Legal
Privacy Policy
Donald Ray Small, Jr. operating as a Sole Proprietor, under the trade name Donald Small Consulting, is the data controller for personal data collected through this website. Services are rendered directly by Donald Ray Small, Jr., and every client contract is a direct consulting service agreement with him. The practice is not an LLC or corporation. This policy explains what I collect, why, and the rights you have under the GDPR and CCPA/CPRA.
Last updated: September 4, 2026
1. Data we collect
You give us: name, business name, email address, phone number and the contents of enquiry or checkout forms, plus any workflow information you share during an engagement.
Collected automatically: IP address, browser and device type, pages viewed and referring URL, used for security and aggregate analytics.
Payment data: card and PayPal account details are collected and processed directly by PayPal. We never receive or store full card numbers; we retain only the transaction ID, amount, currency and status.
2. Why we use it and our legal bases
To deliver purchased services and schedule sessions (performance of a contract); to answer enquiries and provide support (legitimate interests); to process payments and keep tax and accounting records (contract and legal obligation); to secure the site and prevent fraud (legitimate interests); to send occasional service updates (consent, withdrawable at any time).
3. Sharing
We share data only with processors who help us operate: PayPal (payments), our email and scheduling providers, video conferencing providers (Zoom, Google Meet), cloud hosting and document storage, and our accountants. We do not sell or share personal information for cross-context behavioural advertising, and we have not done so in the preceding twelve months. Data may be transferred outside the EEA/UK under Standard Contractual Clauses.
4. Retention
Enquiry records are kept for 24 months. Client engagement records and deliverables are kept for 3 years after the engagement ends. Payment and invoicing records are kept for 7 years to meet tax requirements. After these periods data is deleted or irreversibly anonymised.
5. Your rights
GDPR (EEA/UK): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may also complain to your local supervisory authority.
CCPA/CPRA (California): the right to know, delete, correct, opt out of sale or sharing (we do neither), limit use of sensitive personal information, and to be free from discrimination for exercising these rights. Authorised agents may submit requests on your behalf.
Email contact@donaldsmallconsulting.online to exercise any right. We verify requests and respond within 30 days (45 days for CCPA requests, extendable once where permitted).
6. Cookies
We use strictly necessary cookies for site function and security, and PayPal sets cookies required to complete checkout. Any analytics cookies are set only with your consent and can be withdrawn by clearing cookies in your browser.
7. Security and children
We use encryption in transit, access controls and least-privilege practices to protect data. No method is perfectly secure. Our services are for businesses; we do not knowingly collect data from anyone under 16.
8. Contact
Privacy enquiries: contact@donaldsmallconsulting.online · 3035 Belleville Rd, Orangeburg, SC 29118, USA. Support hours: Monday – Friday, 9:00 AM – 5:00 PM EST.