Privacy

We collect the details you type into our forms so we can reply to you, plus privacy-preserving analytics that tell us which pages get read. We don't use advertising trackers, we don't sell or share your information, and we don't set any cookies on your browser. Ask us to delete your data and we will.

When you fill in our contact form, we receive your name, email address, and message, plus the optional company, service, and budget fields. We store that submission and email it to ourselves so we can respond. Applications to the Enhance Impactprogram additionally include your organization's name, type, contact person, and the descriptions you write about your work. Where we publish a standalone form, it collects the fields shown on that form and nothing else.

We use this only to reply to you and to keep a record of the conversation. It is never sold, rented, or used for advertising.

Our mailing list is double opt-in: after you enter your address we email you a confirmation link, and you receive nothing until you click it. Every email includes a one-click unsubscribe link that works immediately and permanently.

So we can tell whether our emails are actually useful, we record whether a message was delivered, opened, and whether its links were clicked. If an address hard-bounces or someone marks a message as spam, we suppress it automatically and never mail it again.

We count page views ourselves rather than handing your browsing to a third-party analytics company. For each view we record the page path, the site that referred you (the domain only, never the full URL), an approximate country and city derived from your connection, and your device type, browser, and operating system. We never record query-string parameters.

To count returning visitors without identifying anyone, we combine your IP address, browser identifier, the current date, and a private key into a one-way hash. Your IP address itself is never stored, the hash cannot be reversed back into one, and because the date is part of it, the value changes every day — so it can't follow you from one day to the next.

We set no cookies on visitors' browsers and our analytics are cookieless. The only cookie this site issues is the sign-in session for our own staff area, which visitors never receive.

Some parts of the site remember small preferences in your own browser's local storage — your light or dark theme choice, which notices you've dismissed, and which polls you've already answered. That information stays on your device, is never sent to us, and clearing your browser data removes it.

We keep the list of companies that touch your data as short as we can. Today it is: Netlify (hosting and content delivery), Supabase (the database that stores submissions), Resend (sending and delivering our email), and Upstash (a short-lived record of request counts per IP address, used purely to block spam floods). Each of these processes data on our behalf under their own agreements — none of them receive your information for their own marketing.

If we've enabled anti-spam verification on our forms, that check is performed by CloudflareTurnstile, which is designed to confirm you're human without profiling you.

Form submissions and email records are kept for as long as they remain useful for the relationship they belong to — typically the life of an enquiry or a client engagement — and we remove them when they no longer serve that purpose or when you ask. Analytics records are only useful in aggregate and are held for rolling reporting windows rather than tied to any individual. The abuse-prevention counters expire within minutes or hours by design.

You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it — email enhanceedge@gmail.comand we'll action it. You don't need an account or a specific legal basis to ask, and we won't make it difficult. To stop receiving email updates, use the unsubscribe link at the bottom of any of them — no need to contact us at all.

Everything is served over HTTPS, our forms are protected against automated abuse, and the database holding submissions is reachable only by our own server — never directly from a browser. No system is perfect, so if you believe you've found a security problem with this site, please tell us at enhanceedge@gmail.comand we'll look into it promptly.

This site is aimed at businesses and organizations, and we don't knowingly collect information from children. If you believe a child has sent us personal information, contact us and we'll delete it.

If we change what we collect or who processes it, we'll update this page and the date at the top. Material changes to how we use information you've already given us will be communicated directly where we can reach you.