Privacy policy.

Who is responsible

I am: Wilkins Ndwiga, doing business as The Nomad Ops. I decide what is collected and how it is used. For anything on this page, write to wilkins@thenomadops.co.

What I collect

• Contact form. Your first and last name, email address, company, the type of inquiry, an annual revenue band and whatever you write in the message.
• Resource requests. Your email address and which resource you asked for.
• Calendly bookings. When you book the Operations Leak Audit or an intro call, Calendly collects your name, email address, the time you chose and your answers to the booking questions, and passes them to me.
• Email. If you write to me, I keep the correspondence.
• Analytics, only after you consent. If you accept the analytics banner, Google Analytics records the pages you view, the approximate region you are in, your device and browser type, and how you arrived. If you decline, or if no banner is shown, Google Analytics is not loaded at all.
• Server logs. The web host records standard technical data for every request, such as IP address, time and the page requested, to keep the site running and secure.

I do not ask for sensitive information through this site, and I ask that you do not send any. The site is not directed at children under 16 and I do not knowingly collect their information.

Why I collect it

• To reply to you and to judge whether I can help your business.
• To send the resource you asked for. I do not add you to a mailing list unless you ask.
• To hold the call you booked and to prepare for it.
• To see, in aggregate, which pages are read, so that I can improve the site.
• To keep the site secure and to meet legal obligations.

For visitors covered by the GDPR, the legal bases are your consent (analytics), steps taken at your request before a possible contract (inquiries and bookings), and my legitimate interest in running and securing a business website.

Who processes it

A small number of service providers handle information on my behalf, and only to provide their service to me:

• The web host (Cloudflare), which serves the site and keeps server logs.
• The form automation provider (n8n), which receives contact form and resource submissions and delivers them to my inbox.
• Calendly, which runs the booking pages and the booking calendar on the audit page.
• Gumroad, which runs checkout for the digital products. When you click a buy button, Gumroad's checkout opens over the page and Gumroad collects your name, email address and payment details under its own privacy policy. I receive your name, email address and what you bought.
• Google Analytics, only if you consent.
• My email provider, for correspondence.
• Google Fonts, which serves the typefaces and receives your IP address when a page loads.

I do not sell personal information. I do not share it for cross-context behavioral advertising, and I do not give it to anyone for their own marketing. I would disclose information only if the law required it.

Cookies

This site sets no cookies of its own. Your answer to the analytics banner is saved in your browser's local storage so that you are not asked on every page. Google Analytics sets cookies only after you accept. To withdraw consent, clear this site's data in your browser; the banner returns and nothing loads until you answer it. Calendly sets its own cookies on its booking pages, and Gumroad on its checkout, each under its own policy.

The booking calendar on the audit page is Calendly's, shown inside the page: Calendly's frame and its cookies load only after you click to open the calendar.

How long I keep it

• Inquiries, resource requests and booking details: up to 24 months after our last contact, unless we go on to work together, in which case they become part of the client record.
• Analytics data: the retention period set in my Google Analytics account, after which Google deletes it automatically.
• Server logs: the period set by the web host.

Ask me to delete your information sooner and I will.

Your rights

Wherever you live, you can ask me to tell you what I hold about you, give you a copy, correct it or delete it, and you can withdraw consent to analytics at any time.

If you live in a US state with a privacy law, such as California, Colorado, Connecticut, Utah or Texas, those laws give residents the rights to know, access, correct and delete, and to opt out of the sale or sharing of personal information. I do not sell or share it, so there is nothing to opt out of, and I will honor the other requests regardless of whether the law applies to a business of my size. I will not treat you differently for making a request.

If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR also gives you the rights to restrict or object to processing, to data portability, and to complain to your local data protection authority.

How to request deletion

Email wilkins@thenomadops.co from the address you used, with the subject line "Delete my data". I will confirm it is you, delete what I hold, ask the providers above to do the same where they hold a copy, and confirm to you within 30 days.

Where the information is processed

I work remotely with clients in the United States and elsewhere, and the providers above store data in the United States and other countries. If you contact me from outside the United States, your information will be transferred to and processed in the United States and other countries whose laws may differ from yours.

Security

The site is served over HTTPS, and access to my inbox and accounts is limited to me. No method of transmission or storage is perfectly secure, so I cannot promise absolute security.

Changes

If this policy changes, the new version is posted here with a new effective date.