Privacy

Who this is about

ImpaqtLab builds websites, funnels and CRM systems for authors, speakers and coaches, and hands the finished build over to the client. This page covers the website at impaqtlab.com and nothing else. Once you are a client, what happens to your information is governed by the written agreement for your build, not by this page.

ImpaqtLab is [the registered company name, its legal form and the State it is registered in]. It is responsible for the information described below.

Our postal address is [the business address].

The business is run from the United States, in Florida, and part of the team works from the Philippines. That second half matters for your information rather than for trivia, and the section below says exactly how.

What the form collects

There is one form on this site, at the foot of the home page. It asks for three things and stores nothing else you type:

• Your work email address.
• Which of the four markets you picked: author, speaker, coach, or something else.
• Which package you picked, or that you are not sure yet.

When you send it, three more things are attached to the submission:

• The date and time you sent it.
• The page you sent it from.
• A two letter country code. Our host works that out from your IP address and passes us the country only. The address itself never reaches us and is never stored beside your submission.

There is also a hidden field on the form, named as though it wants your company. It is a trap for automated submissions, invisible to people and to screen readers alike. Anything that fills it in is discarded.

What this site does not do

This is a static site and it runs no third party scripts. The list below is not a policy we intend to keep. It is a description of what is in the code:

• No cookies. The site sets none of any kind, including its own.
• No analytics. No Google Analytics, no Plausible, no Fathom, nothing equivalent.
• No advertising or conversion pixels. No Meta pixel, no LinkedIn tag, no ad network.
• No session recording, no heatmaps, no scroll tracking.
• Nothing is written to your browser storage, so nothing recognises you on a second visit.
• No accounts and no logins. There is nothing here to sign in to.
• No payment is taken on this site, so card details never reach it.

Because there are no cookies and nothing to track, there is no cookie banner. A banner asking you to consent to nothing would be theatre.

Who sees a request

Opening a page here involves three parties, and each is worth being specific about.

Our host

The site is served by Cloudflare Pages. Like every web host, Cloudflare handles the request and keeps its own server and security logs, which include IP addresses. That processing is Cloudflare's own, under its own terms. We do not get a copy of those logs.

Google Fonts

The typeface on this site, Poppins, is loaded from Google's font service. Your browser therefore makes a request to fonts.googleapis.com and fonts.gstatic.com when a page opens, and Google receives your IP address and browser details as part of it. This is the only request this site makes to anyone other than our own host. If that matters to you, it can be removed by serving the font from our own domain instead.

Where a submission goes

A submitted form is passed straight to [the system we use to answer enquiries, named plainly]. Nothing is stored on this website.

Nothing collected here is ever sold, rented, or handed to a data broker or an advertising network. There is no circumstance in which that changes.

Where in the world this happens

We are two people in two countries. The business is based in the United States, in Florida, and part of the team works from the Philippines. When you send the form, the person who reads your enquiry and writes back may be in either place.

So your email address is handled in the United States and in the Philippines. Neither country is the other's, and privacy law in one is not privacy law in the other. We would rather say that plainly than let a US address on a US website imply your information never leaves the country, because it does.

In practice this is one work email address, one market and one package, read by one of two people so they can answer you. It is not moved anywhere else, not stored on this website, and not passed to anyone beyond what the section above already describes.

Why we hold it, and for how long

We use your email address to reply with a build plan and a quote, and to have the conversation that follows. That is the reason you gave it to us and it is the only reason we need it.

[Whether we send you anything other than a reply, and how you stop it.] Whatever that answer is, anything we send you that is not a direct reply will carry a working unsubscribe link and our postal address, and one click will be the end of it.

[How long we keep an enquiry.]

One thing has a definite lifetime, and it is worth stating because it is the only place an IP address is held at all. To stop a single machine flooding the form, the endpoint counts submissions per address for one hour, then deletes the count automatically. It is never attached to your submission and it is never used to identify anyone.

Your rights

Ask us and we will tell you what we hold about you, correct it, or delete it. Ask us to stop using it and we stop. You do not have to explain why, we will not make it difficult, and asking will not affect a quote or a build.

Being specific about why: the United States has no single national privacy law, and the state laws that do exist, Florida's own Digital Bill of Rights among them, only bind businesses above size thresholds measured in tens of millions of dollars of revenue or hundreds of thousands of consumers. A business this size is nowhere near any of them. That is a reason those laws do not compel us, not a reason to behave as though the rights they describe are unreasonable, which is why the paragraph above is written as a promise rather than as compliance.

If we have got this wrong, tell us and we will fix it. You are also free to complain to a data protection regulator, and you do not need to come to us first.

Children

This site is for people running a business. It is not aimed at children, it is not for anyone under 13, and we do not knowingly collect anything from a child. If we find that we have, we delete it. If you are a parent and believe your child sent us something, write to us and it will be gone the same day.

Keeping it safe

Every page is served over HTTPS. The site carries a content security policy and a set of security headers that stop it being framed, sniffed, or made to load code from anywhere else. Nothing you send is stored on this website: the form passes a submission on and keeps no copy. That is the strongest protection available, because the safest database is the one that does not exist.

Changes

When this page changes, the date at the top changes with it. There is no archive of earlier versions yet. When there is enough history for that to be worth keeping, there will be.