Privacy policy.

The short version

We collect two things: what you send us on purpose (contact forms and bookings), and basic information about how this site gets used so we can make it better. We do not sell your information, and we do not run advertising on this site.

What you send us

If you fill out the contact form, we receive the name, email address, and any details you type into it. We use that to reply to you and to talk about whether we are a fit for your operation. It reaches us by email and is kept in our normal business records.

When you book a consultation or Clonedock demo, HubSpot handles scheduling and stores the contact details you provide in our customer records. The appointment syncs to our Google Calendar. We use these details to arrange your meeting and follow up on your inquiry.

What we collect automatically

We use a small amount of analytics to see which pages get read and where visitors come from. We use Google Analytics for this measurement.

• Google Analytics. Measures page views, referring sites, rough location, device and browser details, and whether a visitor reaches the contact-form confirmation page. We also measure successful bookings, labeled by website and meeting type. Booking analytics do not include your name, email, phone number, or form responses. Google Analytics uses cookies or similar identifiers to distinguish visits. We use it to understand site performance, not to run advertising from this site.

Standard web server logs also record the usual technical details of a request, such as IP address and browser type.

The client portal

The client login area is deliberately excluded from all analytics on this site. No analytics or session recording runs there. Lab data belonging to our clients is not collected by this website.

Who it is shared with

We do not sell personal information. Information is handled by the service providers that make these sites work: Netlify (hosting), HubSpot (scheduling and customer records), and Google (analytics, email and calendar). These providers also process information under their own privacy terms. We share information beyond that only when the law requires it.

Cookies

On clonedock.com, optional Google Analytics stays off unless you choose to allow it. Declining analytics does not prevent booking. HubSpot runs the booking widget when you visit a booking page and may use its own cookies to provide scheduling. Google Analytics may set cookies or similar identifiers to tell repeat visits apart. You can block or clear cookies in your browser settings at any time, and the site will keep working normally.

Your choices

You can ask us what we hold about you, ask us to delete it, or ask us to stop using it, and we will do that. California residents have these rights under the CCPA and CPRA, including the right to opt out of any sale or sharing of personal information. We do not sell or share it in that sense, but the right stands either way. We will not treat you differently for asking.

Most browsers can send a Global Privacy Control signal, and you can turn on Do Not Track. You can also block or clear analytics identifiers in your browser settings.

How long we keep it

Contact form messages are kept as long as we have an active or prospective working relationship, and then removed on request. Analytics data is retained by the providers under their own retention schedules.

Contact

Questions about this policy, or a request to see or delete your information, go to Info@collectiveherb.com. We answer these ourselves.

This page describes our actual practices in plain language. It is not legal advice. If you need a policy reviewed for a specific regulation, have a lawyer look at it.