Privacy Policy

Who we are

This website is operated by Muller Advisory Group (MAG), the trading name of SM CONSULTING NYC. Certain corporate details are being finalised and are provided on request in the meantime. Contact info@mulleradvisorygroup.com for the current information. For any privacy question, write to info@mulleradvisorygroup.com.

Information we collect and where it comes from

We collect only information you provide directly through our inquiry and meeting-request forms, together with limited technical information generated automatically when you use the website.

• Identity and contact information: name, company, business email, business website, and any telephone number you choose to add.
• Commercial context: industry, home market, target market, current stage, target launch timing and the description of your project.
• Meeting requests: requested date, time and any details you include.
• Technical information: browser user agent and request metadata recorded with the submission for security and anti-abuse purposes, plus standard server logs kept by our hosting provider.
• Privacy choices: your recorded cookie and privacy preferences, stored in your browser.

Required and optional information

Fields marked as required are necessary for us to assess and answer your inquiry; without them we cannot respond. Every other field is optional and refusing it has no consequence other than a less precise first answer. Marketing consent is always optional and never a condition of contacting us.

Why we process it, and on what legal basis

• To answer your inquiry and assess a possible engagement — performance of pre-contractual steps at your request, and our legitimate interest in responding to business enquiries.
• To arrange and confirm requested meetings — pre-contractual steps at your request.
• To send commercial updates, only where you have separately opted in — your consent, which you may withdraw at any time.
• To protect the website against abuse and to keep security and delivery logs — our legitimate interest in the security of our systems.
• To meet applicable legal, accounting and record-keeping obligations — compliance with a legal obligation.

Who receives your information

Your information is accessible to Sebastien Muller and to authorised personnel of the firm on a need-to-know basis. It is also processed by the service providers listed below, acting on our instructions. Where a project requires specialised work, we may introduce you to qualified independent professionals — we do so with your knowledge, and those professionals act as independent controllers of the information you then share with them. We do not sell personal information and we do not share it for cross-context behavioural advertising.

• Lovable / Cloudflare — Website hosting, edge delivery and server-side rendering
• Supabase (managed PostgreSQL) — Database storage of inquiry and meeting-request records, and administrator authentication
• Google Calendar — Scheduling of requested meetings, where a meeting is requested
• Transactional email provider — Delivery of internal notification and confirmation emails (being confirmed)

International transfers

We are established in the United States and our service providers process information in the United States and, in some cases, elsewhere. If you contact us from the European Economic Area, the United Kingdom, Switzerland or Canada, your information will be transferred outside your country. The applicable safeguard and the hosting and database regions are available on request and are confirmed on request while our provider documentation is finalised.

How long we keep it

We keep inquiry and meeting records only as long as needed for the purpose described above and for the period required by applicable accounting and limitation rules. The retention period for website inquiries is available on request; records that lead to no engagement are reviewed and deleted on a periodic basis, and you may ask for deletion at any time.

Security

We maintain administrative, technical and organisational safeguards appropriate to the nature of the information processed, including encryption in transit, access controls restricting form submissions to authorised administrators, server-side validation, rate limiting and least-privilege database policies. No method of transmission or storage can be guaranteed to be absolutely secure, and we do not claim otherwise.

Your rights

Depending on where you live, you may have the right to access your information, correct it, delete it, receive a portable copy, restrict or object to certain processing, withdraw consent, opt out of any sale or sharing, limit the use of sensitive information, and appeal a refused request. We do not discriminate against anyone for exercising these rights.

• Submit a request through the Data Rights Request page, or write to info@mulleradvisorygroup.com.
• We ask only for the information needed to verify that the request comes from you or an authorised agent.
• We answer within the period required by the law applicable to you, and we tell you if we need more time or must refuse.
• If you are in the EEA or the UK you may also complain to your supervisory authority; in France, the CNIL. In Quebec, the Commission d’accès à l’information.

Selling, sharing and Global Privacy Control

We do not sell or share personal information as those terms are defined under California law, and we do not engage in cross-context behavioural advertising. Should that ever change, an opt-out would be offered before any such processing began. Our website honours Global Privacy Control signals: when a signal is present, optional technologies are treated as refused.

Children

This website is a business-to-business service and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has provided information, contact us and we will delete it.

Automated decision-making

We do not make decisions producing legal or similarly significant effects about you by automated means, and we do not profile visitors for advertising.

Changes to this policy

This policy was last reviewed on 2026-09-15. Material changes will be reflected in this date and, where the change concerns purposes or recipients, brought to your attention before the new processing begins.