Privacy notice · Updated 2026-10-08
What we keep, and why.
What the forms collect
Your name, email, and company, the reason you picked, your answers to the three short questions before it, and anything you type in the message box. If you take the readiness check, we also get your answers. The check never asks for system names, network details, or Controlled Unclassified Information. Please don't enter them.
To keep out spam without a CAPTCHA, your browser solves a small math puzzle before a form sends. It runs on this site alone, uses no cookies, and sends nothing about you.
Where it goes
Each form sends one email to Lawson Cyber through Microsoft Azure Communication Services, which processes it in the United States. It arrives in Lawson Cyber's Google email. The same details are also stored in Lawson Cyber's private customer records system, hosted on Microsoft Azure in the United States. For the readiness check, that record holds your result and top gaps, not each answer. Only Lawson Cyber can read the email or the record. We use them to reply to you and to prepare any work you ask for.
Site logs
Microsoft Azure Application Insights records that a form was sent, whether the email went through, whether the record was stored, and the approximate city it came from. It doesn't record your name, email, message, or full network address, and it keeps these records for 30 days. To stop abuse, the form's server also holds your network address in memory for up to 10 minutes. It isn't stored anywhere.
Ad click IDs
If you arrive from an ad, the link can carry a click ID and campaign tags, such as gclid or utm_source. Your browser keeps them for the visit and adds them to the form you send, so we can see which ads bring real conversations. Today we send nothing back to ad platforms, the site loads no ad-platform scripts, and it sets no tracking cookies.
Ad conversion measurement
To see whether a Google ad led to a request, we plan to use Google Ads conversion tracking on the page you reach after you send a form (the thank-you page), and only there. Until we turn it on, it is not on the site. Once it is, that page will load Google's tag, which can set cookies and tells Google that a form was sent after an ad click, along with the ad click ID. It never receives your name, email, company, or message. The tag does not load on any other page, including the forms. You can limit this with your browser's cookie settings or your Google Ad Settings.
What we don't do
We don't sell your details, and we don't share them with anyone beyond the services named above. There is no mailing list. We don't add you to anything you didn't ask for.
How long we keep it, and removing it
We keep your messages and your record while we're working together, or for up to 3 years after we last heard from each other, and then delete them. To have them deleted sooner, send a note through the contact form and ask us to delete your messages. We will confirm when it's done.