Privacy Policy

Who this policy covers

Loris Enterprises LLC operates DanLoris.com, the personal brand website of Dan Loris. This policy covers information handled through DanLoris.com, its contact and newsletter forms, and its public resources. “We,” “us,” and “our” refer to Loris Enterprises LLC. Questions and privacy requests can be sent through the contact form.

Client portals and public customer accounts are not currently available. A separate project agreement may govern information supplied during paid work. Any future account or portal service will need an updated privacy notice describing its actual data handling before it collects new types of information.

Information collected

When you contact us, the site stores your first and last name, email address, message, submission time, newsletter choice, and any phone number, website, business name, or service interest you provide. Include only information needed to explain your inquiry. Do not submit passwords, payment card details, government identifiers, health information, or confidential client files through the public form.

When you subscribe to What’s Next?, the site stores your email address, the signup location, the consent wording associated with the registration, the signup time, a unique unsubscribe token, confirmation status and time, interest groups, and any unsubscribe time. When email delivery is enabled, we also retain delivery status, failures, and opt-out records. The contact form has a newsletter checkbox selected by default. Uncheck it to send an inquiry without requesting a new subscription. This does not change an existing subscription. New subscribers must confirm by email.

The contact form uses a self-hosted computational spam check. We verify a short-lived challenge and retain its signature until expiry to prevent reuse. Your contact details are not sent to an external CAPTCHA provider.

When you request a free resource, we store your name, email, the resource requested, your newsletter choice, and any phone number or website you provide in the private contact system. Newsletter signup is selected by default on the resource form; you can uncheck it and still access the resource. Unchecking does not unsubscribe an existing newsletter subscription. A necessary, secure access cookie allows the requested download in your browser for 24 hours. It contains no contact details.

Hosting and delivery providers receive technical information needed to serve requests, which may include an IP address, browser information, request details, and service logs. The form protection uses a time-limited hash derived from a network address, the form action, and the current hour to count requests. The application does not store the original address in that rate-limit record.

How information is used

We use inquiry information to understand and respond to your request, discuss potential work, and maintain relevant correspondence. Private contact profiles may include company, role, phone number when supplied, interests, relationship notes, deal estimates, statuses, and follow-up commitments. These records are restricted to the owner workspace. Subscription information is used to manage your chosen newsletter and resource updates, record your consent, and honor opt-outs. Technical information supports website delivery, troubleshooting, access controls, and abuse prevention.

Where applicable law requires a legal basis, processing may rely on your consent for optional marketing, steps you request before a contract, performance of an agreement, legal obligations, or legitimate interests in operating and protecting the site, subject to your rights. A privacy notice is not a request for blanket consent to unrelated uses.

Providers and disclosure

The current site uses Cloudflare hosting, sign-in, and database infrastructure. Form records are available through an owner-restricted workspace and may be processed by infrastructure providers to operate the service. The site also loads Google Fonts, which makes requests from your browser to Google’s font servers. These providers may handle data in countries other than your own.

Newsletter delivery is being set up with Resend and is not active yet. When enabled, Resend will process recipient addresses, message content, and delivery feedback to send newsletters and requested service emails. New subscribers will confirm their email before receiving newsletters. We keep suppression records to honor unsubscribes and delivery failures. Providers needed to perform an agreed client project will be addressed in the relevant project arrangements.

We do not sell contact or subscriber information or share it for cross-context behavioral advertising. Information may be disclosed when reasonably necessary to comply with law or valid legal process, protect rights and safety, investigate abuse, or support a business transfer with appropriate privacy protections. Any new use that requires notice or consent will be handled before that use begins.

Cookies and external content

Resource worksheets keep your answers on the open page. If you choose “Save on this device,” a draft is stored in that browser’s local storage so you can return to it. The worksheet does not send your answers to our servers, contact system, analytics, or an AI service. Anyone using the same browser profile may be able to read a saved draft. You can remove it from the worksheet or clear this site’s data in your browser. Notes you download and copies you print remain under your control. The contact details used to request resource access are handled separately as described in this policy.

