Pogona Creative

Privacy Policy

Pogona Creative
Website: https://pogonacreative.com
Effective date: October 19, 2026
Last updated: October 19, 2026

This Privacy Policy describes how Pogona Creative (“Pogona,” “we,” “us,” or “our”), operated by David May, collects, uses, and shares information in connection with the Pogona Creative website and related contact or waitlist forms (the “Site”).

This is a practical notice for a small California-based marketing practice. It is not a substitute for advice from a licensed attorney. If something here conflicts with a signed engagement agreement, that agreement controls for that engagement.

1. Who we are

Pogona Creative is a marketing practice offering fractional CMO / marketing-leadership services, primarily for mission-driven organizations (for example nonprofits, higher education, associations, and place-based or community organizations).

Contact for privacy requests: [email protected]

Service area / governing context: United States; California and Los Angeles County are our primary business context.

2. Information we collect

Information you provide

When you contact us, request an intro, join a waitlist, or otherwise submit a form or email, we may collect:

  • Name
  • Email address
  • Organization and role
  • Organization type and size
  • Your role in the decision
  • Time zone
  • Website URL
  • Description of what you need
  • Timeline
  • Optional budget range
  • How you found us
  • Any other details you choose to include in a message

Alt contact (for example a plain email link if a form is unavailable) is treated the same way: content of the email and metadata necessary to reply.

Information collected automatically

The Site is hosted on Cloudflare Pages. Cloudflare’s hosting and CDN may automatically collect limited technical data such as:

  • IP address, approximate location derived from IP, browser type, device type
  • Pages viewed, referring URL, and timestamps
  • Security and request logs needed to operate and protect the Site
  • Network error reports sent to a.nel.cloudflare.com

Analytics and advertising: As of the effective date of this policy, we do not intend to run third-party advertising pixels or behavioral advertising trackers on the Site. If we later enable analytics, heatmaps, or similar tools, we will update this policy and, where appropriate, provide additional notice or choices before or when those tools are turned on.

Cookies and similar technologies

The Site may use cookies or similar technologies that are necessary to operate the Site, remember basic preferences, or protect security. If we add non-essential cookies (for example analytics), we will describe them here and adjust our notice/consent approach as needed for our audience and California commercial practice.

3. How we use information

We use the information above to:

  • Respond to inquiries and schedule or decline intro conversations
  • Prepare an org-specific intro plan (for example in Notion) when we decide a conversation may be a fit
  • Maintain a waitlist when we are not accepting new clients
  • Operate, secure, and improve the Site
  • Comply with law and enforce our Terms of Use
  • Send transactional messages related to your request (for example a reply or meeting logistics)

We do not use Site contact information to sell you third-party products. If we ever start a marketing email list beyond transactional replies, we will say so clearly and provide an unsubscribe for those messages.

4. How we share information (processors and others)

We do not sell personal information for money.

We may share information with service providers that process it on our behalf, for example:

  • Cloudflare (Cloudflare Pages hosting and CDN, including security and request logs, and network error reports sent to a.nel.cloudflare.com)
  • Google (for example Google Forms for Hire / waitlist submissions, and Google Workspace email if used to reply)
  • Notion (for org-specific intro plans after we review a submission)
  • Email and calendar tools used to communicate with you

These providers act under their own terms and privacy policies for their platforms. We ask them to use the information only to provide services to us.

We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer (for example sale or reorganization of the practice), in which case we will take reasonable steps so the recipient continues to protect the information consistently with this notice.

We do not sell or rent contact lists to brokers.

5. Retention

We keep inquiry and waitlist information only as long as needed for the purposes above: typically to complete the intro process, maintain a short waitlist, or keep ordinary business records of who contacted us. We may delete or anonymize older inquiries periodically. You can ask us to delete your inquiry data (see California rights below); we will honor that unless we need to retain something for legal or security reasons.

6. Security

We use reasonable administrative and technical measures appropriate to a small practice (access-limited form responses, account security on email and tools). No method of transmission or storage is 100% secure.

7. Children’s privacy

The Site is directed at organizations and professionals. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child submitted information, contact us and we will delete it.

8. California privacy rights (CCPA/CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act as amended by the CPRA, including rights to:

  • Know / access categories and specific pieces of personal information we collected about you
  • Delete personal information, subject to legal exceptions
  • Correct inaccurate personal information
  • Opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising (we do not sell personal information for money; we do not currently share for cross-context behavioral advertising as described in this policy)
  • Limit use of sensitive personal information (we do not seek sensitive personal information via the Hire form; please do not submit it)
  • Non-discrimination for exercising these rights

To exercise rights: email [email protected] with the subject line “Privacy request.” We will verify your request using information we already have (for example matching the email used to contact us) and respond within the timeframes required by law.

Categories we may collect in the last 12 months (as applicable): identifiers (name, email, IP); commercial / professional information you provide (organization, role, needs, optional budget); internet / electronic activity (Site usage logs if collected); inferences we might form from your message about fit (not sold).

Sources: you; automatic Site collection; processors listed above.
Business purposes: as in Sections 3–4.
Sale / share: we do not sell personal information. We do not share personal information for cross-context behavioral advertising as of this policy’s effective date.

9. Other jurisdictions

If you contact us from outside the United States, you understand that we and our processors may process information in the United States. If EU/UK GDPR becomes material to how we operate (for example a sustained EU client funnel), we will update this policy and our practices accordingly.

The Site may link to third-party sites (for example LinkedIn) or embed third-party forms (for example Google Forms). Those services are governed by their own privacy policies. Please review them before submitting information.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date will change when we post a revision. Material changes that affect how we handle already-collected information will be called out when practical (for example a short Site notice).

12. Contact

Questions or privacy requests: [email protected]

Let’s talk