Privacy Policy
Last updated 21 September 2026
This policy explains what personal information Clarke Data Co. collects through this website, why, and what happens to it. It is written to describe what the site actually does, not what a generic template assumes.
Who is responsible for your information
This site is operated by River Clarke, trading as Clarke Data Co., a sole proprietorship based in Washington State, USA.
Clarke Data Co.
Address 123, WA, United States
hello@clarkedataco.com
For any question about this policy, or to exercise any of the rights below, email that address. I answer privacy questions myself — there is no ticketing system to get lost in.
What this site collects
| What | When | Why |
|---|---|---|
| Name | Contact form, booking | To reply to you properly |
| Email address | Contact form, booking | To reply and to send calendar invites |
| Business type | Contact form (optional) | To understand your situation before replying |
| Your message | Contact form | To answer your enquiry |
| Booking answers | Scheduling a call | To prepare for the call |
| Server log data | Every visit | Automatically recorded by the web host for security and reliability |
You are never required to give this information to browse the site. It is only collected if you choose to contact me or book a call.
What this site does not do
- No analytics or visitor-tracking software of any kind is installed.
- No advertising, retargeting, or tracking pixels.
- Your information is never sold, rented, or shared for anyone else's marketing.
- No automated decision-making or profiling.
- No newsletter or marketing list — you will only be emailed in reply to you.
Who else handles your information
Running a website means relying on a small number of service providers. Each has its own privacy policy, and each only receives what it needs:
| Provider | What it handles |
|---|---|
| Netlify | Hosts the site and receives contact form submissions. Also records standard server logs, including IP addresses. |
| Cal.com | Powers the booking scheduler. If you book a call, Cal.com receives your name, email and answers, and creates the calendar event. |
| Email and calendar. Your message reaches me in a Google inbox; booked calls appear in Google Calendar. | |
| Porkbun | Domain registration and email forwarding for the clarkedataco.com address. |
The scheduler is embedded directly in the booking section, which means Cal.com receives a request from your browser when that part of the page loads. See the cookie policy for what that involves.
How long information is kept
- Enquiries that don't lead to work: deleted within 12 months.
- Client correspondence and records: kept for up to 7 years, as business and tax records ordinarily require.
- Form submissions stored by Netlify: deleted from the dashboard once the enquiry has been dealt with, and in any case within 12 months.
- Server logs: retained by the host on its own schedule, typically a short period.
Your choices
You can ask me to show you what information I hold about you, correct anything wrong, or delete it. Email hello@clarkedataco.com and I'll respond within 30 days. There is no charge.
Depending on where you live, you may have additional statutory rights. I apply the above to everyone regardless, because it's simpler and fairer than sorting people by postcode.
Automated processing and AI tools
Nothing you send through this website is fed into an AI system. Enquiries are read by me. There is no automated decision-making, no profiling, and no machine-learning system analysing who contacts me or what they say.
Separately: AI-assisted tools are increasingly common in analysis work. If any part of a paid engagement would involve putting your business data through such a tool, that will be stated in writing in the engagement agreement and agreed by you before it happens — never assumed, and never silently.
Your data is never used to train any model, mine or anyone else's.
Client data during an engagement
This policy covers the website. Once you become a client, your business data is handled under the separate written agreement for that engagement. These principles apply regardless of what that agreement says:
- Minimum necessary. I ask for the smallest set of data that answers your question. If a column isn't needed for the analysis, I'd rather you removed it before sending.
- No customer personal data unless it's genuinely required. Most analysis works perfectly well on anonymised or aggregated records. Where individual customer data is needed, that's agreed in advance and handled accordingly.
- Returned or destroyed on request, and at the end of an engagement unless you ask me to retain it for ongoing work.
- Never shared with anyone else, never used as a portfolio example, and never published — including anonymised.
Security
Concretely, what's in place:
- The site is served only over HTTPS, with certificates renewed automatically.
- Form submissions go to the hosting provider's dashboard and to a single mailbox. No one else has access to either.
- Accounts holding your data are protected by unique passwords and two-factor authentication.
- No enquiry or client data is stored on shared drives, public repositories, or anywhere the website itself can reach.
No system is perfectly secure and I won't claim otherwise. Please don't send financial account numbers, passwords, or similarly sensitive details through the contact form — if an engagement requires anything of that kind, we'll arrange a secure method.
If something goes wrong
If I become aware of a breach affecting your personal information, I will tell you directly and promptly — what happened, what was affected, and what I'm doing about it — alongside any notification the law requires.
What would change this policy
This policy is short because the site genuinely does very little with your data. Any of the following would require updating it before the change goes live, and each would be reflected here:
- Adding website analytics or any visitor tracking
- Adding a newsletter or marketing list
- Introducing AI-assisted processing of enquiry data
- Adding advertising, or any third-party service that receives visitor data
Children
This site offers services to businesses and is not directed at children. I don't knowingly collect information from anyone under 16. If you believe a child has provided information, contact me and I'll delete it.
Changes
If this policy changes, the date at the top will change with it. Material changes will be noted on this page.