What we collect,why, and for how long.

Information you give us directly. When you submit the contact form, book a discovery call through Cal.com, fill out the post-payment onboarding form on our welcome page, schedule the kickoff call, or correspond with us during an engagement, we collect what you choose to share — typically your name, business name, role, phone number where given, and any account or business detail you put in writing.

Information you give us as a careers applicant. When you apply for a role through the careers page, we collect what you submit through the application form — name, email, phone where given, country, role you’re applying to, portfolio or work-sample links, LinkedIn, and the written response in the “why this seat” field. We also record your acknowledgement of these terms and (where applicable) the contractor-engagement notice.

Information from third parties as part of running engagements. To deliver the work, we receive: payment information from Stripe (we don’t store your card; Stripe does), recordings and transcripts from Google Meet for calls held during the engagement, and access tokens you grant us for ad-platform management on your accounts.

Information routed through our internal channels. Onboarding-form and careers-application submissions are delivered into private Slack channels accessible to the team responsible for that workflow. Slack stores those messages under its own retention rules; copies of the underlying records are also retained per the schedule below.

Information your devices send automatically. Standard server logs (IP address, browser type, the page you came from) created when you visit this site. We don’t use this for advertising; it’s used to keep the site working and to investigate abuse if it happens.

We use information to respond to inquiries, run the engagements we’ve agreed to, send invoices and process payments, keep an accurate record of decisions and deliverables, and meet our own legal and tax obligations.

We don’t sell information about you. We don’t use your account data, performance numbers, or call recordings to train any model outside the work of operating your engagement.

We rely on the following processors to operate the firm. Each handles your information under its own privacy terms; using our services means accepting that your information may be processed by the providers below for the purposes described.

• Cal.comMeeting scheduling and booking
• Google WorkspaceEmail (Gmail), video calls (Google Meet), working files (Drive)
• StripeInvoicing, subscription billing, and payment processing
• FormspreeContact-form submissions
• SlackInternal team coordination, onboarding-form intake, and careers-application intake
• VercelHosting, content delivery, and Web Analytics (cookieless, aggregated traffic counts)
• CloudflareDNS and traffic routing

This site does not set first-party cookies and does not run third-party advertising trackers. We use Vercel Web Analytics to count page views in aggregate. Vercel Web Analytics is cookieless, hashes visitor data on the fly, and stores no personally identifying information. No cookie banner is required because no consent-bearing cookies are set.

The booking calendar on the contact page is provided by Cal.com and runs inside its own iframe. Cal.com may set cookies on its own domain to operate the booking widget; those cookies are governed by Cal.com’s privacy policy, not this one.

If you’ve embedded our scripts on your own properties as part of an engagement (conversion pixels, tag managers, etc.), the cookies and identifiers those scripts set on your site are governed by your own privacy policy — not this one.

• Inquiries that don’t become engagements: twelve months from last contact, then deleted.
• Active engagement records: for the duration of the engagement plus seven years afterwards, for tax, audit, and dispute-resolution purposes.
• Onboarding-form responses: treated as part of the active engagement record once the engagement begins, and retained on the same schedule.
• Call recordings and transcripts: duration of the engagement plus twelve months, unless you ask us to delete them earlier.
• Careers applications: twenty-four months from submission. Applications that lead to an engagement become part of that engagement’s record on the schedule above. You can ask us to delete an application earlier through the contact form.
• Payment records: held by Stripe under their retention rules, and by us for the period our tax authorities require.

You can ask us to confirm what we hold about you, correct anything that’s wrong, port it elsewhere, or delete it. Where you’re a resident of a jurisdiction with a data-protection regime (the United Kingdom, the European Union, California, and others), the rights granted by that regime apply in full.

Requests should come through the form on our contact page. Where law sets a deadline for response, we’ll meet it; otherwise we aim to respond within thirty days.

We’re based in the United States and serve clients across several countries — currently the United States, the United Kingdom, Saudi Arabia, the United Arab Emirates, and Ireland. Information you give us may be stored or processed in the United States or in any region where our processors operate.

Where we serve clients in the United Kingdom, the European Union, or other jurisdictions whose data-protection rules require it, we rely on standard contractual clauses or equivalent transfer mechanisms with our processors.

The firm’s services aren’t directed to children. We don’t knowingly collect information from anyone under sixteen. If you believe a child has provided information to us, please tell us through the contact form and we’ll delete it.

We may update this policy as the firm’s practices change or as the law develops. The “last updated” date at the top of this page reflects the current version. Material changes that affect an active engagement will be communicated to that client directly.

For privacy questions, requests to access or delete information, or anything else covered by this policy, get in touch through the form on our contact page. We’ll route your request to whoever needs to act on it.