Privacy Policy

KoiShark Consulting

Effective date: August 29, 2026 Last updated: August 29, 2026

1. Who we are

KoiShark Consulting is the trade name of Anthony Michael Merra, a sole proprietor in New Hampshire, United States. In this policy, "we", "us", and "our" mean KoiShark Consulting.

We are responsible for the personal information described in this policy.

Email: contact@koishark.com

This policy applies to www.koishark.com and to the services we supply through the website. It does not apply to data that we process for our clients inside their own HubSpot portals. For that data, the client is responsible, and we act only on the client's instructions.

Our Terms of Service describe how we handle client data during an engagement.

2. Person accountable for privacy

Anthony Michael Merra is the person accountable for our privacy practices and for this policy. To contact him, write to contact@koishark.com with "Privacy" in the subject line.

3. Information we collect

Information That You Give Us

  • Your name, email address, company name, phone number, and the content of your message, when you use a contact form.

  • Your name, email address, and meeting details, when you book a call.

  • Your name, email address, and billing details, if you become a client.

  • Any information that you send to us by email.

Information That We Collect Automatically

  • Your IP address, browser type, device type, operating system, and language.

  • The pages that you open, the date and time of each visit, and the website that sent you to us.

  • Cookie identifiers and similar identifiers. Refer to section 7.

Information From Other Sources

  • Public business information, for example a company website or a public professional profile.

  • Referral information, when a client or a partner introduces you to us.

Sensitive Personal Information

We do not collect sensitive personal information. This includes health data, racial or ethnic origin, religious belief, political opinion, sexual orientation, genetic data, and biometric data. Do not send this data to us.

Payment Information

We do not receive or keep full payment card numbers. Stripe collects and processes payment data directly.

4. Why we use your information

Necessary Purposes

We must use your information for these purposes to give you the service that you ask for:

  • To answer your questions and to reply to your messages.

  • To schedule, prepare for, and hold meetings.

  • To supply our consulting services and to manage the project.

  • To send invoices and to receive payment.

  • To keep accounting, tax, and contract records.

  • To keep the website safe and to prevent misuse.

  • To obey the law.

Optional Purposes

You can refuse these purposes, and you will still receive the full service:

  • To send marketing emails, newsletters, and information about our services.

  • To measure how visitors use the website, so that we can make it better.

To refuse an optional purpose, write to contact@koishark.com. To stop marketing emails, you can also click the unsubscribe link in any marketing email that we send. To refuse tracking cookies, use the cookie banner on this website.

5. How we share your information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not trade or rent your personal information.

We give your information to these service providers, and only to the extent that they need it:

Service provider Purpose Squarespace Website hosting, contact forms, and website analytics HubSpot Contact records, marketing email, meeting scheduling, and website analytics Google Business email and calendar Stripe Payment processing and invoicing

We can also give your information to:

  • A professional adviser, for example an accountant or a lawyer.

  • A government body or a court, if the law makes this necessary.

  • A buyer of the business, if we sell or transfer the business.

Each service provider must protect your information and must use it only for the purpose that we specify. We tell each provider about the purposes to which you agreed.

6. International transfer and storage

We operate from the United States. Our service providers store and process data in the United States and in other countries. Therefore, if you are in Canada or in Mexico, your personal information goes to the United States and to other countries. The privacy laws of those countries can be different from the laws of your country. A court or a government body in those countries can request access to the data under the law of that country.

If you do not agree to this transfer, do not send personal information through this website. Contact us by email or by telephone instead.

7. Cookies and tracking technologies

A cookie is a small file that a website puts on your device. We use three categories of cookie:

Necessary Cookies

These cookies make the website operate. They keep your session, protect the forms, and remember your cookie choice. The website cannot operate correctly without them, so you cannot switch them off.

Analytics Cookies

These cookies count visits and show which pages are popular. They help us make the website better.

Advertising Cookies

These cookies can identify your device across websites. They let us measure our campaigns.

Analytics cookies and advertising cookies are optional.

How to Refuse or Delete Cookies

  • Use the cookie banner on this website. You can decline all optional cookies with one click, or you can open the cookie settings and choose each category separately.

  • Change the settings in your browser to block cookies or to delete cookies. Refer to the help pages of your browser.

  • Deleting the cookies in your browser also deletes your saved choice. The banner will then show again.

Global Privacy Control and Do Not Track

We obey the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we do not put optional cookies on your device, and we treat the signal as a request to stop the sale or the sharing of your personal information. Browsers send the older "Do Not Track" signal in different ways, and there is no common standard for it. Therefore we do not react to the Do Not Track signal.

8. Your rights

All Visitors

You can ask us to:

  • Confirm what personal information we hold about you.

  • Give you a copy of that information.

  • Correct information that is wrong or incomplete.

  • Delete your information.

  • Stop or limit the use of your information.

  • Stop marketing messages.

If You Are in Mexico

The Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) gives you the ARCO rights: access, rectification, cancellation, and opposition. You can also withdraw your consent, and you can limit the use or the disclosure of your data.

To make an ARCO request, send an email to contact@koishark.com with:

  • Your name and an email address for our reply.

  • A document that proves your identity, or a document that proves that you represent the data subject.

  • A clear description of the data and of the right that you want to use.

  • Any document that helps us find the data.

We will answer in 20 working days. If we agree to the request, we will complete it in 15 working days.

If you do not agree with our answer, you can make a complaint to the Secretaría Anticorrupción y Buen Gobierno, which is the authority for personal data protection in Mexico.

If You Are in Canada

The Personal Information Protection and Electronic Documents Act (PIPEDA), and the equivalent provincial laws, give you the right to access your personal information and to correct it. You can also withdraw your consent at any time, but this can prevent us from supplying a service to you.

If you are not satisfied with our answer, you can make a complaint to the Office of the Privacy Commissioner of Canada. If you are in Quebec, Alberta, or British Columbia, you can make a complaint to the provincial authority.

If You Are in The United States

The privacy laws of some states, for example California, Colorado, Connecticut, Texas, and Virginia, give you these rights:

  • To know what personal information we collect, use, and disclose.

  • To get a copy of your personal information.

  • To correct wrong personal information.

  • To delete your personal information.

  • To refuse the sale or the sharing of your personal information, and to refuse targeted advertising. We do not do these things.

  • To receive equal service and equal prices when you use your rights. We will not discriminate against you.

An authorized agent can make a request for you. We will ask the agent for proof of the authorization.

How to Make a Request

Send an email to contact@koishark.com. We can ask you for information to confirm your identity. We do not use this information for another purpose. We answer within the time limit that the applicable law specifies. If we refuse a request, we tell you why, and we tell you how to appeal.

9. How long we keep your information

Messages From the Contact Form and From Email

3 years after the last contact, if you do not become a client.

Client Records, Contracts, and Project Files

7 years after the end of the engagement.

Invoices and Accounting Records

7 years, or longer if tax law makes this necessary.

Marketing Contacts

Until you unsubscribe, and then a minimum record to make sure that we do not contact you again.

Website Log Data

A maximum of 26 months. After these periods, we delete the information or we make it anonymous.

10. How we protect your information

We use these measures:

  • Encryption of the website with HTTPS.

  • Multi-factor authentication on our accounts.

  • A password manager with strong, unique passwords.

  • Access limited to the persons who need it.

  • Reputable service providers with their own security controls.

No method of transmission or storage is fully secure. Therefore we cannot guarantee absolute security. If a data breach creates a real risk of significant harm, we will tell you and the applicable authority, as the law requires.

11. Marketing email

We send marketing email only to persons who agree to receive it, or where the law permits it because of an existing business relationship. Every marketing email identifies us and contains a clear method to unsubscribe. We action an unsubscribe request in 10 working days or less. This complies with Canada's Anti-Spam Legislation (CASL) and with the United States CAN-SPAM Act.

Your cookie choice and your email choice are separate. If you accept cookies, this does not sign you up for our marketing email.

12. Children

Our website and our services are for business users. They are not for children. We do not knowingly collect personal information from a person less than 13 years old. If you think that a child gave us personal information, write to contact@koishark.com, and we will delete it.

13. Links to other websites

Our website contains links to other websites, for example the HubSpot Solutions Directory. We are not responsible for the privacy practices of those websites. Read their privacy policies.

14. Changes to this policy

We can change this policy. We put the new version on this page and we change the "Last updated" date. If the change is significant, we will tell you by email or with a notice on the website. If a change adds a new purpose for data that we already hold, we will ask for your consent again where the law makes this necessary.

15. How to contact us

Email: contact@koishark.com

Write "Privacy" in the subject line. We answer every privacy request.