Last updated: October 22, 2026
This privacy policy applies to mtbonnell.com. It explains what personal data we process when you visit the site, write to us, book an appointment, read our newsletter or order something from us, what we use it for and which service providers are involved.
Who is responsible
The controller is Mount Bonnell & Company LLC (Mount Bonnell Advisors), 8000 Centre Park Drive, Suite 130, Austin TX 78754, United States. You can reach us by email at www.mtbonnell.com/contact and by phone at +1 512 647 1128.
When you visit the site
- Server logs: Every time a page loads, our hosting provider Vercel processes technically necessary data such as your IP address, the date and time, the page requested and details about your browser. Without this data the site cannot be delivered or protected against attacks. The legal basis is Art. 6(1)(f) GDPR.
- Audience measurement: We count visits with Plausible. Plausible works without cookies and is hosted in the EU; we only see aggregated figures such as page views and where visits come from, never individual people. The legal basis is Art. 6(1)(f) GDPR.
- Fonts: We load this site's fonts from Google's servers (Google Fonts). In doing so, Google learns your IP address. The legal basis is Art. 6(1)(f) GDPR, our interest in a consistent presentation.
- No cookies: This site sets no cookies. In your browser's local storage we only remember which message was last shown in the banner at the top, so you see a different one next time. You can delete this entry in your browser at any time.
Videos and maps
- YouTube: We embed YouTube videos exclusively via youtube-nocookie.com, YouTube's privacy-enhanced mode. According to Google, playback in this mode is not used to personalize YouTube or advertising. In our video tiles we first show only a preview image from our own server; your browser connects to YouTube only once you click play. On four pages a video is embedded directly; there your browser connects to youtube-nocookie.com as soon as the page loads, and Google learns, among other things, your IP address and the page you visited. The provider is Google Ireland Limited, Ireland. The legal basis is Art. 6(1)(f) GDPR.
- Our own videos: The videos on our consultation pages are served from our own hosting; no other provider is involved.
- Maps: On some pages we show maps from OpenStreetMap. Your browser loads the map tiles from the servers of the OpenStreetMap Foundation, which receives your IP address and the tiles requested. The legal basis is Art. 6(1)(f) GDPR.
When you write to us
If you write to us through a form on this site, we process your name, your email address, your phone number if you provide it, and your message. We store the inquiry in our client system and in our contact list at Mailchimp and notify our office by email, sent via Resend. We use the data to answer your inquiry and advise you. The legal basis is Art. 6(1)(b) GDPR where your inquiry is aimed at an engagement, otherwise Art. 6(1)(f) GDPR. If you email us directly or call us, the same applies to the information you give us.
Links on this site for sharing on social networks are simple links. Only when you click them do you leave our site, and the provider's own terms then apply.
When you book a consultation
You book consultations through YouCanBookMe, provided by AI Software (Capacity) UK Ltd, England. What you enter there, such as your name, email address, preferred time and topic, is processed by YouCanBookMe on our behalf so the appointment can be arranged. The legal basis is Art. 6(1)(b) GDPR.
Our newsletter
If you subscribe to our newsletter, we store your name, your email address and the topics you're interested in at Mailchimp and send you the newsletter. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time, most easily via the unsubscribe link in every issue.
When you order something
If you order a service, we process your name, your email address, your country, your phone number if you provide it, the service and payment method you chose, and the details we need for the engagement, for example your company's name and tax number. We store the order in our client system and send you the confirmation by email via Resend. The legal basis is Art. 6(1)(b) GDPR, and for keeping accounting records Art. 6(1)(c) GDPR.
- Card payment: If you pay by card, you enter your card details directly with Stripe; we never receive them. Stripe processes your payment and contact details to handle the payment and prevent fraud, and tells us whether the payment has arrived.
- Bank transfer: If you choose bank transfer, we email you our bank details. With your payment, our bank receives your name, your account details and the payment reference.
- Cryptocurrency: If you pay in cryptocurrency, we give you our wallet address. Blockchain transactions are publicly visible and cannot be deleted.
- Template library: The library at mtbonnell.com/vorlagen is provided technically via zerotax.llc. To sign in, we email you a code and store your email address for that purpose.
Service providers
These service providers process personal data on our behalf and only for the stated purpose. You'll find more about their processing in their privacy notices.
- Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA: hosting of this site. Vercel privacy notice
- Plausible Insights OÜ, Tartu, Estonia: cookie-free audience measurement. Plausible privacy notice
- Google Ireland Limited, Ireland: fonts (Google Fonts) and YouTube videos. Google privacy notice
- OpenStreetMap Foundation: map tiles. OpenStreetMap Foundation privacy notice
- The Rocket Science Group LLC d/b/a Mailchimp, an Intuit Inc. company, USA: contact list and newsletter. Mailchimp privacy notice
- Plus Five Five, Inc. (Resend), USA: sends our emails. Resend privacy notice
- Stripe: card payments. Stripe privacy notice
- AI Software (Capacity) UK Ltd (YouCanBookMe), England: appointment booking. YouCanBookMe privacy notice
Data outside the EU
We are a firm based in the USA, so your data is processed in the USA, and several of our service providers are located outside the EU. When we transfer personal data to countries outside Europe, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent agreements from the competent UK authority, unless an adequacy decision exists for the country.
How long we keep data
We keep personal data for as long as we need it for your inquiry, your engagement or our advice, and beyond that where statutory retention obligations require it or we need it to establish or defend legal claims.
Security
The connection to this site is encrypted. Still, no protection is perfect, and we cannot guarantee absolute security. So please don't send us especially confidential documents over unencrypted channels; ask us for a secure way instead.
Children
Our services are not directed at children, and we do not knowingly collect personal data from children. If a child has sent us data, a parent or guardian can request its deletion using the contact details below.
Your rights
Depending on where you live, you have some or all of the following rights. These rights are not absolute, and in certain cases we may decline a request to the extent the law allows.
- Access: You can find out what personal data we hold about you and how we use and share it.
- Correction: You can ask us to correct inaccurate data.
- Deletion: You can ask us to delete your data.
- Restriction: You can ask us to restrict the processing of your data.
- Data portability: You can request a copy of your data and, in certain circumstances, ask us to transfer it to a third party.
- Objection: Where we process your data based on our legitimate interest, you can object to the processing.
- Withdrawing consent: You can withdraw consent, for example for the newsletter, at any time with effect for the future.
For any of these rights, a message to us using the contact details below is all it takes. Before we respond, we may need to verify your identity, for example via your email address. You can also appoint an agent; in that case we need proof of their authority. We respond as quickly as applicable law requires and will not treat you unfavorably for exercising your rights.
Complaints
If you have a complaint about how we process your personal data, please write to us first using the contact details below. If you're not satisfied with our response, you can contact your data protection authority, depending on where you live. A list of supervisory authorities in the EEA is available from the European Data Protection Board.
Changes
We update this privacy policy when our site, our service providers or the legal requirements change. The version published here, with the date at the top, always applies.
Contact
If you have questions about privacy or want to exercise any of your rights, call us at +1 512 647 1128, email us at www.mtbonnell.com/contact or write to Mount Bonnell & Company LLC, 8000 Centre Park Drive, Suite 130, Austin TX 78754, United States.