Privacy Policy

The rest of this page is the detail behind those sentences.

Who this applies to

This policy covers kennangle.com and the tools on it. It is written by Ken Nangle Consulting ("I", "me"), a business technology advisory practice based in Cloverdale, California.

If we go on to work together, the engagement is covered by a separate written agreement, and confidentiality terms in that agreement take precedence over anything here.

What I collect, and where it comes from

When you take the AI Readiness Survey

Your answers to fifteen questions about your company — size, systems, workflows, current AI use, and where you think the opportunities and risks sit. At the end, your name, company name, and email address, so I can send you the results and the North Bay AI Readiness Report.

When you use the Competitive Research tool

The zip code, business category, and search radius you enter, plus any free-text description you type. The tool sends that to Google Places to find businesses near you, then to Anthropic's Claude to write the analysis you read. I keep the query so I know which business categories people are looking for. If you ask for a copy of your results, I collect your name and email.

When you contact me or book a call

Whatever you put in the form or the booking page — usually name, email, company, and what you want to talk about.

When you fill in a feedback survey

Ratings and comments. Those forms don't ask for your name or email and I don't try to work out who you are.

Automatically, when you visit

Standard web request information — IP address, browser type, pages viewed, and the site that referred you. Three services run on every page and use that information: Google Analytics, which counts visits and shows me which pages get read; Google Ads, which tells me whether an advertisement produced anything; and a visitor identification service that estimates which company a visit came from, based on the network you're connecting from. That last one identifies organizations, not individuals, and it is often wrong. All three are described in Cookies and tracking below, including how to switch them off.

If you book and pay for a session

No card number is ever entered on kennangle.com. The deposit for a paid session is taken by the scheduling provider through its payment processor, on their pages, and what reaches me is your name, your email, and the fact that a payment succeeded. I never see or store your card details.

What I do with it

• Answer you, send you what you asked for, and prepare for our conversation
• Run the tools on the site
• Produce the anonymized North Bay AI Readiness Report
• Understand which business categories and questions people bring to the site, so I can write about the ones that come up most
• Measure whether my advertising reaches the right people, and show my ads to people who have already visited
• Keep the site working and secure

I don't send marketing email you didn't ask for, and I don't add you to a newsletter because you filled in a form.

Who else handles your information

I run a small practice, which means I use other companies' infrastructure. Each of these processes data on my behalf:

Each has its own privacy terms. I've chosen providers that don't require me to hand over more than the feature needs.

What I don't do

• I don't sell your information. Not to data brokers, not to vendors, not to anyone. One thing worth naming plainly rather than burying: because I advertise on Google, Google can use the fact that you visited to show you my ads elsewhere on the web. California law calls that "sharing for cross-context behavioral advertising." It is the only advertising use of your visit that exists here, no money changes hands over your data, and you can switch it off — see below.
• I don't publish individual responses. Nothing you tell me in the survey appears anywhere attached to you or your company.
• I don't use your business information to train AI models. The AI services above process your input to produce your output. They don't get to keep it as training data.
• I don't share your information with software vendors. I don't resell software and I'm not anyone's channel partner, so there is nobody to pass your name to.

The North Bay AI Readiness Report

This is worth its own section, because it's the one place your information becomes something public.

The report describes patterns across everyone who took the survey — how many companies in a given size band have a written AI policy, which functions people say consume the most manual effort, that sort of thing. It is built from combined answers, never from individual ones.

Before anything goes into it, your name, company name, and email are separated from your answers. The report never names a company, never quotes a response in a way that could identify one, and never breaks results down finely enough that a small group becomes identifiable. If a category has too few respondents to report safely, it doesn't get reported.

If you'd rather your answers not be included at all, email me and I'll exclude them. You'll still get the report.

How long I keep it

Identifiable information — your name, company name, email address, and the private notes I generate to prepare for a conversation with you — is cleared 24 months after you submit it. That happens automatically on a schedule, not when someone remembers to do it.

Anonymized aggregate data — your answers with the identifying information stripped off — is kept indefinitely, because that's what makes year-over-year comparison in the report possible. Once it's anonymized it can't be traced back to you, including by me.

Analytics and advertising data is held by Google on their retention schedule, not mine. I see it only as reports and audience counts, never as a list of people.

Clients are the exception: engagement records are kept for as long as the professional and tax reasons require, as described in the engagement agreement.

Your choices

You can ask me to:

• Tell you what I have. I'll send you everything associated with your email address.
• Correct it. If something's wrong, I'll fix it.
• Delete it. I'll delete it and confirm when it's done. Anonymized aggregate data can't be pulled back out, because there's nothing left in it that points to you.
• Leave you alone. Every email I send has an unsubscribe link, and you can just reply and ask.

Email me at [email protected]. There's no form and no verification hoop — I'll respond within a few business days.

California residents have specific rights under state privacy law, including the right to opt out of the sharing described above. My practice is small enough that those laws don't formally apply to it, but I extend the same rights to everyone anyway, because the alternative would be a worse answer to a reasonable question.

Cookies and tracking

The site uses a small number of cookies and similar technologies. Some make the site work and keep it secure. One belongs to the scheduling tool when you book. The rest are measurement and advertising, and they are worth naming individually:

• Google Analytics. Counts visits and shows me which pages get read and where people leave. I look at patterns, not people.
• Google Ads. I run search advertising. This tag tells me whether an ad produced anything, and it also allows Google to show you my ads again elsewhere on the web after you've been here. That is retargeting, and it is cross-site advertising. Saying otherwise would be inaccurate, so I'm saying it plainly.
• Apollo.io. Estimates which company a visit came from, based on the network you're connecting from. Organizations, not individuals, and often wrong.

How to switch these off

• Google's ad personalization is controlled from your own Google account at myadcenter.google.com. Turning it off stops the retargeting described above.
• Google Analytics can be blocked in every browser with Google's own opt-out add-on at tools.google.com/dlpage/gaoptout.
• All of it can be blocked by your browser's cookie and tracker settings, or by any content blocker. Nothing important on this site breaks if you do.

If you'd rather not think about any of this, using a browser that blocks third-party cookies by default handles most of it without you doing anything.

Security

Survey responses and lead data sit in managed infrastructure with encryption in transit and at rest. Access is limited to me. That said: no system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach ever affected your information, I would tell you directly rather than posting a notice and hoping you find it.

Children

This site is for business owners and managers. It isn't directed at anyone under 18, and I don't knowingly collect information from them.

Changes

If I change this policy, the date at the top changes and the current version is always at kennangle.com/privacy. If a change materially affects information I already hold about you, I'll email you rather than leaving you to notice.

Contact

See also the Terms of Use.