Privacy policy

Who this policy covers

This policy applies to the Sonderence website and to the information we receive when you contact us, submit our intake form, book a call, or use our client portal.

Sonderence is the trade name of a sole proprietorship based in Sacramento, California. We are responsible for the information described here.

Privacy questions and requests go to elly@sonderence.com.

This policy does not cover what third-party services do on their own systems. Where those services are involved, we name them in section 06 and link to their policies.

Information we collect

Information you give us. The site takes no payments and has no newsletter signup. Information reaches us in these ways:

• Our intake form. When you ask to work with us, our form — powered by Fillout — collects your name, email address, and phone number, along with information about your business: its name, its general location (city and state, not a street address), a description of what the business does, its approximate revenue, and any other details you choose to add. You decide what to enter; the form is how a prospect reaches us.
• Booking a call. What you type into Calendly when you schedule a time — typically your name, email address, chosen time, and anything you add in the booking notes.
• Our client portal. If you become a client, you receive a link to create an account in our portal, which is hosted by Assembly. Signing in and using the portal involves your login details and whatever project information is exchanged there — which can include the kinds of business details listed above.
• Emailing us. Your email address, your name if you include it, and whatever you write.

The information you submit is stored by these providers on their own systems — Fillout for form submissions, Folk for the contact and company records we keep in our CRM, and Assembly for the client portal. We do not run a database of our own; we have no custom system storing this information outside those services.

Information collected automatically. When you load a page, our host and analytics receive standard request details: IP address, browser type and version, operating system, device type, approximate location at the country level, the referring page, and the date and time. This is ordinary web infrastructure data, generated by your browser rather than entered by you.

Business revenue and other business details are commercial information, not information about you personally. We do not ask for or collect Social Security numbers, financial account or payment card details, precise geolocation, biometric data, health information, or any other category treated as sensitive under state privacy law.

Analytics and behavioural data

We use Cloudflare Web Analytics. It measures which pages are viewed and how often, the referring source, the country a visit came from, and the browser, operating system and device type used. It also records page load performance.

It does not track clicks, scroll depth, mouse movement, or session recordings. It does not follow you from page to page as an identified individual, does not build a profile, and does not track you across other websites. The reporting we see is aggregate — counts and percentages, not people. Cloudflare samples a portion of page load events rather than measuring every one, so even those counts are estimates.

Cloudflare retains this analytics data for a limited rolling window — currently around 30 days — after which it is no longer available to us. [Confirm the current window in your Cloudflare dashboard before publishing.]

Cookies and similar technologies

Our own pages set no cookies for advertising or tracking. Cloudflare Web Analytics is cookieless: it does not write cookies, does not use localStorage or sessionStorage, and does not fingerprint your device. There are no advertising pixels and no analytics cookies.

Some features on the site are provided by third parties and may set their own cookies or use similar storage when you interact with them. In particular, our intake form is embedded from Fillout and loads when you open it, and following a link to Calendly, to the Assembly client portal, or to a social profile takes you to a service that operates under its own cookie policy. Those cookies are set by those providers, not by us, and are governed by their policies.

Cloudflare may also set a cookie at the network level to distinguish genuine visitors from automated traffic where security measures are triggered. That is a security function, not tracking, and it is not used for advertising.

Because our own pages use no advertising or tracking cookies, there is no cookie banner. You can clear or block cookies at any time in your browser settings.

How we use the information

We use what we receive to:

• Respond to your enquiry and follow up about working together
• Schedule, prepare for, and hold a conversation with you
• Keep and organise a record of our prospects and clients in our CRM — who we have spoken with, about what, and where things stand
• Provide and administer the client portal for clients we work with
• Understand in aggregate which pages are useful, so the site can be improved
• Keep the site available and protect it against abuse and attacks
• Carry out client work, where an enquiry becomes an engagement
• Meet legal, tax, and record-keeping obligations

We use the information internally, to run our business and track our prospects and clients. We do not send marketing emails, because we do not run a mailing list. We do not sell your information, we do not build advertising profiles, and we do not make automated decisions about you.

Third-party services

A small number of providers help run the site and the business. Each receives only what it needs, and each publishes its own privacy policy.

A few of these deserve a specific note:

Fillout and Folk. Our intake form is provided by Fillout. What you submit is stored by Fillout and then used to create a contact and company record in our CRM, Folk. Both hold this information on their own systems, under their own privacy notices, on our behalf. This is how we keep track of the people and businesses we may work with.

