The short version: this site runs one measurement tool, Google Analytics 4, loaded through Google Tag Manager, to see which pages people visit and where they came from. If you email us, we keep the thread like any professional inbox. We never sell your data. That's most of the policy; the rest is detail.
What this site collects today
Google Analytics 4 collects usage data: pages viewed, approximate location (city level), device and browser type, how you arrived (for example, a search engine, a social profile, or a link in an email we sent you), and interaction patterns like scrolling and outbound clicks. It uses cookies to distinguish visits. We use this to see which pages earn attention and which channels bring visitors, nothing more exotic than that. There are no advertising pixels and no ad retargeting on this site.
One caveat for accuracy: the site is served from Cloudflare's edge network, and like any host, Cloudflare's infrastructure processes standard technical data (such as IP addresses and browser information) to serve pages and protect against abuse. That happens at the hosting layer; we don't use it to identify or profile visitors.
Email and engagement data
When you write to [email protected], we receive your email address and whatever you send. We use it to reply, to deliver what you bought, and to keep a record of the engagement. If you become a client, engagement records (audit deliverables, invoices, correspondence) are kept for as long as they're useful to the work and as required for ordinary business and tax records.
- You won't be added to a marketing list just because you asked a question.
- Audit deliverables are prepared for you and shared with you, not published, not reused as marketing without your written approval.
- Access you grant to your ad or analytics accounts is read-only, used only to produce your deliverable, and you can revoke it the moment your audit is delivered.
Payments
Payments run through third-party processors (card, PayPal, Wise) on their own systems. We see the confirmation, not your card number. Each processor has its own privacy policy that governs what happens on their pages. No card is kept on file and nothing auto-renews.
Analytics: Google Analytics 4, active since August 1, 2026
What we never do
- Sell your personal information. Not to data brokers, not to "partners," not at all.
- Share your information except with the service providers needed to operate (hosting, email, payment processing), or if the law requires it.
- Publish anything about you or your accounts without your approval. That's the same proof policy that governs the rest of this site.
Your choices
Want to know what we hold about you, have it corrected, or have it deleted? Email [email protected] and we'll handle it directly. No forms, no runaround. We may keep records the law requires us to keep (invoices, for example) even after a deletion request.
Scope and audience
Barlo Digital serves US businesses; this site is business-to-business and not directed at children. This policy is written in plain English rather than statute-specific language. If your jurisdiction grants you specific privacy rights, email us and we'll honor the request wherever we reasonably can.
Changes
If this policy changes, the new version is posted here with a new effective date. Material changes (like analytics going live) get called out at the top, not buried.
Questions: [email protected]