Privacy Policy

nimbusconsulting.co is operated by Nimbus & Co LLC, a limited liability company organized in California, doing business as Nimbus Consulting. In this policy, “we,” “us,” and “Nimbus” mean Nimbus & Co LLC.

We are the party responsible for the information described here. If you have a question about any of it, the contact details are in section 15.

Information you give us. When you submit the contact form, we receive the fields you fill in:

• Required: first name, last name, business name, email address, and your message.
• Optional: phone number, website address, budget range, and which services you’re interested in.

Anything else you choose to put in the message field is up to you. Please don’t send sensitive information — government ID numbers, financial account numbers, health information, or passwords — through this form. It isn’t the right channel for it, and we don’t need it to have a first conversation.

Information collected automatically. This site is served as static files by GitHub Pages. Like virtually every web host, GitHub records standard server log data when a page is requested — typically IP address, browser type, referring page, and timestamp. We do not have access to those logs and cannot use them to identify you. GitHub’s handling of that data is governed by its own privacy statement.

Information from working together. If we go on to work together, we’ll collect what the engagement requires — business contact details, billing information, and access to the systems we’re hired to build or improve. That’s covered by our agreement with you and by section 6 below.

This is worth stating plainly, because it’s unusual:

• No analytics. We do not run Google Analytics or any other visitor analytics on this site.
• No advertising or retargeting pixels. There is no Meta pixel, LinkedIn Insight tag, or Google Ads tag here.
• No tracking cookies. This site sets no cookies of its own. That’s why you won’t see a cookie banner — there’s nothing to consent to.
• No third-party fonts or embeds phoning home. Our typefaces are bundled into the site when it’s built, so loading a page doesn’t send a request to Google or anyone else.

If that ever changes, we’ll update this policy and the effective date above before the change goes live.

We use what you send us to:

• Reply to your inquiry and answer your questions.
• Understand what you need so we can scope, quote, and propose work.
• Provide and support services if you become a client.
• Keep our own records of who we've talked to and about what.
• Meet legal, tax, and accounting obligations.

We do not add you to a marketing list because you filled out the contact form. If we ever start sending a newsletter or similar, it will be something you opt into deliberately, and every message will include a working unsubscribe link.

We do not use your information to train machine learning models, and we do not feed your inquiry into third-party AI tools for our own product development.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We never have.

We share information only with service providers who help us operate, and only to the extent they need it:

• Our form-delivery provider, which receives contact form submissions and forwards them to our inbox.
• Our email provider, where your message is delivered and stored.
• Our website host, GitHub Pages, which serves this site.
• Professional advisors such as our accountant or attorney, where genuinely needed.

We may also disclose information if we are legally required to — for example, in response to a valid subpoena or court order — or if it’s necessary to protect our rights, safety, or property. If Nimbus is ever sold or merged, information could transfer as part of that transaction; if that happens, we’ll note it here.

A large part of our work involves building and operating systems — CRMs, automations, websites, dashboards — that hold our clients’ own customer data. When we handle that data, we act on the client’s instructions as a service provider, not as the owner of it.

How that data is used, secured, retained, and deleted is governed by our written agreement with that client, not by this policy. We do not use client customer data for our own purposes, and we do not sell it.

If you are a customer of one of our clients and want to know how your information is handled, the right place to start is that business’s own privacy policy — though you’re welcome to contact us and we’ll point you in the right direction.

Inquiries that don’t become work: we keep contact form submissions for up to 24 months after our last exchange with you, then delete them. We keep them that long because conversations that go quiet often restart, and it’s better for you if we remember the context.

Client records: we keep these for the length of the engagement and for seven years afterward, which is what our tax and recordkeeping obligations require.

You can ask us to delete your information sooner. See section 8.

Whatever state you live in, and whether or not the law currently obliges us, you can ask us to:

• Tell you what personal information we hold about you.
• Give you a copy of it.
• Correct anything that's wrong.
• Delete it.
• Stop contacting you.

Email thepotterpad@gmail.com and we’ll respond within 30 days. We may need to confirm it’s really you before acting on a request — usually by replying from the address we already have on file. We won’t charge you, and we won’t treat you differently for asking.

There are limits: we may need to keep certain records to finish work in progress, resolve a dispute, or satisfy a legal obligation. If we can’t fully honor a request, we’ll tell you why.

California law gives residents specific rights over personal information — to know, to access, to correct, to delete, to opt out of sale or sharing, and not to be discriminated against for exercising them.

Nimbus is a small business and does not currently meet the thresholds that make the California Consumer Privacy Act mandatory for us. We honor these requests anyway, using the process in section 8.

For clarity on the categories California asks businesses to disclose: we collect identifiers (name, email, phone), commercial information (the services and budget range you indicate), and internet activity limited to the server logs described in section 2. We collect these directly from you. We disclose them only to the service providers listed in section 5. We do not sell or share personal information, and we have not done so in the preceding twelve months. We do not knowingly collect sensitive personal information.

Under California’s “Shine the Light” law, you may request information about disclosures to third parties for their direct marketing purposes. We make no such disclosures.

Some browsers send a “Do Not Track” signal. There’s no industry consensus on how sites should respond to it, so here is our answer: we don’t track visitors across other websites or over time in the first place, so our behavior is the same whether or not you send the signal. We also do not permit third parties to collect personally identifiable information about your activity across other sites from this one.

This site is served over HTTPS, and contact form submissions are encrypted in transit. Access to the inbox that receives inquiries is limited to people at Nimbus who need it and is protected by multi-factor authentication.

No method of transmitting or storing information is perfectly secure, and we won’t claim otherwise. If a breach ever affects your personal information, we’ll notify you and any required authorities as the law requires.

This is a business-to-business site. It isn’t directed at children, and we don’t knowingly collect personal information from anyone under 13. If you believe a child has sent us information, email us and we’ll delete it.

Our site may link to other companies’ websites, including work we’ve built for clients. We don’t control those sites and aren’t responsible for their privacy practices. Their policies apply once you leave ours.

We’ll update this policy when our practices change. The effective date at the top always reflects the current version. If a change materially affects how we handle information we’ve already collected from you, we’ll make a reasonable effort to tell you directly — typically by email — rather than quietly editing this page.

Questions, requests, or concerns about privacy go to a real person:

You can also start from the contact page, though email is faster for privacy requests.