Privacy
What this site collects, and what it doesn’t.
The short version: no advertising, no sale of personal data, and no tracking you across the web. Analytics use cookies, run in the EU, and only after you say yes — decline and nothing is set. A form submission is forwarded to us by email rather than stored in a database. We use what you send only for what you sent it for. The details are below. Last updated 17 September 2026.
Analytics
Measured only if you agree.
We use PostHog to understand which pages are read, which links are used, and which campaigns bring people here. It runs in PostHog’s EU region, hosted in Frankfurt. Nothing starts until you choose.
- Nothing before you answer
- No analytics run and no cookie is set until you accept. Decline and none is set at all — the choice itself is remembered in your browser so we stop asking, and that is the only thing stored.
- Change your mind whenever
- Cookie choice in the footer of every page reopens the question. Declining after having accepted stops the measurement and clears the identifier it was using.
- What the cookies do
- They hold a random identifier so repeat visits are recognized as the same browser rather than counted as new strangers each time. They carry no name, no email address, and nothing you typed into a form.
- No session recording
- Session replay is switched off. Nobody watches a recording of your visit.
- No cross-site tracking
- Measurement is limited to this site. We do not follow you anywhere else, and no advertising network receives anything.
- Web addresses are cleaned
- Query strings are stripped from page and referrer addresses before anything is recorded, so a shared link that happens to carry personal information never lands in analytics. Campaign labels are the exception — the tags on a link from an advertisement or one of our emails are kept, so we can tell which campaign brought you here.
- EU data residency
- Analytics events are sent to and held in PostHog’s EU region, in Frankfurt, Germany.
Analytics run only on the production site — development and preview environments send nothing at all, and neither does a browser with JavaScript switched off, which never sees the question and never receives a cookie.
The contact form
Forwarded to a person, not stored in a database.
When you submit the contact form, what you wrote becomes an email to us. That is the whole system.
- The contact form
- Your name, email address, institution, role, your message, and your availability if you give it.
- The managed services enquiry
- The same, plus which Salesforce products you run, who administers them today, what prompted you to get in touch, and your timeline.
- Event registration
- First and last name, institution, email, dietary requirements, whether you are coming to the dinner, and whether you are bringing a guest.
- Dietary requirements, specifically
- We ask because we have to feed people. They can say something about your religion or your health, so we use them for catering and nothing else, and we delete them after the event.
- And which page you were on
- Every submission carries the page it came from and that page’s subject tag, so we know which of our writing is actually useful.
- Delivered by Resend
- Resend, a transactional email service, carries that email. It processes your submission for delivery and nothing more.
- A copy to our CRM, when configured
- The same email can be blind-copied to our customer relationship system so a message is not lost. Nothing else is sent anywhere.
- Used only for what you sent it for
- We answer your question, or we get you into the event. We do not sell your information, we do not share it for anyone else’s marketing, and we do not add you to a mailing list because you filled in a form.
- How long we keep it
- We keep enquiries for as long as they are useful to the conversation, which in practice means indefinitely unless you ask us to delete them. Ask, and we will. Dietary requirements are the exception — those go after the event whether you ask or not.
To have a submission removed, write to advisory@tondroconsulting.com — because submissions live in our mailbox rather than a database, removal is straightforward.
We do not advertise to you, track you across the web, or sell personal data.
That is not a policy concession — the site simply is not built to do any of it. No ad pixels, no third-party trackers, no data broker on either end.
Everything else
The other places your data can touch.
A complete list, because a privacy page that only covers the flattering parts is not one.
- Demo bookings run on Zoom
- Booking a demo happens on Zoom’s scheduler pages, and the session itself runs on Zoom. Zoom’s own privacy policy applies there, not this one.
- Typefaces are ours
- Fonts are served from this site rather than a font CDN, so reading a page does not hand your address to anyone else.
- Hosting
- The site and its contact endpoint are served from Microsoft Azure.
Your data, your call
What you can ask us to do.
Wherever you live, the same four requests work. Write to advisory@tondroconsulting.com and a person answers.
- Tell me what you hold
- We will tell you what we have and where it came from.
- Correct it
- If something is wrong, we will fix it.
- Delete it
- We will remove it from our mailbox and, where we have copied it, from our CRM.
- Stop using it
- We will stop, and we will confirm that we have.
We aim to respond within 30 days. There is no charge and you do not need an account. If you are in the EU, the UK or Switzerland and we have not dealt with you well, you can also complain to your national data protection authority.
Two more things
Where your data goes, and what this page is not about.
- We are a United States company
- Our mailbox and CRM are US-based, so contacting us from elsewhere means your message travels to the United States. Analytics are the exception: those stay in the EU.
- Client project data is not covered here
- When we work inside an institution’s Salesforce environment, that data belongs to the institution and is governed by our contract with them — not by this page. If that is your question, talk to us about contracting.
- This site is not for children
- It is written for people who work in higher education. We do not knowingly collect anything from under-16s; if you think a child has sent us something, email us and it goes.
Questions
Ask us about your data.
Privacy questions, corrections, or removal requests: advisory@tondroconsulting.com, or +1 512 883 9703. By post: Tondro Consulting, 111 Congress Avenue, Suite 500, Austin, Texas 78701, United States. A person answers, not a queue.