Calendly. Booking a call takes you off this site. Anything you submit there is collected by Calendly first, under Calendly’s own privacy notice, and then passed to us. We do not control how Calendly stores or processes it on its systems.

Assembly. Our client portal is a link that takes you to Assembly’s sign-in. Client accounts and any information exchanged in the portal are hosted by Assembly on its systems, under Assembly’s own privacy notice. We do not keep a separate copy in a database of our own.

Google Fonts. The site’s typefaces are served by Google. When a page loads, your browser requests them directly and Google receives your IP address as part of that request. We do not receive this information and do not use it.

Sharing and disclosure

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising.

We disclose information only in these narrow cases:

• To the providers listed above, so they can perform their function on our behalf
• Where required by law, legal process, or a valid government request
• To protect our legal rights, safety, or property, or to investigate fraud or a security issue
• To a successor, if the business is ever sold or transferred — in which case this policy would continue to apply until you were notified of any change

Retention

Intake submissions, enquiry emails, and booking records. Kept for as long as they are useful to the conversation they relate to, and generally no longer than two years from our last contact with you. At the end of that period they are deleted from our inbox, from the Fillout form’s records, and from our CRM (Folk).

Client records and portal accounts. Where an enquiry becomes an engagement, project records and your client portal account (hosted by Assembly) are kept for the duration of the work and afterwards as needed for tax and legal record-keeping. When an account is no longer needed, we can close it and remove the associated information.

Analytics. Retained by Cloudflare on its own schedule, described in section 03, and then gone. We keep no separate copy.

You can ask us to delete your information sooner. See section 09.

Your choices and rights

Access and deletion. Email elly@sonderence.com to ask what we hold about you, get a copy of it, have it corrected, or have it deleted. A request to delete covers the information we hold across our intake records (Fillout), our CRM (Folk), and, where applicable, your client portal account (Assembly). We usually respond within 30 days. We may need to confirm your identity first, and we will not treat you any differently for asking.

Opting out of analytics. There is no opt-out toggle, because Cloudflare Web Analytics does not identify you — there is no individual record to opt out of. If you would still rather not be counted, any standard content blocker will stop the analytics script from loading, and the site will work exactly as before.

Global Privacy Control. We honour GPC and similar browser opt-out signals. Since we do not sell or share personal information and use no tracking cookies, the signal has nothing to switch off here — but if that ever changes, it will be respected.

Email. We do not run a mailing list, so there is nothing to unsubscribe from.

State privacy rights

Several states — including California, Colorado, Virginia, Connecticut and Texas — give residents rights over their personal information. These laws apply to businesses above certain revenue or data-volume thresholds. Sonderence is a sole proprietorship and does not meet those thresholds, so these obligations are not mandatory for us. We extend the following rights to everyone anyway, whatever state you live in.

Categories we collect. In the language these laws use, we collect:

• Identifiers — name, email address, phone number, IP address
• Commercial and professional information — the business details you submit through our intake form, such as your business name, its general location, what it does, and its approximate revenue
• Internet or network activity — pages viewed, referring page, browser and device type

We collect no other statutory category, and no sensitive personal information as those laws define it.

Sale and sharing. We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not use or disclose sensitive personal information for any purpose requiring a right to limit. There is therefore no “Do Not Sell or Share My Personal Information” mechanism on this site, because there is nothing to opt out of.

Rights we honour. To know, access, correct, delete, obtain a portable copy, and be free from discrimination for exercising any of them.

How to submit a request. Email elly@sonderence.com with what you are asking for. An authorised agent may submit on your behalf with written proof of authorisation. If we decline a request, we will explain why, and you may reply to that decision at the same address.

Security

The site is served over HTTPS. We use reputable providers, protect our accounts with strong authentication, and limit access to information to what is actually needed to do the work.

That said, no method of transmission or storage over the internet is perfectly secure, and we cannot guarantee absolute security. Please do not send financial account details, government ID numbers, or health information by email.

Children

This site is not directed to children. We do not knowingly collect personal information from anyone under 13, and if we learn that we have, we will delete it promptly. If you believe a child has provided us with information, email us and we will take care of it.

Our Terms of Service separately ask that the site be used only by people 18 and over.

Changes and contact

We may update this policy from time to time. When we do, the revised version is posted on this page with new “Last updated” and “Effective” dates. Material changes take effect on the effective date shown. Checking this page occasionally is a good idea.

For privacy questions or requests: