Privacy Policy

1. Who we are

Birch & Elm Consulting LLC (“Birch & Elm”, “we”, “us”) is an operations consulting firm registered in Ohio, United States, with its office at 2726 Little Street, Youngstown, OH 44505. We operate the website at https://drjimmieflores.com and are the controller of personal information collected through it. Our principal is Steve Lee, who is also the contact point for any privacy question.

We wrote this notice to be read, not to be scrolled past. If anything in it is unclear, email feedback@drjimmieflores.com and we will explain it in plain terms.

2. Information we collect

Information you give us

When you complete the enquiry form, call the office or email us, we receive the details you choose to provide: your name, company, email address, telephone number, the service you are interested in, your approximate headcount and whatever you write in the message field. Our website enquiry form does not store data on this site — it opens your own email application and hands the message to your email provider.

Information collected automatically

Our hosting provider records standard server logs for security and reliability: IP address, date and time of request, page requested, referring page, browser and operating system identifiers. If you consent to analytics cookies, we may also receive aggregated statistics about which pages are visited and for how long.

Information we do not collect

We do not knowingly collect information from children under 13. We do not collect payment card details through this website. We do not buy contact lists, and we do not use hidden tracking pixels or social media tracking scripts.

3. How we use information

Purpose	Information used	Legal basis / justification
Responding to your enquiry	Name, company, contact details, message	Steps taken at your request prior to a contract
Delivering consulting services	Contact and engagement details	Performance of a contract
Sending our monthly note, if requested	Name and email address	Your consent, withdrawable at any time
Website security and fraud prevention	Server log data	Our legitimate interest in a secure website
Improving the website	Aggregated analytics, only with consent	Your consent
Meeting legal, tax and accounting duties	Engagement and billing records	Legal obligation

We do not sell, rent or trade personal information, and we do not share it for cross-context behavioural advertising. We do not make automated decisions that produce legal or similarly significant effects.

4. When we share information

We disclose personal information only in the following circumstances:

• Service providers. Our website host, email provider and accounting software vendor process data on our behalf under contract, and may not use it for their own purposes.
• Professional advisors. Our attorney and accountant, where genuinely necessary.
• Legal requirement. Where compelled by valid legal process, or to protect the rights, property or safety of Birch & Elm, our clients or the public.
• Business transfer. If the firm is ever sold or merged, records may transfer to the successor, who would remain bound by this notice.

Client engagement material is additionally protected by the confidentiality terms of the relevant consulting agreement, which are stricter than this notice.

5. How long we keep it

Enquiries that do not become engagements are deleted within 24 months. Engagement records are retained for seven years after the final invoice, in line with our accounting and professional obligations. Server logs are retained for up to 90 days. Newsletter subscriptions are kept until you unsubscribe.

6. Your choices and rights

Wherever you live, you may ask us to: confirm what personal information we hold about you; provide a copy of it; correct it if it is wrong; delete it where we have no continuing legal or contractual need; stop sending you our monthly note; or restrict certain processing. Email feedback@drjimmieflores.com and we will respond within 30 days. We will never charge you for making a request, nor treat you differently for making one.

Ohio and other United States residents

Residents of states with comprehensive privacy statutes have specific rights of access, correction, deletion, portability and opt-out of sale or targeted advertising. We do not sell personal information or engage in targeted advertising, so no opt-out is necessary — but the access, correction and deletion rights above are available to everyone who asks, regardless of state of residence.

Visitors from the European Economic Area and the United Kingdom

Where GDPR or UK GDPR applies, you additionally have the right to object to processing based on legitimate interests, the right to data portability, and the right to lodge a complaint with your national supervisory authority. Information you send us is processed in the United States; we rely on your explicit consent and on standard contractual protections with our processors.

7. Security

The site is served exclusively over HTTPS. Access to enquiry email and client records is limited to the consultants who need it, protected by strong passwords and multi-factor authentication, and reviewed annually. No transmission over the internet is perfectly secure; if a breach affecting your information occurred, we would notify you and any required authority without undue delay.

8. Cookies

Our use of cookies and similar technologies, and how to change your choice, is described in full in the Cookie Policy. You can reopen the consent banner at any time using the “Cookie settings” link in the footer.

9. Third-party links

This site may link to other organisations — a chamber of commerce, a supplier, a client. Once you follow such a link you are on their site and their privacy notice governs. We are not responsible for the content or practices of external sites.

10. Changes to this notice

We review this notice annually and whenever our practices change. The date at the top always reflects the current version. Material changes will be flagged on the homepage for at least 30 days.

11. How to reach us

Write to Birch & Elm Consulting LLC, 2726 Little Street, Youngstown, OH 44505, or email feedback@drjimmieflores.com, or call 330-539-1058 during office hours. Please mark privacy correspondence for the attention of Steve Lee.