What we collect, and what we do with it.

This Privacy Policy explains how M38 Partners, a business name of Meraki Business Consulting LLC (“M38 Partners,” “we,” “us”), collects, uses and protects information when you visit m38partners.com (the “Site”) or contact us through it. By using the Site you agree to this policy. If you do not agree, please do not use the Site.

1. What we collect

Information you give us. The Site has three forms. All are optional.

• Contact form: your name, company, email address, store or site URL, what you are interested in, and your message.
• Needs assessment: your name, company, work email, and your answers, which include your business type, who runs your digital business, your biggest problem, the channels you sell through, an annual revenue band, and when you want the problem fixed.
• Free website audit: your name, company, website address, work email and the check you picked. To run the check we read the public pages of the website you give us, the same way a search engine does, and keep the result.

If you email us directly or book a call, we also receive whatever you choose to share with us there.

Information collected automatically. Like every website, our hosting and security providers keep standard server logs: IP address, browser and device type, the pages you visit, and the time of your visit. We use this to keep the Site running and secure.

Analytics. With your consent, we use Google Analytics 4 to understand how the Site is used: which pages are visited, how visitors arrive, roughly where in the world they are, what kind of device they use, and which links and forms they interact with. Google Analytics sets its own cookies and receives a truncated form of your IP address. We have switched off Google’s advertising features, so this data is not used for Google Signals, ad personalization or remarketing. We do not run advertising trackers, retargeting pixels or social media pixels on this Site.

When you submit a form we record that a submission happened, along with non-identifying context such as the revenue band you selected. We do not send your name, email address, company name or the text of your message to Google Analytics.

Cookies. The Site uses a small number of cookies. Two are essential and always on: a security cookie set by our content delivery provider, and a cookie named m38_consent that remembers your cookie choice for 180 days. Google Analytics cookies, which tell repeat visits apart and measure how the Site is used, are set only if you click Accept in the cookie banner; if you click Reject, Google Analytics does not load and no analytics cookies are set. You can change your choice at any time with the Cookie settings link in the footer. We do not use advertising or retargeting cookies. You can also block or delete cookies in your browser; the Site works normally either way.

2. How we use it

• To respond to your inquiry and to send you the assessment or audit results you asked for.
• To follow up with you directly about your inquiry or a potential engagement. The assessment page says you get your results and one follow-up from us, and that is what happens. We do not add you to a newsletter or marketing list without asking you.
• To run, secure and improve the Site, including understanding which pages and content are actually useful.
• To meet our legal obligations, and to establish or defend legal claims if we ever need to.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

3. Who we share it with

We share information only with service providers who help us operate the Site and communicate with you, and only for that purpose:

• Hosting and email: GoDaddy (website hosting) and Microsoft 365 (our business email).
• Transactional email: Brevo delivers the assessment and audit results emails and our internal notifications. Brevo may record whether an email was delivered, opened, and which links in it were clicked, so we know the results reached you.
• Security and performance: Cloudflare, which sits in front of the Site. When you submit the contact form, the needs assessment or the free website audit, Cloudflare Turnstile checks that the submission comes from a person and not an automated program. It looks at signals from your browser and device for that check only, and does not use them for advertising.
• Audit processing: the free website audit runs on Potcake, M38 Partners’ own audit software, hosted on Amazon Web Services in the United States. Your audit details go there to run the check and are not shared further.
• Analytics: Google Analytics 4, which measures how the Site is used. Google’s advertising features are disabled on our property, and we do not send it your name, email address or the text of your message.
• Scheduling: if you book a call, you do so through Google Calendar appointment scheduling, and Google’s privacy policy applies to what you enter there.

Each of these providers is bound by its own privacy and security commitments and may process data in the United States. We may also disclose information if required by law, or to protect the rights, safety or property of M38 Partners or others.

4. How long we keep it

Form submissions arrive as email and are kept as ordinary business correspondence for as long as we have a reason to: while we are in conversation with you, for the length of any engagement, and for a reasonable period afterwards for records. You can ask us to delete your information at any time (see section 7), and we will, unless we are required to keep it.

5. How we protect it

The Site is served over HTTPS. Access to our email and hosting accounts is restricted and protected with multi-factor authentication. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we take reasonable steps appropriate to the kind of information we hold.

6. Third-party links

The Site links to other websites, including Google Calendar appointment scheduling and the platforms we talk about. We are not responsible for their content or privacy practices. Their policies apply once you leave the Site.

7. Your choices and rights

• Follow-up: reply to any email from us with a request to stop and we will stop.
• Access, correction and deletion: email us at together@M38partners.com and we will tell you what we hold about you, correct it, or delete it.
• California residents have the right to know what personal information we collect, use and disclose, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under California law.
• Visitors from the EU, UK and similar jurisdictions: our legal basis for processing is your consent when you submit a form, and our legitimate interest in responding to inquiries and running the Site. You have the rights of access, rectification, erasure, restriction, portability and objection described above, and the right to complain to your local data protection authority.

We will respond to requests within thirty days. We may need to verify your identity before acting on a request.

8. Children

The Site is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.

9. Changes to this policy

If we change this policy we will update the effective date at the top of the page. Material changes will be noted here for a reasonable period. Your continued use of the Site after a change means you accept the updated policy.

10. Contact

Questions about this policy or about your information: together@M38partners.com.

M38 Partners is a business name of Meraki Business Consulting LLC. See also our Terms of Use.