Privacy

Privacy notice

Last updated 11 September 2026.

The short version

This is a website for a consulting firm. It is not an application, there is no account to create, and there is nothing to log in to. The only information we get is what you type into the assessment form or put in an email.

What the site collects

Nothing from you unless you send it. There is no tracking pixel, no advertising network and no third-party analytics script that follows you elsewhere.

Our web server keeps standard request logs -- IP address, the page requested, the time, the browser's user-agent string. That is how any web server works. We use those logs to keep the site up and to spot abuse, and nothing else.

Anti-spam checks on the form. Submissions are checked for automated activity on our own server. Submitting the form sends no data to a third-party anti-spam service. If one is ever introduced, it is named here on the same day, with a link to its own privacy terms.

Cookies. This site sets none. If that changes, each one will be listed here individually with what it does. We do not use cookies for advertising.

The site is served through Cloudflare's network, which handles the connection. Cloudflare processes connection data under its own terms, as any network provider between you and a server does. If an analytics tool is added later, it goes in this list on the same day it is added.

What happens to an enquiry

You send the assessment form or an email. A person reads it and replies.

We keep what you sent so that we can have a sensible conversation with you, and so that we remember the conversation later. We keep it for as long as we are in contact and for a reasonable period afterwards. If you ask us to delete it, we delete it.

We do not sell, rent or trade it. Not to a data broker, not to a partner, not to anybody.

We do not add you to a marketing list because you filled in a form. The research mailing list is a separate tick box on the form, it is off by default, and every message on it has a one-click unsubscribe.

The enquiry passes through ordinary business tools -- an email provider and our own form handler -- which means the email provider processes it on our behalf. Ask and we will tell you which one.

What not to send us

Please do not put anything sensitive in the form or in a first email. No passwords, no bank or card details, no financial statements, no customer records, no employee data, no health information, no recordings.

If we end up working together, there will be a signed agreement and a proper channel before any of that moves. A public web form is not that channel, and we would rather tell you now than receive it and have to delete it.

Client data during an engagement

This page covers the website. Client data during an engagement is governed by the agreement we sign with you, and that agreement is where the real commitments live. The shape of it:

• Your data stays yours. We are handling it on your behalf.
• We start read-only, and with the timestamps your systems already write.
• Screen observation, if it happens at all, is optional, scoped to a specific question, visible to the employee, pausable by them, and time-boxed. There are no continuous background microphones.
• Password entry, secret tokens, payment-card details, unrelated medical information, privileged legal communications and personal accounts are excluded from any collection.
• We do not infer health, protected characteristics or employee loyalty from anything we observe.
• Calls, SMS and email are separate scopes with their own permissions and their own legal review.
• Permission from a company owner is not permission from that company's employees and is not permission from a third party on a call. We want state- and industry-specific legal review before any production recording.
• Data export is guaranteed and exit assistance is defined and priced in the agreement.

Where any part of the work uses a third-party model or platform, we will tell you which one, what its published retention terms are, and what we have configured. We will not promise zero retention for data held by somebody else's system, and you should be wary of anyone who does. See Operational Foundations for how observation is scoped, and the Firm page for what we will not do.

Your choices

Email [email protected] and ask us for a copy of what we hold about you, a correction, or deletion. We will do it. We are not going to make you fill in a form to get out of a form.

Depending on where you live you may have rights beyond that. This page asserts compliance with no particular privacy regime -- not GDPR, not CCPA/CPRA, not any other. We handle access, correction and deletion requests directly, whichever set of rules applies where you are.

Changes

If this page changes, the date at the top changes with it and the change is noted here.

Contact

[email protected]
Fortbourne, Houston, Texas.