The application does not currently add advertising trackers, third-party analytics, or a marketing cookie system. Hosting and identity services may use cookies or similar mechanisms for authentication, security, and access controls. You can manage cookies through your browser, although blocking required cookies may affect protected areas.

First-party analytics records page paths, referring domains, campaign labels from utm_source, utm_medium and utm_campaign, work-link clicks, subscription attempts and article reading depth. A random visit ID and landing information are kept in this browser tab’s session storage and reset after 30 minutes of inactivity. This is not a cross-device identifier. Temporary event receipts prevent duplicate counting for 48 hours. Daily totals are retained for up to 400 days. Expired server records are removed as new activity arrives. Full referral URLs, unrelated query parameters, worksheet answers and original IP addresses are not stored in analytics records.

When a form is saved, a request receipt and available landing and campaign information are saved with the private contact record so we can understand which sources lead to inquiries and client work. These records follow the contact retention policy. Do not place personal or confidential information in campaign labels. Do Not Track and Global Privacy Control disable visit measurement and campaign capture. Requested form records are still saved, with no campaign attribution. Signed-in owner activity and recognized bots are excluded from traffic reporting. No advertising pixels or third-party analytics service receive this data.

External links, downloads hosted elsewhere, and any optional booking service have their own privacy practices. Following those links may share technical request information with the destination. Review its notice before submitting information there.

AI and client information

The current public contact and subscription forms do not automatically send their contents to an AI model. AI-related articles, demonstrations, and illustrations do not mean your form submission is being used to train a model.

The owner can use an editorial assistant powered by the OpenAI API. It receives the owner's writing brief, source notes, saved brand guidance, documented public portfolio context, and an approved character reference for artwork. Generated drafts, briefs, and images are stored for owner review. Contact profiles and form submissions are not automatically included in these requests. Publication remains a separate owner decision.

If an agreed project involves AI services, the permitted data, providers, retention, and responsibility for reviewing outputs must be addressed for that project. Do not submit sensitive or third-party confidential material through the public site on the assumption that an AI processing agreement is already in place.

Storage, retention, and security

Inquiry and subscription records currently rely on manual deletion rather than a fixed automatic deletion schedule. Information should be kept only while needed for the inquiry, requested subscription, a relevant business relationship, legal requirements, or resolving disputes. You can request deletion through the contact form. Limited records of consent and unsubscribe status may need to remain to honor your preferences or legal obligations.

Rate-limit records are marked to expire after two hours and are removed during subsequent form processing. Hosting logs and backups may follow the provider’s own retention processes. Removing an active record does not necessarily remove every backup immediately.

The site restricts access to stored form records and uses validation and rate limits to reduce abuse. No website, transmission method, or storage system can promise absolute security. If a security incident requires notice under applicable law, affected people will be notified as required.

Your choices and requests

You may ask to access, correct, or delete your information using the contact form. Say that it is a privacy request and provide the email address associated with the record. Reasonable verification may be needed before a record is disclosed or changed. Do not send identity documents unless a suitable verification method has been agreed.

You can withdraw newsletter consent at any time. Use the unsubscribe link supplied with an email when delivery begins, or request removal through the contact form now. Unsubscribing stops marketing; it does not erase an existing inquiry or necessarily prevent communications needed for an agreed project. Suppression records help avoid subscribing you again by mistake.

Depending on your location and which laws apply, you may also have rights to portability, restriction, objection, an appeal, or a complaint to a data protection authority. Requests will be handled under applicable requirements, including any deadlines and permitted exceptions. This policy does not limit rights the law gives you.

Children

This site is intended for a general professional audience and is not directed to children under 13. We do not knowingly solicit personal information from children under 13. If you believe a child has supplied information, contact us so it can be reviewed and removed where appropriate.

Changes and contact

This policy will change as the site and its services change. The date above identifies the current version. Material changes will be explained through an appropriate notice, and additional consent will be requested when required. A revised policy does not by itself authorize a new use of information collected under earlier promises.

For a privacy question or request, contact Dan. Please describe the request without including unnecessary sensitive information.