What we collect. Plain English.

Who runs this site

Bulwark Black LLC. Registered in Spokane, WA. Owner-operator: Albert LaScola. Questions about your data go tosupport@bulwarkblack.com.

What I collect, and when

• Browsing. Standard web-server logs (IP address, user agent, requested URL, and timestamp), used for security and debugging. I also use Google Analytics to see which pages get read and how people find the site. It sets its own cookies and sends usage data to Google. I do not run advertising pixels or ad trackers. When you explicitly accept analytics, I also send optional performance reports to Google Analytics about loading speed, responsiveness, and layout stability. These reports contain metric values and ratings, a broad page category, and the canonical page URL without query strings or fragments—not page text, form entries, or referring URLs. They respect Do Not Track and Global Privacy Control and stop when you withdraw consent using Cookie choices.
• Optional interaction measurement. After an explicit analytics opt-in, I send Google Analytics an event when a contact or application form is accepted, a newsletter confirmation is requested, or you follow a link to one of our products. These events use fixed form and product labels and a public page URL without query strings or fragments. They do not contain your submitted answers, email address, page title, or referring URL. They respect Do Not Track and Global Privacy Control and stop when you withdraw consent. A newsletter request is not counted as a confirmed subscription.
• Newsletter signup. Your email address, signup time, confirmation status, and the form location used to request the subscription.
• Reviews. Display name, email, location, relationship to the work, star rating, and the review text. Your email is used to verify the review is real and is never published.
• Apply / Contact / Capability Statement forms. Whatever you choose to write into the form, plus your name, email, and any optional fields you fill in (phone, organization, location, budget range).
• Booking a call. Handled by Calendly. They collect your name, email, the call details, and (for paid calls) payment information via Stripe. See their policies linked below.

Where it goes

• My server. Reviews and form submissions are stored in a self-hosted PostgreSQL database. Newsletter signups are kept in a separate subscriber store on the server I administer personally. No third-party CRM, no marketing platform.
• Resend. I use Resend to send transactional emails (form confirmations, review approval notices to me). Resend processes the email address and message contents in transit. Seeresend.com/legal/privacy-policy.
• Google Analytics. I use Google Analytics, a Google service, to measure site traffic. It processes your IP address, device and browser details, and the pages you view, and sets analytics cookies in your browser. Seepolicies.google.com/privacy.
• Calendly + Stripe. Booking a paid advisory call sends your contact and payment info to Calendly and Stripe respectively. Seecalendly.com andstripe.com.
• Email. The mailbox at support@bulwarkblack.com runs on a server I operate. If you email me, the message lives in that mailbox until I delete it.

Cookies

Google Analytics sets cookies to measure site traffic, for example to tell a returning visitor from a new one. I do not set advertising cookies, and I do not use cookies to track you across other websites. In regions that require it, such as the EEA and UK, I ask for your consent before analytics cookies are set, and you can accept or decline with the banner. You can change your choice any time with Cookie choices in the footer. The booking widget at Calendly may set its own cookies when you book a call. That is governed by Calendly's policy.

How long I keep it

• · Web-server logs: 30 days, then rotated out.
• · Newsletter signups: until you unsubscribe.
• · Reviews: indefinitely (the published ones are the point of the page); rejected reviews are deleted on request.
• · Form submissions: until the engagement closes, then archived for tax / business-records purposes per Washington State requirements (generally 7 years).

Your rights

You can ask me to show you what I have on you, correct it, or delete it. I will respond within 30 days. Email support@bulwarkblack.com with "Privacy request" in the subject line.

If you are in California (CCPA) or the EU/UK (GDPR), you have additional rights to know what is collected, request portability, and object to processing. The same email address handles those requests.

Children

This site is not directed at children under 13 and I do not knowingly collect their information.

Changes to this policy

If I change how data is handled, I will update this page and bump the "Last updated" date at the top. Material changes that affect existing data will be sent to anyone on the newsletter list.

See also: Terms of Service.