What I collect, and what I do with it.

What I collect

Only what you hand me. There's no account to create and nothing hidden in the background collecting more than this:

• Contact form — your name, your company, your email, and the message you write.
• The Bottleneck Breaker — your name, company, and email, but only if you ask for the breakdown. You can take the quiz and see your result without giving me anything.
• Your Bottleneck Breaker answers — which of the fixed options you picked on each of the six questions, stored alongside your contact record so the conversation starts with context.
• Booking a call — whatever the scheduler asks for when you pick a time, plus the time you picked.
• Basic analytics — pages visited and which buttons got clicked, with no cookies and nothing that identifies you personally.

What I don't collect

No cookies for advertising. No third-party tracking pixels. No cross-site profiles. No fingerprinting. Nothing gets sold or rented to anyone, ever — not to data brokers, not to partners, not to anybody.

The analytics I do run are aggregate: how many people reached a page, how many started the Breaker, how many booked. It tells me whether the site works. It doesn't tell me who you are.

Where it goes

Your contact details and Bottleneck Breaker answers are stored in GoHighLevel, the customer relationship system HarvestFlow runs on. Calls are booked through a scheduler in that same system, which puts the meeting on my calendar.

The website is hosted on Vercel, which handles the analytics described above. That's the whole list — the site is deliberately built with few moving parts, and I don't add a vendor without a reason.

How I use it

To reply to you. To send the Bottleneck Breaker breakdown if you asked for it. To follow up about working together, and to prepare for a call so I'm not asking you questions you already answered.

If you gave me your email through the Breaker, expect a small number of follow-up emails about your result. Every one has an unsubscribe link, and using it stops them immediately.

How long I keep it

As long as there's a live reason to — an open conversation, an active engagement, or a legal or tax obligation. When there isn't, I delete it. If you want it gone sooner, ask and I'll delete it.

Your choices

Ask me and I'll tell you exactly what I have on you, correct anything wrong, or delete all of it. No forms, no process — email me. I'll do it and confirm when it's done.

Depending on where you live you may have a formal legal right to those things. I'd rather just do them for anyone who asks than argue about which rules apply.

Security, honestly stated

Form submissions travel over HTTPS, and API credentials live server-side and never reach your browser. The systems holding your data are run by established vendors with their own security programs.

That said: no one can promise perfect security, and I won't pretend otherwise. If something ever goes wrong in a way that affects your data, I'll tell you directly rather than bury it.

Children

This is a business-to-business site aimed at company owners. It isn't for anyone under 18, and I don't knowingly collect anything from them.

Changes

If this policy changes, the date at the top changes with it. Material changes get a note to anyone already on the list.