Privacy Policy

Overview

Compton Consulting (“we,” “us,” or “our”) is a one-person consulting practice based in Columbus, Ohio. This policy explains what information this website collects, how information is handled during client engagements, and what rights you have over it. The short version: we collect the minimum needed to reply to you and to know whether the site works, we run no advertising or cross-site tracking, and we never sell anything to anyone.

Information This Site Collects

When you contact us

The contact form collects your name, email address, subject, message, and the category you select. That submission is stored in a private database and emailed to us so we can reply. It is used only to respond to your inquiry and to keep a record of the conversation — never for a marketing list, and never shared or sold.

Site analytics

We use Vercel Web Analytics to see which pages get visited. It is cookieless and aggregate: it reports page views, referrers, and coarse country-level location, and does not build a profile of you or follow you to other websites. There is no Google Analytics, no advertising pixel, and no retargeting tag on this site.

Abuse prevention

To stop automated spam, the contact form counts recent submissions against a one-way cryptographic hash of the sender's IP address. The IP address itself is not stored, and the hash cannot be reversed back into one. These counters exist only to enforce a short rate-limit window.

Server logs

Our hosting provider keeps standard technical request logs for reliability and security. We do not use them to identify or profile visitors.

What We Do Not Do

• No advertising, retargeting pixels, or ad identifiers
• No cross-site or behavioral tracking
• No selling, renting, or trading of personal information — ever
• No mailing list you did not explicitly ask to join
• No tracking cookies (session cookies are used only in the private, sign-in-protected area of this site)

Client Information During Engagements

Consulting work necessarily involves access to client systems, documents, and business information. That material is treated as confidential and is governed by the signed engagement agreement, which takes precedence over this page. In practice:

• Client information is used only to perform the engagement, and is not disclosed to anyone else.
• Access to client systems is requested at the lowest level that will do the job — read-only wherever possible — and access is relinquished when the engagement ends.
• Credentials are never stored in plain text, and we will always prefer that you provision a separate account for us over sharing an existing one.
• We are happy to work under your NDA. If you have one, send it.

Published examples of our work

Sample deliverables published on this site are drawn from real engagements with the client's identity and identifying details removed. A client is never named, and no engagement is described in identifiable form, without that client's explicit permission.

Artificial Intelligence Tools

We build with AI, so it is worth being direct about it. AI-assisted tooling is used in our own development work, and confidential client data is not submitted to third-party AI services without the client's agreement.

If your data cannot go to a third-party AI service at all, say so before the engagement starts and the work will be designed around that constraint. To be equally direct about the limit: we do not currently take on private or self-hosted AI deployments, so if that turns out to be what you need, we will tell you and point you elsewhere rather than take the engagement.

Service Providers

This site relies on a small number of third parties, each handling data on our behalf under their own privacy terms:

• Vercel — website hosting and analytics (privacy policy)
• Google Firebase — database storage for contact submissions (privacy policy)
• Resend — delivery of the notification email for your submission (privacy policy)

Data Retention

Contact submissions are kept as long as they remain useful as a record of the conversation, and are deleted on request. Rate-limit counters expire automatically within minutes. Client engagement material is retained per the engagement agreement and returned or deleted on request at its conclusion.

Your Rights

Depending on where you live, you may have the following rights over your personal data:

• Access — request a copy of the data we hold about you
• Correction — request that inaccurate data be corrected
• Deletion — request that your data be deleted
• Portability — request your data in a portable format
• Objection — object to how your data is processed

Residents of the European Economic Area and the United Kingdom have these rights under the GDPR; California residents have comparable rights under the CCPA. Email us at the address below and we will action the request — there is no form to fill out and no account to create.

Children's Privacy

This is a business-to-business site and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact us and it will be deleted promptly.

Changes to This Policy

We may update this policy from time to time. When we do, the effective date at the top of this page is revised. Material changes affecting an active engagement will be raised with that client directly rather than left to a page update.

Contact

Questions about this policy, or want to exercise your data rights? Reach us at:

Looking for the GemID app's privacy policy? It lives at gemid-labs.com/privacy.