Privacy.
What we collect, what we do with it, and how we handle your data during an engagement. Last updated August 2026.
The website
Analytics. We use Cloudflare Web Analytics, which is cookieless. It records page views, referring sites, and country, and it does not use cookies, fingerprint your device, or track you across other websites. That’s why there’s no cookie banner on this site: there are no cookies to consent to.
The ROI Readiness Scorecard. Your answers are scored in your browser. Nothing is sent anywhere unless you choose to enter your email at the end. If you do, we send you your results and store your email address and grade in our CRM so we know you’ve been in touch. That’s the only email we send unless you contact us.
The intake form. If you book an engagement, we keep what you submit: your name, contact details, company, and what you told us about the problem. We need it to do the work and to remember the conversation.
What we don’t do. We don’t sell your data, share it with advertisers, run ad-tracking pixels, or add you to a mailing list you didn’t ask for.
Who processes it
We use a small number of third-party services to run the practice: HubSpot as our CRM, AgentMail for sending email, Netlify for hosting, and Cloudflare for analytics. Each holds only what it needs to do its job. We don’t use any service that resells personal data.
Where your data actually lives
Storage. Engagement materials live in a dedicated cloud workspace for your engagement, on Kymata-controlled accounts. Nothing is stored on employer systems or employer hardware, and no client data touches any system belonging to anywhere either of us works.
Access. Only the people staffed on your engagement can open it. For most engagements that is two people, and we tell you which two before you send anything.
Subprocessors. Analysis happens in the tools named above plus the cloud storage and spreadsheet software the workspace runs on. We don’t upload client data to systems we haven’t told you about, and we don’t put identifiable client data into third-party AI tools.
Deletion. We keep engagement materials for twelve months after delivery so we can answer follow-up questions, then delete them. Ask for deletion sooner and we’ll do it and confirm in writing. Our own working notes and the deliverable we wrote for you are what we retain.
All of this sits underneath whatever NDA we sign, which we’ll sign before any sensitive briefing and can send first if you prefer.
Client data during an engagement
Engagements involve real business data: financials, spend records, reporting exports, sometimes customer or user data. We treat it as confidential, we use it only for your engagement, and we don’t reuse it elsewhere.
Who sees it. Client data is accessible to Kymata personnel working on your engagement, all of whom are bound by confidentiality obligations no less protective than those in your statement of work.
How long we keep it. We retain engagement materials for the duration of the engagement and for a reasonable period afterward, so we can answer follow-up questions and support any later work. If you want your data deleted at the end of an engagement, tell us and we’ll do it.
What we publish. Nothing about your engagement, ever, without your written permission. If we ever want to describe work we’ve done for you, we ask first and you decide.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email info@kymataconsulting.com and we’ll handle it. There’s no form and no process, because we’re small enough that a message reaches a person.
Changes
If we change how we handle data, we’ll update this page and change the date at the top. We won’t quietly start doing something this page says we don’t do.
Questions about any of this are welcome. info@kymataconsulting.com