Privacy Policy.

Who we are

THMPSN Digital is a principal-led SEO and AI search practice based in Chicago, Illinois, founded by Jonathan Thompson. This policy covers the website at thmpsn.digital. It does not cover client work performed under a separate signed agreement, which has its own confidentiality terms.

What we collect

When you fill in the form

The form asks for your name, work email, website, and a short message. Only name and email are required. When the form is submitted, our server also records the time of submission and the two-letter country code that Cloudflare derives from your connection. We do not ask for, want, or store payment details, government identifiers, or passwords anywhere on this site.

While you browse

If analytics are active for you, we collect the ordinary things analytics collect: pages viewed, how you arrived, approximate location, device and browser, clicks on buttons and outbound links, and how far down a page you scroll. Microsoft Clarity additionally records a playback of your session, meaning mouse movement, scrolling, and clicks. Clarity masks text input by default, so what you type into the form is not captured in those recordings.

What actually runs on this site

Anything that runs in your browser is named here, because you have a right to know who is being given access to your visit:

• Google Tag Manager loads the two analytics tools below. It is the only script this site loads directly.
• Google Analytics 4 for traffic and behaviour reporting.
• Microsoft Clarity for session recordings and heatmaps.
• Cloudflare hosts and serves the site, and provides the Turnstile check on the form that keeps bots out. Turnstile is a privacy-preserving alternative to a CAPTCHA and does not track you across sites.

What you send through the form is handled on our servers by an email delivery provider and stored in a private spreadsheet, both operated by established vendors under their own security terms. We describe those by category rather than by name, which is what data protection law asks for, and we are glad to tell you exactly who they are if you ask.

We do not run advertising pixels, remarketing tags, or social tracking of any kind.

Cookies and your consent

Nothing that sets an analytics cookie runs until consent is resolved. How that resolves depends on where you are, because the law differs:

• In the EEA, the UK, and Switzerland, analytics stay off until you choose. You will see a banner, and if you ignore it, nothing is set.
• Everywhere else, analytics are on by default, which is lawful in those places. You can still turn them off at any time using Your privacy choices in the footer.

We honour Global Privacy Control. If your browser sends a GPC signal, analytics stay off and you will not be shown a banner, wherever you are. That is treated as a binding opt-out, not a suggestion.

Your choice is remembered in your browser's local storage, not in a cookie we read on the server. Clearing site data resets it.

Where your information goes

Form submissions go to our email inbox and to a private spreadsheet that only we can open. That is the entire distribution list. Analytics data sits with Google and Microsoft under their own terms. We do not sell personal information, we do not share it with advertisers, and we do not add you to a mailing list because you contacted us.

How long we keep it

Google Analytics is set to a 14-month retention window. Microsoft Clarity retains data according to Microsoft's own schedule, which is currently about a year. Form submissions we keep for as long as we may need them as a business record, and you can ask us to delete yours sooner.

Your rights

If you are in the EEA or the UK, you have the right to access, correct, delete, restrict, or object to our use of your personal data, and to receive a copy in a portable format. Our legal basis is consent for analytics, and legitimate interest for responding to an inquiry you sent us.

If you are in California, you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we honour Global Privacy Control as an opt-out signal. We will not discriminate against you for exercising any of these rights.

To exercise any of them, use the contact form and say what you want done. We will not ask you to create an account to make a request.

Children

This is a business-to-business site and it is not directed at children. We do not knowingly collect information from anyone under 16.

Security

The site is served over HTTPS. Credentials for the services above are held as encrypted secrets and are not present in the site's source code. No method of transmission over the internet is perfectly secure, and we will not claim otherwise.

Changes to this policy

If we change what runs on this site, we will update this page and the date at the top. Material changes to how we handle your information will be described here rather than quietly edited in.

Contact

Questions, corrections, or requests go through the contact form. A person reads it and replies within one business day.