Privacy policy.

Website visitors. When you browse our site, we may collect basic technical data such as your browser type, device type, referring page, and pages viewed. We use Vercel Analytics and Speed Insights to understand site performance and usage in aggregate — these tools do not use cookies for tracking and do not identify you personally.

Information you share with us. If you book a discovery call or get in touch, we collect what you choose to provide — typically your name, email address, company name, and a description of what you'd like help with.

Client engagements. When we work together on a project, we may process business data you grant us access to — for example CRM records, operational data, documents, or credentials to your cloud environments. The scope of that access is defined in our statement of work and governed by any NDA we sign before work begins.

We use the information we collect to:

• Respond to enquiries and schedule discovery calls
• Deliver, manage, and improve our services
• Communicate about projects, deliverables, and support
• Maintain and improve our website
• Comply with legal obligations and enforce our agreements

We do not sell your personal information. We do not use your data for advertising profiles.

We share information only when necessary to operate our business or when required by law:

• Service providers — trusted vendors who help us run our website, host infrastructure, or manage communications (for example, scheduling and email tools). They process data on our instructions and only for the purposes we specify.
• Legal requirements — if we are required to disclose information by law, regulation, or valid legal process.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate notice where required.

For client projects, we prefer to work inside your environments wherever practical. We follow least-privilege access patterns and do not retain client data beyond what the engagement requires unless agreed in writing.

We keep enquiry and contact information for as long as needed to respond to you and maintain a business relationship. Project-related data is retained according to the terms of your statement of work and any applicable NDA. When data is no longer needed, we delete or anonymise it using reasonable technical measures.

We take reasonable steps to protect the information we hold, including access controls, encryption in transit, and limiting access to people who need it for their role. No method of transmission or storage is completely secure, but we design our engagements around your infrastructure and security requirements wherever possible.

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, or to object to certain processing. To exercise these rights, get in touch. We will respond within a reasonable timeframe and in line with applicable law.

Our website may link to third-party sites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any site you visit.

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated where appropriate.

Questions about this policy or how we handle your data? Book a discovery call or reach out through our website — we're happy to explain our practices in plain language.