Privacy Policy

Flamed Fox Consulting — effective October 2, 2026, updated October 23, 2026

Flamed Fox Consulting ("we", "us"), operated by Kris Kassem, respects your privacy. This policy explains what personal information we collect through flamedfox.com and flamedfox.online (the "Sites"), our contact and booking forms, our newsletters (The Program Recovery and FrontierSix on Substack), our communities (Telegram, Discord), and our advertising activities — and how we use, store, and protect it.

1. Who we are

Data controller: Kris Kassem, Flamed Fox Consulting, Canada. Contact for all privacy matters: kris@flamedfox.online.

2. What we collect

• Information you give us: name, email address, phone number, company/role, and message content when you submit a contact or booking form, download a field guide, subscribe to a newsletter, join our Telegram or Discord communities, or correspond with us.
• Information collected automatically: IP address, browser type, pages visited, and referral source, collected via Google Analytics 4 and similar analytics tools.
• Advertising data: if you reach us through Google Ads or LinkedIn Ads, those platforms provide us with campaign interaction data (e.g., that a click or lead form submission came from a campaign) under their own privacy policies. We may use remarketing cookies and similar audiences; you can opt out via Google Ads Settings.
• Google user data: where you explicitly authorize it (for example, to let our internal tools manage our own Google Ads accounts), we access Google account data solely to provide the service you requested. We do not sell Google user data, do not use it for advertising, and do not share it with third parties except as needed to operate the service or as required by law. This use matches the disclosure on the OAuth consent screen.
• LinkedIn company page data: to publish and manage content on our own LinkedIn company page ("Flamedfox online"), we use the LinkedIn API with an access token held by Flamed Fox Consulting. The integration writes posts to that page and reads that page's own post and engagement metrics. We do not request, store or process LinkedIn member data, and we do not publish on behalf of any third party.

3. How we use it

• To respond to inquiries, deliver booked services, and provide deliverables you requested.
• To deliver lead-magnet documents and newsletters you subscribed to (via Substack, which acts as our email processor).
• To measure site performance and advertising effectiveness (aggregate analytics).
• To comply with legal, accounting, and tax obligations.
• To publish and manage content on our own LinkedIn company page ("Flamedfox online"), and to report on that page's engagement, using the LinkedIn API described in section 2.

We do not sell your personal information. We do not use your information for automated decision-making that produces legal effects.

4. Sharing and processors

We share personal information only with processors necessary to run the business: Substack (newsletter delivery), Google Analytics 4 / Google Ads (analytics and advertising), Hostinger (site hosting), calendaring/booking providers used for call scheduling, and payment processors where applicable. Each processes data under its own privacy policy and our instructions.

5. Retention

We keep contact information for as long as needed to provide services and meet legal obligations (typically up to 7 years for client records under Canadian tax rules). Newsletter subscriptions are retained until you unsubscribe; every email contains an unsubscribe link.

6. Your rights (Canada — PIPEDA, and other jurisdictions)

You may request access to, correction of, or deletion of your personal information, or withdraw consent at any time, by emailing kris@flamedfox.online. We respond within 30 days. If you are in the EEA/UK, you have equivalent rights under GDPR and may lodge a complaint with your supervisory authority.

7. Marketing consent (CASL)

We send commercial electronic messages (newsletters, field notes, offers) only with express or implied consent as permitted by Canada's Anti-Spam Legislation. Every message identifies us and includes a working unsubscribe mechanism. Consent withdrawal is processed promptly.

8. Security

We use industry-standard measures: encrypted transport (HTTPS), access controls on stored data, and credential separation for automated systems. No method of transmission is 100% secure; we protect data to the standard of a reasonably prudent Canadian business.

9. Cookies

The Sites use essential cookies and analytics/advertising cookies. You can control cookies through your browser settings and the ad-personalization link in section 2.

10. Changes

We will post any changes on this page with a revised effective date. Material changes affecting how we use previously collected information will be announced to newsletter subscribers.

Questions: kris@flamedfox.online · Flamed Fox Consulting, Canada