Effective 16 October 2026
1. Who we are
This website is operated by Innovest International Inc. of Vero Beach, Florida, doing business as Mardini Strategic Advisory Group. Mardini Strategic Advisory Group is an advisory practice of Innovest International Inc. Our address is 8360 91st Ave, Vero Beach, Florida 32967, United States. Innovest International Inc. decides how and why the information described on this page is used, which makes it the "controller" under data protection laws that use that term. Questions and requests about your information go to contact@mardiniadvisory.com. Please put "Privacy" in the subject line. Kamel A. Mardini, Founder, handles them personally.
2. What we collect
Diagnostic Conversation requests. The details you enter in the request form: organization type, geography, the situation and decision in your own words, timing, advisory experience, and your contact details.
Strategic Situation Assessment. Your fourteen answers, any optional comments, and your name, email, organization, role, and country or region.
Contact messages. When you write to us through the Contact page: your name and email address, your organization and phone number if you choose to give them, what your message is regarding if you choose a topic, the message itself, and your consent.
Downloads and the waitlist. We collect your name, email address, and consent.
Server logs. Our hosting and network providers keep ordinary technical logs of requests to the website. These can include your IP address, your browser type, and the time of the request. We use them to keep the website secure and working, and we do not use them to identify you.
Spam protection. Our forms include a hidden check that discards submissions that look automated. It asks nothing of you and is not used to identify you.
Anonymous usage counts. When you use the Strategic Situation Assessment, the request for a conversation, the Contact form, or a resource page, we count which step you reached, for example, "question 8 was shown". Each count includes a random code that exists only while the page stays open, the step name, the page address (without anything after a question mark), the website's hostname, and the time. When you finish the assessment, the count also records which of the eight results you saw. A count never contains your answers, your comments, your name, your email address, your phone number, your organization, or anything else you type or choose, and it is never linked to a message you send. These counts do not use cookies, and the counts themselves do not hold your IP address. The request that sends a count is covered by the server logs described above. A plain counter of how many counts your browser tab has sent is kept in the tab's session storage until the tab closes. It is not an identifier and is not used to recognize you. None of this depends on whether you accept Google Analytics, which is separate and described just below.
We do not share your information with any other company for its own purposes. We use service providers to store, deliver, and secure it on our behalf.
Google Analytics. If you accept analytics on our notice, we use Google Analytics 4, a service of Google, to see which pages visitors view and how they reach the site, so that we can improve it. When you accept, Google Analytics sets two cookies in your browser, named _ga and _ga_ followed by an identifier. Each lasts up to two years, though some browsers limit this. Each holds a random identifier that recognizes your browser on later visits. Through them, Google Analytics receives the pages you view, the time of each visit, your browser and device type, the website or search that referred you, and your approximate location. Google Analytics also records when you scroll to the bottom of a page, the address of a link you click that leads to another website, and the name of a file you download from our site. When you accept, your browser sends its requests to Google, as it would to any website, so Google receives your IP address with them. Google states that Google Analytics 4 does not log or store IP addresses. Google processes this data on our behalf, under its data processing terms. We have turned off Google signals, advertising features, and ad personalization; we have turned off the settings that let Google use this information for its own purposes; and we do not link Google Analytics to any advertising account, so the information is not used to show you advertisements. We never send Google Analytics your name, email address, phone number, anything you type into a form, or your assessment answers and result. If you decline, or your browser sends a Do Not Track or Global Privacy Control signal, Google Analytics does not run, and its cookies are not set. We save your choice in your browser's local storage so that we do not ask you again. How Google uses information from sites that use its services is explained at https://policies.google.com/technologies/partner-sites.
What else we save. With the Strategic Situation Assessment, we also save your industry (and any text you type under Other), the result you were shown and the feedback shown with it, the scores that produced the result, the version of the assessment, the page you were on, and a record of your consent with its exact words and the time. With a request for a conversation, we also save your industry (and any text you type under Other), how you prefer to be contacted, the support you are considering, what would make a conversation valuable to you, what happens if the situation is not addressed, the outcome you want, whether you completed the assessment, the summary you typed or carried over (including the result summary, the route and your industry from the assessment), the page you were on, and a record of your consent with its exact words and the time. With a Contact message, we also save the page you were on. With a waitlist signup or a resource download, we also save the page you were on, the resource you requested, and a record of your consent, including the exact wording and time.
Saved in your browser. When you send the Strategic Situation Assessment, your browser's session storage keeps your result summary, your result route, your industry (and any text you type under Other), and the time, so that the request for a conversation can fill them in for you. It doesn't keep anything else from the assessment. The record itself stays in your browser. If you send a request, the form reads it and saves your result summary, route, and industry, including any text you typed under Other, with the request. It is used for at most 30 minutes. It is deleted when a request or a Contact message is saved and when you open the assessment again. Your browser normally removes it when you close the tab. When you send a Contact message, your browser's local storage keeps the time you sent it, and removes it once an hour has passed and you next use the Contact page, so that one browser cannot send many messages at once. If you use ?notrack=1, a flag that remembers it is kept in local storage until you use ?notrack=0.
