Privacy Policy

Last updated: January 22, 2026

Merlano Defense, LLC ("Company," "we," "us," or "our"), a Delaware limited liability company, respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website www.merlanodefense.com (the "Website").

Summary: We collect minimal data (analytics and scheduling information). We do not sell your personal information. You can opt out of analytics tracking via our cookie consent banner.

1. Information We Collect

1.1 Information Collected Automatically

When you visit our Website, we may automatically collect certain information about your device and usage patterns, but only if you consent to analytics tracking:

Device Information: Browser type, operating system, device type
Usage Data: Pages visited, time spent on pages, referring URL, click patterns
Location Data: General geographic location (country/region level only, not precise location)
Technical Data: IP address (anonymized), internet service provider

1.2 Information You Provide

When you schedule a consultation through our third-party scheduling provider (Calendly), you voluntarily provide:

Name
Email address
Company name (optional)
Any information you include in meeting notes

1.3 Information We Do NOT Collect

We do not collect:

Social Security numbers
Financial or payment information through this Website
Health information
Biometric data
Precise geolocation data
Information from minors under 16

2. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Legal Basis
Analyze website traffic and improve user experience	Consent (via cookie banner)
Respond to consultation requests	Contractual necessity / Legitimate interest
Communicate about our services	Legitimate interest
Comply with legal obligations	Legal requirement

3. Cookies and Tracking Technologies

3.1 Our Cookie Practices

We use cookies only with your explicit consent. When you first visit our Website, you will see a cookie consent banner. Analytics cookies are only activated if you click "Accept."

3.2 Types of Cookies

Cookie Type	Purpose	Duration
Consent Cookie	Remembers your cookie preference	Persistent (localStorage)
Google Analytics	Website analytics (only if you accept)	Up to 2 years

3.3 Do Not Track Signals

Our Website respects "Do Not Track" browser signals. If your browser sends a DNT signal, we will not load analytics tracking scripts.

3.4 Managing Cookies

You can manage your cookie preferences by:

Clicking "Decline" on our cookie consent banner
Clearing your browser's localStorage and cookies
Adjusting your browser settings to block cookies

4. Third-Party Services

Our Website uses the following third-party services, each with their own privacy practices:

Service	Purpose	Privacy Policy
Google Analytics	Website analytics	Google Privacy Policy
Calendly	Scheduling consultations	Calendly Privacy Policy
Vercel	Website hosting	Vercel Privacy Policy

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We have not sold personal information in the preceding 12 months.

5.2 Limited Sharing

We may share your information only in the following circumstances:

Service Providers: With third-party vendors who assist in operating our Website (listed above), bound by contractual obligations to protect your data
Legal Requirements: When required by law, court order, or governmental regulation
Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users or others
Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

6. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this Policy:

Analytics Data: Aggregated analytics data is retained for up to 26 months by Google Analytics
Scheduling Data: Retained by Calendly according to their retention policy; we retain consultation records for up to 3 years for business purposes
Cookie Consent: Your consent preference is stored in your browser's localStorage until you clear it

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

HTTPS encryption for all Website traffic
Security headers (X-Frame-Options, X-Content-Type-Options, etc.)
Regular security assessments of our Website
Limited access to personal information on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Privacy Rights

8.1 Rights for All Users

Regardless of your location, you may:

Opt out of analytics tracking via our cookie consent banner
Request information about what data we have collected
Request correction of inaccurate information
Request deletion of your information

8.2 California Residents (CCPA/CPRA Rights)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

8.3 European Users (GDPR Rights)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at sales@merlanodefense.com. We will respond to your request within 45 days (or 30 days for GDPR requests). We may need to verify your identity before processing your request.

9. Children's Privacy

Our Website is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

10. International Data Transfers

Our Website is hosted in the United States. If you access our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated Policy on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Merlano Defense, LLC
Delaware, USA
Email: sales@merlanodefense.com

For data protection inquiries, please include "Privacy Request" in your email subject line.