Privacy Policy

What we collect

You can read every page of this site without giving us anything. We collect personal information in exactly one place: the contact form.

• What you type. Your name, work email, optionally a phone number, and whatever you write in the message field.
• How you arrived. Campaign parameters (UTM source, medium, campaign, content, term) if the link you followed carried them.
• A hashed IP address. We store a one-way hash, not the address itself, and use it only to rate-limit and detect automated submissions.

We do not collect payment or card data anywhere on this site, and we do not knowingly collect information from children.

Analytics and cookies

When analytics are enabled, this site loads Google Analytics 4, which sets cookies and reports page views and basic device and location information to Google. We use it to understand which pages are useful, not to build a profile of you. We do not sell personal information, and we do not run advertising or remarketing pixels on this site.

Being direct about one thing: the site currently loads analytics without a consent banner, and browser “Do Not Track” signals do not change that. You can block analytics cookies in your browser, or use an extension, and the site will work normally.

How we use what you send

We use contact-form submissions to reply to you about the hiring needs you described, and to keep a record of the conversation. That is the whole purpose. We do not add you to a marketing list because you filled out the form, we do not share your information with third parties for their own marketing, and we do not use it to train models.

Where it goes and how long we keep it

Submissions are stored in our database and emailed to the Sonar team so someone can respond. Access is limited to people who need it to do that. We keep submissions for as long as we have an active or reasonably foreseeable business relationship with you, and we delete them on request.

Your choices

Email [email protected] and we will, without charging you or making it difficult: tell you what we hold about you, correct it, or delete it. If you are covered by the GDPR, the UK GDPR, or the CCPA/CPRA, those laws give you these rights explicitly — but we will honor the requests regardless of where you live.

Security

The site is served over HTTPS, credentials are held in server-side environment configuration rather than in the site’s code, and access to submissions is restricted. No system is perfectly secure, and we would rather say that plainly than imply a guarantee we cannot make.

Accessibility

We build toward the WCAG 2.1 Level AA success criteria. If any part of this site is difficult to use, tell us at [email protected] and we will fix it.

Changes and contact

If we change how the site handles information, we will update this page and the date at the top. Questions about anything here go to [email protected].