Privacy, in plain English.

• The free-call form: your name, work email, company website, company size, industry, role and your answer to the last question. I use them to prepare for our call and to reply to you.
• The Snapshot form: your business name, website, email, team size and anything you add. I use them to prepare your Snapshot, send it to you and reply.
• Bookings: when you book a call, Cal.com collects your name, email and the time you choose, and sends us both the invitation. The booking page also uses Google Analytics and the Meta pixel, so I can see which visits led to a booking.
• Payments: if you pay for an assessment, Stripe handles the payment. I see that you paid, never your full card number.
• Email: if you write to me, your message stays in my business mailbox.
• Visits: Vercel, the company that hosts this site, keeps standard server logs, such as your IP address, browser and the page you asked for, to run and protect the site. The tools in the next section record how the site is used.

Google Tag Manager loads three tools as soon as you tap, scroll or press a key, or a few seconds after you arrive:

• Google Analytics counts visits: which pages were viewed, roughly where visitors are, what device they use, how they found the site and whether a form was sent.
• Microsoft Clarity records how visitors scroll, click and move through pages, as session replays and heatmaps, so I can see where a page is confusing. Anything typed into a form is masked and never recorded.
• The Meta pixel tells Meta when someone visits a page, clicks a button or sends a form, so I can measure my Facebook and Instagram ads and show ads to people who have visited. Meta may connect this to a Meta account under its own policy.

When a form is sent, these tools learn only which form it was and where it led. Never your name, email, company or answers.

In the European Economic Area, the UK and Switzerland these tools are off by default. If your browser sends a Global Privacy Control signal, the advertising tools stay off for you everywhere.

To opt out yourself, block cookies in your browser, or use Google’s opt-out add-on: Google Analytics opt-out

To change the ads Meta shows you: Meta ad preferences

When I prepare a Snapshot or audit for a business that hasn’t asked for one, I use public information: its website, Google profile, public reviews and business directories. I may also call its main line once, or send one clearly labelled test through its contact form, to see what a customer would experience.

To reach the right person, I use work contact details from public sources and business contact-data providers. I never buy consumer lists, and I never log in to anything that isn’t public.

If you’d like your business left out, email hello@cobaltandash.com and I’ll stop and delete what I have.

I don’t sell your information. These companies handle it to provide their service:

• Google Workspace, for my email
• Resend, which delivers the site’s form emails
• Vercel, which hosts this site
• Cal.com, for bookings
• Stripe, for payments
• AI tools that help me analyze public information about businesses
• Google (Tag Manager and Analytics), Microsoft (Clarity) and Meta (the pixel), as described above

I may also disclose information if the law requires it.

I keep form answers and emails while we’re in touch and delete them within two years of our last contact, unless we’re working together or the law requires me to keep them longer. You can ask me to delete them sooner. Analytics data is kept for 14 months in Google Analytics and as set by Microsoft and Meta for their tools.

Email hello@cobaltandash.com to ask what I have about you, to correct it or to delete it. I’ll answer within 30 days.

This site is for businesses. It isn’t meant for children under 16, and I don’t knowingly collect their information.

When this page changes, the date at the top changes with it.