Privacy Policy
Effective date: November 7, 2026
1. Who we are
This website is operated by Ekaterina Khirkovskaya, an individual and sole proprietor based in North Carolina, United States, who does business as Norelden (“Norelden”, “we”, “us”) and provides business operations consulting. Ekaterina Khirkovskaya is responsible for your personal information.
This policy explains what personal information we collect through our website, https://norelden.com, and through our discovery call form, how we use it, and the choices you have. It does not cover information we handle while delivering services to clients; that is covered in each client agreement.
Questions about this policy: khirkovskaya@gmail.com.
2. Information we collect
We collect only what you choose to send us, plus limited technical data needed to run and protect the website. We do not ask for sensitive information such as health, financial account or government ID details. Please don’t include it in free-text answers.
Information you give us through the discovery call form
| What | Examples |
|---|---|
| Contact details | First and last name, email address, phone number, location |
| Business details | Company name, company website, team size and roles, average monthly revenue range |
| Your needs | The challenges you select or describe (for example systems, team communication, project leadership) |
| How you found us | Referral, search engine, social media, Certified OBM Directory or other, and the name of the person who referred you, if you give it |
If you refer someone or name a referrer, we receive that person’s name from you. We use it only to thank them.
Information you give us by email or on a call
If you email us or join a discovery call, we receive your messages, your contact details and anything you choose to share about your business.
Call recordings, transcripts and AI notes
We record our video calls, including discovery calls and consultations, in Zoom or Google Meet. We also use Zoom’s built-in AI feature (Zoom AI Companion) to transcribe Zoom calls and summarize them. Recordings, transcripts and notes can include your name, voice, image and anything said or shown during the call. We tell you at the start of each call that it is being recorded. If you prefer that we not record or not use AI notes, tell us before or at the start of the call.
Information collected automatically
- Website analytics: we use Cloudflare Web Analytics to count visits. It records pages viewed, the referring website, browser and device type, and approximate country. It does not use cookies, does not track you across other websites and does not build a profile of you.
- Server and security data: when you visit the site, our host Cloudflare processes your IP address, browser details and the time of your request to deliver pages and to block malicious traffic.
The site does not use advertising, social media pixels or Google Analytics. Our fonts are hosted on our own server, so loading a page does not contact Google or other font services.
3. How we use your information
We use your information only to respond to you, to decide together whether we’re a good fit, and to run the website. We never sell it or use it for advertising.
| Purpose | Information used | Legal basis (EU/UK visitors) |
|---|---|---|
| Reply to your inquiry and schedule a discovery call | Form answers, emails | Steps you ask for before a contract; our legitimate interest in responding |
| Prepare for the call and assess fit | Business details, your needs | Legitimate interest |
| Send a proposal or start an engagement | Contact and business details | Steps before a contract; contract |
| Thank the person who referred you | Referrer’s name | Legitimate interest |
| Understand which pages are useful | Cloudflare Web Analytics data | Legitimate interest |
| Keep the website secure and working | Server and security data | Legitimate interest |
| Meet legal, tax and accounting duties | Records needed by law | Legal obligation |
We record and transcribe calls, and keep notes, so we can follow up accurately; for EU and UK visitors, we rely on your consent and our legitimate interest in doing so. We will only send you newsletters or marketing emails if you separately agree to them, and you can unsubscribe at any time.
4. Who we share it with
We do not sell or rent your personal information, and we do not share it for advertising. We share it only with the service providers below, which process it on our behalf to run the business.
| Provider | What they do for us | Their privacy policy |
|---|---|---|
| Google (Google Forms, Google Workspace / Gmail, Google Calendar, Google Meet, reCAPTCHA) | Host the discovery call form, store responses, deliver email, schedule calls, host and record video calls when we use Google Meet, and check that form submissions come from people, not bots | Google Privacy Policy |
| Cloudflare | Host the website, protect it from attacks, and provide Web Analytics | Cloudflare Privacy Policy |
| Zoom | Host, record, transcribe and summarize video consultations and discovery calls | Zoom Privacy Statement |
AI note-taking. We use Zoom’s built-in AI feature to transcribe and summarize calls. To produce these notes, Zoom may process call content with its own AI models and with models from its third-party AI providers. Zoom states that it does not use customers’ audio, video or chat content to train its own or third-party AI models. We use the notes only for our own work with you, and we do not use your recordings, transcripts or notes to train AI models. If we start using another AI tool, we will add it to the table above and update this policy.
We may also disclose information if required by law, to protect our rights or safety, or as part of a sale or transfer of the business, in which case this policy would continue to apply.
Links to other websites. Our site links to Instagram, LinkedIn and the Google Form. When you follow those links, the other service’s own privacy policy applies.
5. Cookies
Our website does not set cookies for tracking, analytics or advertising, so there is no cookie banner. Cloudflare Web Analytics works without cookies.
Cloudflare may set a strictly necessary security cookie to tell people apart from bots and block attacks. It holds no information that identifies you and is not used for tracking.
The discovery call form runs on Google’s website, not ours. Google Forms and reCAPTCHA use their own cookies there, as described in Google’s cookie policy.
6. How long we keep it, how we protect it, and where it is stored
Retention. We keep information only as long as we need it:
- Inquiries that don’t lead to working together: up to 24 months after our last contact, then deleted.
- Clients: for the length of the engagement, plus as long as tax and accounting laws require us to keep records.
- Website analytics and security data: kept by Cloudflare for a limited period under its own retention rules; we only see totals.
Call recordings, transcripts and AI notes are kept for the same periods as the records they relate to. You can ask us to delete your information sooner (see section 7).
Security. Form responses and emails are stored in password-protected Google accounts with two-step verification, and only Norelden can access them. The website is served only over encrypted HTTPS. No method of storage or transmission is completely secure, but we take reasonable steps to protect your information.
International transfers. Google, Cloudflare and Zoom may store and process data in the United States and other countries. If you are in the EU, UK or Switzerland, these transfers are protected by the providers’ Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
7. Your rights and choices
You can ask us at any time to:
- Access the personal information we hold about you and get a copy
- Correct information that is wrong or incomplete
- Delete your information
- Restrict or object to how we use it, including for any marketing
- Port it, receiving it in a common format to give to someone else
- Withdraw consent, where we rely on it, without affecting earlier use
To make a request, email khirkovskaya@gmail.com. We will reply within 30 days and may need to confirm your identity first. We won’t treat you differently for using these rights.
EU and UK visitors can also complain to their local data protection authority; for the UK, that is the Information Commissioner’s Office.
US residents. Depending on your state (for example California, Colorado, Virginia or Texas), you may have the rights above under state privacy laws. We do not sell or share personal information for targeted advertising, and we do not use it for automated decisions with legal effects.
Children. Our services are for businesses. The website is not aimed at children under 16, and we do not knowingly collect their information. If you believe a child has sent us information, contact us and we will delete it.
8. Changes to this policy and how to contact us
We may update this policy when our services or tools change. The effective date at the top shows when it was last revised; for significant changes, we will also note them on the website.
Contact
Ekaterina Khirkovskaya, doing business as Norelden
Email: khirkovskaya@gmail.com
Website: https://norelden.com