Privacy Policy

1. Information collected

Depending on how you use the website, this may include:

• the name, email address, phone number, company, role, website or profile, and business context you choose to submit;
• the problem, timeline, scale, service interest, or prior attempts described in an assessment request;
• answers and automatically saved drafts entered into a private pre-call brief, including available business figures, operating constraints, decision context, and read-only access you may be able to grant;
• referral, campaign, landing-page, and pages-viewed information used to understand the context preceding a request;
• consent preferences stored in your browser and standard technical records needed to deliver and protect the website; and
• optional analytics data after analytics is accepted, and advertising measurement data from Meta Pixel and Meta Conversions API, unless a browser Global Privacy Control signal is active.

Do not submit passwords, payment-card details, health information, trade secrets, or other information that is not needed to assess the request.

2. Why information is used

Information may be used to:

• assess, respond to, and follow up on your request;
• operate the lead pipeline and record relevant communications;
• prepare for a potential conversation and avoid asking you to repeat the same discovery information aloud;
• prevent duplicate, automated, abusive, or fraudulent submissions;
• maintain, secure, troubleshoot, and improve the website; and
• understand site performance when optional analytics has been accepted, and measure advertising performance subject to the choices described below.

Submitting an assessment request authorizes a response to that request. It does not subscribe you to unrelated promotional email.

3. When information is shared

Information may be processed by service providers that support website hosting, database or CRM operation, form delivery, transactional email, security, optional analytics, and advertising measurement. They receive only the information needed to provide their service and are subject to their own contractual and legal obligations.

When optional analytics is accepted, Google Analytics may receive page and interaction data. Because this website and its paid campaigns are directed to the United States, Meta Pixel may receive page-view and accepted-lead events, campaign or click context, source URL, and standard technical data independently of the optional-analytics choice. Meta Pixel is disabled when the browser sends a Global Privacy Control signal. Contact-form contents are not intentionally included in browser measurement events.

Vercel, which hosts the site, also receives cookieless Web Analytics page views: the page, referring site, country, and browser and device type, counted with a daily-resetting identifier and reported only in aggregate.

After an assessment request is accepted, the website may send the corresponding Lead event to Meta server-to-server through the Meta Conversions API for attribution and advertising measurement. The event may include its timestamp, event ID, source URL, browser or click identifiers, IP address, and user agent. If supplied, email address, phone number, and first and last name are normalized and hashed before transmission. Free-text form answers, business context, and CRM notes are not sent to Meta. Hashing is a security measure; it does not make the information anonymous. This website does not use submitted contact details to build advertising audiences. Meta processes information under its own privacy terms.

If you choose to schedule a call, the Calendly booking page is loaded inside this website. Calendly receives the information you enter there, the selected meeting time, and limited campaign parameters used to identify the source of the booking. Contact-form contents are not sent to Calendly by this website.

Information may also be disclosed where reasonably necessary to comply with law, protect rights or security, investigate abuse, or complete a business reorganization with appropriate safeguards. Personal information is not sold.

4. Retention

The operating retention schedule is below. A meaningful interaction is a reply, meeting, proposal, pricing discussion, or resubmitted request; it does not include an automated message, email open, or page view.

• Test submissions are deleted within 30 days. Spam and abuse records are reduced to the minimum information needed to prevent repeat abuse, then reviewed within 30 days.
• A request marked lost or unqualified is deleted 18 months after its final meaningful interaction.
• An inactive prospect without a final decision is deleted 24 months after its last meaningful interaction.
• Signed-client, contract, invoice, payment, and core engagement records are retained for seven years after the engagement ends. Working delivery material is reviewed at the end of the engagement and deleted earlier unless it is needed for that record, a dispute, or an agreed client purpose.

Private brief links expire and may be revoked at any time. Draft and submitted answers follow the retention schedule of the corresponding lead or client record. Deletion removes information from active systems; encrypted backups expire through their normal lifecycle and are not restored into active use. A legal, accounting, fraud, or dispute hold may require a limited exception. The operating process follows a documented retention and deletion procedure.

5. Your choices and requests

You may reject optional analytics from the consent banner and reopen cookie preferences from the footer. A browser Global Privacy Control signal disables optional analytics and Meta advertising measurement.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or information about the handling of your personal information. To make a privacy request, use the request page, write "Privacy request" in the problem field, and provide the email address needed to verify the request. We aim to acknowledge a request within 10 business days and complete or explain the response within 45 calendar days, subject to identity verification, legal exceptions, and any different period that applicable law requires.

6. Security and international processing

Reasonable administrative and technical safeguards are used to protect submitted information. No internet service can guarantee absolute security. Service providers may process information in jurisdictions other than your own, subject to the protections available under applicable contracts and law.

7. Children

This business-to-business website is not directed to children, and personal information from children is not knowingly solicited.

8. Changes and contact

This policy may be updated when the website or data practices change. The updated date above will identify the current version. Questions about this policy may be submitted through the request page.