Measured, like everything else

Caprenna LLC ("we") operates caprenna.com. We collect the minimum this site needs to work and to tell us whether it is working. We run no advertising pixels, sell no personal information, and share nothing with data brokers.

What we collect, and for how long

• Contact form submissions — name, firm, email, firm size, and your message, sent to our inbox so we can reply. Kept for up to 3 years after our last exchange, then deleted, unless we're actively working together.
• Attribution context — if you arrived from a link with campaign tags (UTM parameters), we keep those tags, the referring page, and your landing page in a first-party cookie for 90 days, and attach them to your enquiry if you send one. This tells us which of our own marketing worked. It identifies a campaign, not a person.
• Analytics — with your consent where consent is required, we use Google Analytics 4 and Microsoft Clarity to understand how the site is used (pages read, links clicked, where visitors struggle). Clarity is configured to mask everything typed into any field. Analytics event data is retained for 14 months.
• Cookieless traffic counts — Cloudflare Web Analytics counts visits without cookies or persistent identifiers. There is nothing to opt out of because it stores nothing on your device.
• Server logs — our host (Cloudflare) records standard request logs (IP address, user agent) for security and debugging, on Cloudflare's standard rolling retention.

What we don't do

• No sale or sharing of personal information — to anyone, for anything.
• No advertising or social media pixels anywhere on this site, including the contact form and thank-you page.
• No session recording of form fields — inputs are masked before anything is stored.
• No processing of sensitive personal information, and no knowingly collected data from anyone under 18.

Your choices

• Global Privacy Control. If your browser sends the GPC signal, we honor it automatically — no click required, no confirmation screen. Analytics that would otherwise run by default is switched off for you.
• Consent settings. Where a consent banner appears, "reject" is one click and equal in prominence to "accept," and you can reopen your settings at any time via the Your privacy choices link in the footer of every page.
• Access, correction, deletion. Email hello@caprenna.com and we'll confirm what we hold about you, correct it, or delete it — within 30 days, without requiring an account or a form. You may use an authorized agent; if we decline a request we'll say why, and you can appeal by replying to that decision.
• Do-not-track vs GPC. We treat the older DNT signal the same way we treat GPC: as an opt-out.

Visitors in the EU and UK

Nothing non-essential runs before you consent. The lawful basis for the contact form is our legitimate interest in answering you; for analytics, it is your consent, which you can withdraw as easily as you gave it. We have no establishment in the EU/UK; data you send us is processed in the United States. If that framework matters to your enquiry, tell us and we'll accommodate.

Who processes data on our behalf

Named, because you should know what runs on a site: Cloudflare (hosting, delivery, cookieless analytics), Google (analytics, only with consent), Microsoft (behavior analytics, only with consent, inputs masked), Resend (delivery of contact form email), Microsoft 365 (our mailbox). Each acts under terms restricting use to our instructions.

Questions or complaints

hello@caprenna.com reaches the two people who run the firm. We answer within one business day. This page is reviewed at least every 12 months, and whenever the law or our practices change.