Privacy Policy

[ 01 ]Scope

This policy covers kaldera-analytics.com, audit.kaldera-analytics.com and any page served from them, including private client reports, together with email you exchange with us. In this policy, "Kaldera Analytics", "we", "us" and "our" mean Kaldera Analytics of Boise, Idaho, which decides how the information described here is used.

It does not cover websites we link to, or work we carry out inside a client's own systems under an engagement agreement. That work is governed by the agreement.

[ 02 ]What we collect

Information you give us

• Email. When you write to us, we receive your name, email address and anything you choose to include in the message.
• Inquiry form. The Funnel Audit inquiry form asks for your name, work email, company, website, a description of how you sell and where growth stalls, and the marketing systems you use. Alongside your answers we record the campaign parameters in the link you arrived on (such as utm_source and gclid), the page you first landed on, the referring site and the country your connection comes from.
• Client report access. Private reports are protected by Cloudflare Access. To open one, you enter your email address and receive a one-time code. Only addresses we have authorized for that report can sign in.

Information collected automatically

• Usage and device information through Google Analytics and Microsoft Clarity, described in the next section: pages viewed, time on page, approximate location derived from your IP address, browser, device type, screen size, and the site that referred you.
• Interaction recordings through Microsoft Clarity on kaldera-analytics.com: mouse movement, clicks, scrolling and the page as you saw it. Clarity masks text you type into form fields.
• Server and security logs kept by Cloudflare, our hosting provider, including IP address, request details and timestamps, used to deliver the sites and protect them from abuse.

We do not ask for, and ask you not to send us, sensitive personal information such as health, financial account or government identification details.

[ 03 ]Cookies and analytics

Cookies are small files stored by your browser. We use them only to understand how the sites are used and to control access to private reports. We do not use advertising cookies, and we do not use these tools to show you ads.

Private client reports load no analytics or recording tools. On the Funnel Audit site, analytics does not load if your browser sends a Do Not Track signal.

[ 04 ]How we use it

• To reply to your messages and inquiries, assess whether we can help, and prepare and carry out engagements.
• To give authorized people access to their private reports.
• To understand which pages, content and channels are useful, and to improve the sites.
• To keep the sites secure and available, and to detect spam and abuse.
• To meet legal obligations and to establish or defend legal claims.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

For visitors in the European Economic Area, the United Kingdom and Switzerland, we rely on these legal bases: taking steps you request before entering into a contract (inquiries and engagements); our legitimate interests in running, understanding and securing our sites and in responding to business contacts; your consent where the law requires it for cookies and similar technologies; and compliance with legal obligations.

[ 05 ]Who processes it

We use a small number of service providers who process information on our behalf and under their own privacy terms:

• Cloudflare hosts both sites, protects them, and runs the access controls for private reports. Cloudflare privacy policy.
• Google provides Google Analytics. Google privacy policy, and how Google uses information from sites that use its services.
• Microsoft provides Clarity. Microsoft privacy statement.
• Our email and business tools, which store correspondence and inquiry details so we can respond and manage our work with you.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of the business, in which case this policy continues to apply to the information transferred.

[ 06 ]Retention

We keep correspondence and inquiry details for as long as needed to respond, to run any engagement that follows, and to meet legal, tax and accounting obligations, after which we delete them. Analytics and recording data is kept by Google and Microsoft under the retention settings of those services, and server logs by Cloudflare under its standard periods. Access to a private report ends when the engagement no longer needs it.

[ 07 ]Your choices

• Block or delete cookies in your browser settings. The sites work without them, except that private reports need the access cookie.
• Opt out of Google Analytics on every site with Google's opt-out browser add-on.
• Use a content blocker or private browsing to limit analytics and recording tools.
• Ask us to stop contacting you at any time, and we will.

[ 08 ]Your rights

Depending on where you live, you may have the right to ask us to confirm whether we hold personal information about you; to access, correct or delete it; to receive a copy in a portable format; to restrict or object to how we use it; and to withdraw consent you have given, without affecting earlier use. You will not be treated differently for exercising these rights.

To make a request, email [email protected]. We may need to confirm your identity before acting on it, and we will respond within the time the applicable law requires. If you are in the European Economic Area, the United Kingdom or Switzerland, you may also complain to your local data protection authority.

[ 09 ]Transfers and security

We are based in the United States, and our service providers may process information in the United States and other countries. Where information about visitors from the European Economic Area, the United Kingdom or Switzerland is transferred, those providers rely on recognized safeguards such as the EU-U.S. Data Privacy Framework or standard contractual clauses.

We protect information with encrypted connections, access controls on private reports, and by limiting who can see it. No method of transmission or storage is completely secure, but we take reasonable steps to protect what you share with us.

[ 10 ]Children

Our sites and services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

[ 11 ]Changes and contact

We will update this policy when our practices change and revise the date at the top. Significant changes will be noted on this page.

Questions or requests: [email protected]
Kaldera Analytics, Boise, Idaho