Privacy Policy

Overview

Two Anchors LLC (“Two Anchors,” “we,” “us,” or “our”) operates the website at twoanchors.co. This Privacy Policy explains what information we collect when you visit the site or contact us, how we use and share it, and the choices and rights you have. It applies to the website only; consulting and coaching engagements are governed by the separate written agreement we sign with each client.

By using the site, you agree to the practices described here. If you do not agree, please do not use the site.

Information We Collect

Information you give us directly. When you submit the contact form, we collect your name, email address, the content of your message, and — if you arrived from a specific package or service page — which offering you were asking about.

Information collected automatically. When you visit the site, our analytics providers record standard usage data such as pages viewed, referring page, approximate location derived from your IP address, device and browser type, and interactions like button clicks. Some of this is tied to a randomly generated identifier stored in your browser so repeat visits can be recognized.

Error monitoring and session replay. We use an error-monitoring tool to catch and diagnose site problems. For a subset of visits — every session in which an error occurs, plus a small random sample of others — it also records a replay of on-screen activity (page structure and interactions, not a video). Our product analytics tool separately records its own replay of on-screen activity for a sample of visits, for the same diagnostic purpose. In both cases, text and media are masked by default. Both replays are treated as a non-essential feature under “Cookies and Analytics” below; the underlying error reporting itself is essential to keeping the site working and secure and is not affected by that choice.

Security data. To protect the contact form from abuse, we use Google reCAPTCHA, which collects hardware and software information (such as device and application data) and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

We do not ask for or knowingly collect Social Security numbers, government ID numbers, payment card numbers, precise geolocation, or special categories of data through the site.

How We Use Information

We use the information we collect to:

• Respond to your inquiries and follow up about working together.
• Operate, maintain, and secure the website.
• Understand how the site is used so we can improve its content and structure.
• Detect, prevent, and address spam, abuse, and technical problems.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it for third-party advertising or share it with third parties for their own marketing.

Legal Bases for Processing

Where the EU/UK GDPR applies, we rely on the following legal bases: your consent (for non-essential analytics, where required); our legitimate interests in operating and improving the site and keeping it secure; and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

Cookies and Analytics

The site uses a small number of browser storage entries and cookies. Some are strictly necessary for the site to function. Others support analytics and the session replay described above, which we use in aggregate to see what’s working, diagnose problems, and improve the site. A small banner tells first-time visitors about this and links to the choice described below.

By default, non-essential analytics and session replay run for every visitor. If your browser sends a “Global Privacy Control” (GPC) signal, we detect it automatically and turn both off for you before they load — you won’t see the banner, and nothing further is required on your part. If your browser doesn’t send that signal, you can still decline non-essential analytics and replay at any time using the “Cookie Preferences” link in the site footer; your choice is remembered on that device until you change it or clear your browser storage. Declining does not affect the essential error monitoring described above. We treat both a detected GPC signal and an explicit decline through that link as a valid request to opt out of any “sharing” of personal information as that term is defined under California law.

How We Share Information

We share personal information only as described below:

• Service providers. We use Google Firebase (website hosting and contact-form processing), Google reCAPTCHA (spam protection), Google Analytics (site analytics), PostHog (product analytics), Sentry (error monitoring and, for a subset of sessions, screen-activity replay), and Resend (delivering the email notification generated when you submit the contact form). These providers process data on our behalf under contracts that limit their use of it to providing services to us.
• Legal and safety. We may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers. If Two Anchors is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

Data Retention

We keep what you send us for as long as needed to respond and maintain a record of our correspondence, and then for a reasonable additional period for recordkeeping, dispute resolution, and enforcing our agreements — typically no longer than three years after our last contact, unless a longer period is required by law. Where the shorter automatic deletion described below applies, it applies first. Analytics and error-monitoring data is retained according to each provider’s own standard retention settings.

Inquiry information you submit through our forms — what you told us about your situation and the record of that inquiry — is deleted automatically after approximately 30 days when it has not led to an engagement. Your contact record is treated differently: your name, email address, and which consents you gave are kept past that 30 days, so that if you come back later you aren’t a duplicate stranger to us, and so we can show what you did and did not agree to. Contact information tied to an active or completed engagement is retained as needed for that engagement, within the periods described above. You can ask us to delete your contact record at any time — see “Your Privacy Rights” below.

Assessment and Marketing Consent

Requesting the free W.A.Y.S. worksheet requires only your email address to deliver it. Signing up for occasional updates and writing is a separate, optional choice — checking it is never required to receive the worksheet.

Data Security

The site is served over HTTPS, and contact-form submissions are transmitted to and stored with our hosting provider using access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities as required by law.

Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• The right to know what personal information we have collected about you and how we use and share it.
• The right to request a copy of your personal information.
• The right to request that we correct inaccurate personal information.
• The right to request that we delete your personal information, subject to legal exceptions.
• The right to opt out of the “sale” or “sharing” of personal information — note that we do not sell or share personal information as those terms are commonly understood.
• The right not to receive discriminatory treatment for exercising any of these rights.

To exercise any of these rights, email us at support@twoanchors.co with the details of your request. We will verify your request by confirming control of the email address associated with it, and we will respond within the timeframe required by applicable law. You may use an authorized agent to submit a request on your behalf, subject to verification.

If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

Children’s Privacy

The site is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

Third-Party Links

The site may link to third-party websites or services that we do not control. This Privacy Policy does not apply to those sites, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any site you visit.

International Visitors

Two Anchors is based in the United States, and the information we collect is processed and stored in the United States. If you access the site from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be highlighted on this page. Your continued use of the site after an update means you accept the revised policy.

Contact Us

Questions, concerns, or requests about this Privacy Policy or your personal information can be sent to Two Anchors LLC at support@twoanchors.co. Two Anchors LLC is located in Northern California, USA.