Last updated: September 24, 2026

1. Who we are

Beyond the Record is the genealogy division of Strix Consulting LTD, 850 Michigan Ave, Columbus, OH 43215, USA. Strix Consulting LTD is the controller of the personal information described in this policy (“we”, “us”).

This policy covers the website beyondtherecord.us and the genealogy services we provide to clients. For any privacy question or request, write to info@beyondtherecord.us.

2. What personal information we collect

We collect only what you give us to answer your request or carry out your research, plus the minimum technical data needed to run the website.

• Contact form and emails: your name, email address, and the content of your message, including any family names, places, and dates you share.
• Client research data: information about you and your ancestors needed for the research, such as names, dates and places of birth, marriage and death, immigration details, and copies of family documents. For citizenship-by-descent projects this may include identity and civil-status documents of living family members.
• Delivery details: a postal address, if we ship you a printed report.
• Technical data: your IP address and browser information, processed automatically by our hosting provider and, on pages containing a form, by Google reCAPTCHA (see section 4). We do not use analytics or advertising trackers.

Information about other people. When you tell us about relatives, please share details of living people only with their knowledge. Information about deceased people is not personal data under the GDPR, but we treat family records with the same care.

3. How we use it and on what legal basis

We use your information only to reply to you, deliver the services you ask for, and keep the website secure. We never sell it or use it for advertising.

Purpose	Data	Legal basis (GDPR)
Answering your inquiry	Contact form and email data	Steps at your request before a contract, Art. 6(1)(b)
Carrying out genealogy and citizenship research	Client research data, delivery details	Performance of a contract, Art. 6(1)(b)
Keeping invoices and business records	Name, contact and billing details	Legal obligation, Art. 6(1)(c)
Protecting the contact form from spam and abuse	Technical data (reCAPTCHA)	Legitimate interest in a secure website, Art. 6(1)(f)
Running and securing the website	Technical data (server logs)	Legitimate interest, Art. 6(1)(f)

4. Who we share it with

We share personal information only with the service providers below, which process it on our behalf, and with record offices when your research requires it. We do not sell or share personal information for advertising.

Provider	What it does for us	Location
GoDaddy	Website hosting	United States
Brevo	Sends the emails generated by the contact form	European Union
Microsoft 365	Our business email and document storage	United States / EU
Google reCAPTCHA	Spam protection on the contact and research request forms	United States
CookieScript	Cookie banner and consent management	European Union

Archives and record offices. To obtain records, we may give names, dates, and places to Italian municipal offices, parishes, state archives, or consulates. We share only what the request needs.

Legal requirements. We may disclose information if required by law or to protect our legal rights.

5. Cookies

Our website uses no analytics, advertising, or social-media tracking cookies. Fonts, images, and videos are served from our own server.

Cookie	Set by	Purpose	Type
CookieScriptConsent	CookieScript (our cookie banner)	Remembers your cookie choices for 30 days	Strictly necessary
_GRECAPTCHA	Google reCAPTCHA	Tells people and bots apart to block spam	Security
wordpress_*	WordPress	Keeps site administrators logged in; not set for visitors	Strictly necessary

You can change your choices at any time through the “Cookie Settings” link at the bottom of every page, or delete cookies in your browser settings.

6. How long we keep it

We keep personal information only as long as we need it, then delete it.

Data	Retention
Inquiries that do not lead to an engagement	2 years from our last exchange
Client research files and correspondence	10 years from the end of the project, so we can answer follow-up questions and reissue reports
Invoices and business records	As long as tax law requires
Server logs	Per our hosting provider’s standard rotation

You can ask us to delete your files earlier (see section 8).

7. International transfers

Our team works in the United States and in Italy, so your information moves between the two. When data leaves the European Union, we rely on the EU-U.S. Data Privacy Framework where our providers are certified, or on the European Commission’s Standard Contractual Clauses. Research in Italian archives may require sending record requests to offices in Italy.

8. Your rights (EU, EEA, UK and Switzerland)

If you are in these regions, you can exercise the following rights free of charge by writing to info@beyondtherecord.us. We reply within one month.

• Access: get a copy of the personal information we hold about you.
• Correction: fix inaccurate or incomplete information.
• Deletion: ask us to erase your information, unless we must keep it by law.
• Restriction and objection: limit our use of your information, or object to use based on legitimate interest.
• Portability: receive the information you gave us in a common digital format.
• Withdraw consent: where we rely on consent, such as optional cookies, withdraw it at any time.

You also have the right to complain to your local data protection authority. In Italy this is the Garante per la protezione dei dati personali.

9. Your rights (United States)

We offer the same core rights to all U.S. residents, including those in California and other states with privacy laws.

• Right to know and access the personal information we have collected about you, its sources, and who we share it with.
• Right to delete your personal information, subject to legal exceptions.
• Right to correct inaccurate information.
• No sale or sharing: we do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of.
• Sensitive information: identity or civil-status documents you send for citizenship projects are used only to carry out that project.
• Appeal: if we decline a request, you can ask us to reconsider by replying to our answer.
• Non-discrimination: exercising your rights will not affect the service or price you receive.

Send requests to info@beyondtherecord.us. We may ask for information to verify your identity, and you may use an authorized agent with your written permission. We honor Global Privacy Control signals; because we do not track visitors across sites, “Do Not Track” signals change nothing on our website.

10. Other information

Children. Our services are for adults. We do not knowingly collect information from children under 16. Information about minors appears only in family records that a parent or guardian provides for research.

Security. We use encrypted connections (HTTPS), authenticated email sending, and access-restricted accounts. No system is completely secure, so please avoid sending original documents or passwords by email unless we ask.

Links to other sites. Our pages link to Facebook, Instagram, and online archives. Their own privacy policies apply when you visit them.

Changes. We will post any update on this page and change the date at the top.

Contact. Strix Consulting LTD – Beyond the Record, 850 Michigan Ave, Columbus, OH 43215, USA · info@beyondtherecord.us