Privacy Policy

Overview

This Privacy Policy explains how personal data is processed when you use this website, submit a Decision Breakdown, submit a Decision Audit request, contact Marko by email, or follow links to external platforms.

Website hosting through Vercel

This website is hosted through Vercel. Delivering the website to your browser necessarily involves some technical processing of your request, such as:

• your IP address
• the date and time of the request
• the page requested
• browser, device, or system information
• request and error information needed to deliver and secure the website

This processing serves website delivery, stability, security, abuse prevention, and technical troubleshooting. Where it is not covered by a contract, the legal basis for this processing is, provisionally, our legitimate interest under Article 6(1)(f) GDPR in operating a secure and reliable website.

Decision Breakdown submissions

If you submit a Decision Breakdown, the form collects your name, email, optional company, and the decision context you describe.

This information is used to review your submitted decision, prepare and deliver your private Decision Breakdown video, and respond to you.

Submissions are deleted 90 days after the private video has been delivered, unless continued retention is necessary for an ensuing client relationship or a legal obligation (see “Paid-client records” below).

Decision Audit requests

If you submit a Decision Audit request, the form collects your name, email, company, and the recurring-pattern context you describe.

This information is used to review whether a prepared Decision Audit is the appropriate next step, respond to your request, and — where appropriate — send you a private booking link manually.

If a request does not proceed to an Audit, it is deleted 90 days after the final response.

Inquiry and pre-contractual legal basis

Processing your Decision Breakdown or Decision Audit submission may be based on Article 6(1)(b) GDPR, where it is necessary to take steps you requested before entering into a contract, and on Article 6(1)(f) GDPR, for general business communication and evaluating requests where no contractual relationship is yet in view. The precise legal basis depends on the specific request and is subject to ongoing legal review. Marketing consent is not used as a legal basis for this processing.

Email delivery through Resend

Form submissions are transmitted through Resend, an email-delivery provider, solely to deliver them to Marko's business inbox. Your email address is used as the Reply-To address so Marko can respond to you directly.

No automated marketing email is sent to you as a result of a submission, and this website does not use a database to store form submissions itself. Because email delivery works this way, the data you submit necessarily passes through Resend's infrastructure as part of sending the message.

Business mailbox through Hostinger

Once delivered, submissions and any follow-up correspondence are stored in Marko's business email mailbox, which is operated through Hostinger, and are deleted in line with the retention periods described in this Policy.

International data transfers

Vercel and Resend are international providers, and processing described in this Policy may take place outside the European Economic Area. Where this occurs, the safeguards required under applicable data protection law are intended to be addressed through the relevant arrangements with each provider.

Paid-client records

If a request becomes a paid client engagement, relevant correspondence and business records may be retained for the duration of the relationship and afterward where required by contractual, accounting, tax or other statutory obligations.

Sensitive information

Please do not submit health information or other highly sensitive personal information through the Decision Breakdown or Decision Audit forms.

No analytics or advertising tracking

The current website does not intentionally use:

• website analytics
• advertising pixels
• behavioural profiling
• non-essential marketing cookies

This does not exclude the possibility that the underlying hosting infrastructure sets a strictly necessary technical cookie or similar marker outside our control.

External links

Podcast, social, and newsletter links on this website are plain outbound links. Displaying these links does not intentionally send any personal data to those providers. Once you choose to follow a link, the external provider's own privacy terms apply to your use of their platform.

Hero video through Mux

The sample Decision Breakdown on the homepage is shown poster-first. The still image you see before pressing Play is served locally by Decision Stability. No video stream, thumbnail, or storyboard is requested from the video provider (Mux) before you choose to play the video.

When you press Play, your browser connects to Mux to load and deliver the requested video. Normal technical connection data — such as your IP address and the requests needed to stream the file — may be processed by Mux to deliver the video to you. Mux's own privacy terms apply to that delivery.

The player is configured with Mux Data viewer analytics disabled and its associated cookies disabled. This reduces, but does not entirely eliminate, the technical data involved in streaming the video.

Substack publication

This website does not currently collect publication email addresses. The “Read Decision Load Unfiltered” link opens the external Substack publication page. Substack processes your data only after you follow that link, subject to Substack's own privacy terms.

Retention summary

• Decision Breakdown submissions: deleted 90 days after the private video is delivered.
• Unsuccessful Decision Audit requests: deleted 90 days after the final response.
• Paid-client records: retained for the duration of the engagement and afterward where required by contractual, accounting, tax, or other statutory obligations.
• Infrastructure and provider logs (Vercel, Resend, Hostinger): retained according to each provider's own necessary operational practices; exact periods have not been independently verified.

Data-subject rights

Subject to the conditions set out in applicable data protection law, you have the right to:

• access the personal data held about you
• request correction of inaccurate data
• request deletion of your data
• request restriction of processing
• object to processing based on legitimate interests
• request data portability, where applicable
• withdraw consent, where processing is actually based on consent

You also have the right to lodge a complaint with a competent data-protection supervisory authority.

To exercise any of these rights, contact marko@decisionstability.co. Some rights, such as deletion, may be limited where continued retention is required by a statutory obligation.

Security

Reasonable technical and organisational measures are used to protect the personal data described in this Policy. No method of transmission or storage can be guaranteed to be completely secure.

Changes

This Privacy Policy may be updated when the website, the providers used, or the underlying processing activities change. The version in effect is the one published on this page.