is restricted to authorised staff.

No system is perfectly secure, and we won't claim otherwise. If a breach affects your information, we'll notify you and the relevant authorities as required by law.

10. Client data

If you are a client, additional terms apply to data we handle on your behalf:

• Your customers' personal information stays in your systems and accounts. We access it only as needed to deliver the work.
• We don't copy your customer lists into our own systems, use them for our purposes, or retain them after an engagement ends.
• Domains, hosting, email, advertising and analytics accounts are registered in your name, under your billing, with us as a delegated user.
• You remain the controller of your customers' data and are responsible for your own privacy policy and consent practices.

11. Children

This site is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

12. Changes

If we change this policy we'll update the date at the top. Material changes will be flagged clearly on this page. Continuing to use the site after a change means you accept the updated policy.

13. Contact