3. How we use it
To reply to you personally, to prepare for a conversation with you, to deliver a resource you requested, and to tell waitlist members when the Before You Fail Online Course opens. To keep the website secure and understand how it is used through anonymous usage counts and, if you accept, Google Analytics. We do not sell your information. We do not send automated email sequences. Why we are allowed to use your information. Where the law asks for a reason, ours are these.
Consent: for Google Analytics, for the assessment, and to add you to a waitlist. You can withdraw consent at any time.
Your request: when you ask for a conversation or send a message, we use your details to answer you and to prepare for the conversation.
Our legitimate interests: running and securing this website, counting how visitors move through it without identifying them, and following up on the business inquiries you send us.
Legal duties: keeping the records the law requires, for example, for tax and accounting once we work together.
4. Assessment scoring and replies
Kamel A. Mardini reads every submission and writes and sends every reply himself. Every reply, and every later discussion of your business situation, rests on his professional knowledge and more than three decades of advisory and project experience, and on the methods and intellectual property he has developed. The advice and the judgment are his own. You are dealing with Kamel personally, not with an automated system.
The Assessment result is calculated in your browser by fixed proprietary rules. Our website does not send what you submit to any AI service.
When preparing a reply, Kamel may use a general-purpose AI assistant as a working or research tool. He decides this case by case. When he does, he first removes your email address, telephone number, name, and organization name. An AI assistant does not decide what advice is given or send anything to you.
Nothing is sent to you automatically.
5. Who handles your information
We use a few providers to run this website. Each handles information only to provide its service to us. At launch, they are Supabase (our database), Render (website hosting), Titan (email), Microsoft (files), and Google (Google Analytics, if you accept). These providers use their own networks and content-delivery services to deliver and protect the website. We do not sell your information, and we do not share it for advertising.
Where your information goes. Your submission is stored in a database hosted in the United States. If you use this website from outside the United States, including from the UK, the EU, or the Gulf Cooperation Council countries, your information is handled in the United States. We limit what we send to what the purpose requires. For visitors in the UK and EU, we rely on a provider's certification under the EU-US Data Privacy Framework or on standard contractual clauses. For visitors elsewhere, we handle transfers under the data protection law that applies to you.
6. How long we keep it
We keep a message, a conversation request, or an assessment for 24 months after our last contact with you, unless we begin working together. We keep engagement records for seven years after the engagement ends for tax, accounting, and contract purposes. Downloads and waitlist details are kept until you ask us to remove them, or for 24 months without contact from you. Anonymous usage counts are kept for 48 months and then deleted. Google Analytics keeps event-level data for two months. Google Analytics keeps its random browser identifier for up to 14 months after your last visit. We keep monthly totals from Google Analytics, such as visits by page, source, and country, without a time limit, and they contain no information about individuals. Our hosting and network providers keep technical logs for the short periods their services set. Deleted records may remain in backups for a short time before we overwrite them. If you ask us to delete your information, we do so within 30 days unless the law requires us to keep it.
7. Your choices and rights
Whatever country you live in, you can ask us to tell you what information we hold about you and give you a copy, to correct it, to delete it, to stop using it for a purpose such as analytics and, where the law gives you the right, to give it to another organization or to withdraw a consent you gave. Write to contact@mardiniadvisory.com with "Privacy" in the subject line. We may ask you to confirm who you are. We answer within 30 days. If we need more time or cannot do what you ask, we'll tell you why. We do not treat you differently for making a request. If you are not satisfied with our answer, you may complain to the data protection authority where you live.
Analytics choices. Google Analytics runs only if you accept it. You can change your choice at any time with "Cookie choices" in the footer of this website. Clearing this website's stored data in your browser also removes your choice, and we ask you again on your next visit. Google also offers an opt-out browser add-on at https://tools.google.com/dlpage/gaoptout. We do not count visits, and Google Analytics does not run, for a browser that sends a Do Not Track or Global Privacy Control signal. You can also add ?notrack=1 to the end of the address of any page of this website (for example https://www.mardiniadvisory.com/?notrack=1) to stop our anonymous usage counts and Google Analytics from that browser, and ?notrack=0 to allow them again.
If you are in California or another U.S. state. We do not sell personal information, and we do not share it for advertising. We apply the rights above to everyone, whether or not your state's law requires it.
If you are in Saudi Arabia, the UAE, or another Gulf country. The rights above apply to you, and you may also have rights under your country's data protection law. Write to us, and we will respond under the law that applies to you.
8. Children
This website is for business use and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has sent us information, write to us, and we will delete it.9. Security
We protect submissions with encrypted connections and with access controls that let only Kamel A. Mardini and people he authorizes read them. No system is completely secure. If a breach affects your information, we will tell you and the authorities as the law requires.
10. Changes to this page
We update this page when our practices change and show the effective date at the top. If a change affects how we use information you have already given us, we tell you by email where we have your address.