Privacy policy.

Who we are

The Intentional Company is a consulting and coaching practice operating from the State of Georgia in the United States. This policy covers theintentional.co and the forms on it. It does not cover the separate agreements that govern a client engagement. Where an engagement contract says something different about confidentiality or data handling, the contract governs that engagement.

What we collect

Only what you type. There are exactly two places on this site that send anything anywhere.

The contact form

• Email address. Required, because a reply has to go somewhere.
• Message. Required. Whatever you choose to tell us.
• First and last name, company. Optional. Leave them blank and the form still sends.
• Interest and timeline. Two dropdown selections, so the reply is relevant.

The newsletter signup

• Email address. That is the entire form. No name, no company, no segmentation questions.

Collected automatically

Nothing by us. Our hosting provider keeps standard server logs, which include the IP address of the requesting device, the pages requested, and timestamps. These are ordinary web server records used to keep the site running and to investigate abuse. We do not build profiles from them, join them to form submissions, or use them for marketing.

Why we collect it

• To answer you. Contact form details are used to reply to your enquiry and, if it goes further, to scope a possible engagement.
• To send the newsletter. Your email is used to send the newsletter you asked for, and for nothing else.
• To keep the site working. Server logs support availability, security, and troubleshooting.

We do not sell personal information. We do not share it with advertisers, data brokers, or partners. We do not use it to train machine learning models. If any of that ever changes, this policy changes first and the change is dated at the top.

Who else touches it

Two third parties process form submissions on our behalf. Each has its own privacy policy, and using the relevant form means your information passes through that service.

• Web3Forms receives contact form submissions and relays them to our email. See the Web3Forms privacy policy.
• Kit, formerly ConvertKit, stores newsletter subscriptions and sends the newsletter. See the Kit privacy policy.

Beyond those two, our email provider and our hosting provider necessarily handle the data in transit and at rest. We may also disclose information where the law requires it, which has not happened to date.

Cookies and tracking

This site sets no cookies. It runs no analytics package, no advertising tags, no session recording, no heat mapping, and no tracking pixels. Nothing is written to local storage in your browser. There is no consent banner on this site because there is nothing to consent to.

The only reason this section exists is that most policies claim the opposite, so the claim is worth making plainly and worth checking. Open your browser tools on any page here and look.

How long we keep it

• Enquiries that do not become engagements. Kept for up to twenty four months, then deleted.
• Enquiries that become engagements. Kept for the life of the engagement and for seven years after it ends, which is the ordinary retention period for business and tax records.
• Newsletter subscriptions. Kept until you unsubscribe. Every issue carries a one click unsubscribe link, and unsubscribing removes you from the list rather than suppressing you on it.
• Server logs. Retained on our host's standard schedule, typically no more than thirty days.

Your rights

Georgia has no comprehensive consumer privacy statute at the time of writing. Rather than offer rights only to the residents of states and countries that mandate them, we extend the same set to everyone who contacts us, wherever you are.

• Access. Ask what we hold about you and we will tell you.
• Correction. Ask us to fix anything inaccurate.
• Deletion. Ask us to delete it, and we will, except where a record must be kept for tax or legal reasons.
• Portability. Ask for a copy in a common format.
• Objection. Ask us to stop using it, including opting out of the newsletter at any time.

Email sal@theintentional.co with the request. We reply within thirty days, usually within two working days. There is no charge, and there is no form to fill in. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your supervisory authority.

Security

The site is served over HTTPS, so form submissions are encrypted in transit. Access to the inbox and the newsletter account is protected by strong, unique credentials and multi factor authentication. Client information gathered during an engagement is held under the confidentiality terms of that engagement, on a need to know basis.

No system is perfect, and claiming otherwise would be the kind of sentence this practice exists to argue against. If we ever learn of a breach affecting your information, we will tell you and the relevant authority without undue delay.

Children

This site and this practice are for adults in a professional context. We do not knowingly collect information from anyone under sixteen. If you believe a child has submitted information here, email us and it will be deleted.

Changes to this policy

When this policy changes, the effective date at the top changes with it. Material changes, meaning anything that widens what we collect or who receives it, will be summarised at the top of this page for at least ninety days. We do not backdate revisions.

How to reach us

Questions about this policy, or any request about your information, go to sal@theintentional.co. A postal address is available on request for formal correspondence.

This policy is governed by the laws of the State of Georgia, United States, without regard to conflict of law principles.