Privacy & GDPR notice
How Cambermast handles personal data
We only gather the business data needed to respond, deliver training, run experiences, and
celebrate client success. This notice summarizes how Cambermast stores, secures, and deletes the
information you share with us across email, meetings, and online tools. If we ever need new data
points, we will explain the purpose and retention before collecting anything.
Who controls your data
Cambermast LLC is the data controller for submissions on cambermast.com. We are based in
San Francisco, California, USA. Reach us any time through the contact page.
Cambermast LLC also does business as Bill Talks AI (BillTalksAI.com) and The Occasional
Developer (mainly a YouTube property). We also run the Agile In Action podcast
(AgileInAction.com). All data collected under those names is governed by this notice unless
explicitly stated by the respective website's notices.
We update this page whenever we add new vendors or capabilities that may warrant a change.
Information you share with us
We collect only the business details you provide when you submit a request - typically your name, work email, organization, topic, and the context you want us to address. We use that information solely to answer questions, scope work, and coordinate next steps.
All submissions are handled in Cambermast-controlled systems secured with encryption and
access limited to the small team that needs the information.
Events, surveys, testimonials, and future forms
Whenever we host an event, ask for survey input, or invite testimonials, we limit each form to the fields required to run that experience. Optional fields are clearly marked, and any new form will describe its purpose before you hit submit. We never repurpose those responses for unrelated marketing without asking first.
All submissions are handled in Cambermast-controlled systems secured with encryption and
access limited to the small team that needs the information.
We keep each record only as long as it helps us progress your request, deliver contracted work,
or meet legal obligations such as accounting rules. When something is no longer needed - or if
you ask us to remove it - we delete or anonymize the data.
Legal bases for processing
Responding to inquiries and planning work
Legitimate interest & pre-contractual steps (GDPR Art. 6(1)(f) and 6(1)(b))
When you contact us about training or advisory services, we process your details so we can reply, schedule meetings, and prepare proposals.
Delivering paid engagements
Contractual necessity (GDPR Art. 6(1)(b))
If you hire Cambermast, we process participant rosters, billing contacts, and project files to deliver the work outlined in our agreement.
Testimonials, surveys, and marketing opt-ins
Consent (GDPR Art. 6(1)(a))
We only publish testimonials, send optional marketing updates, or reuse quotes when you have clearly opted in. You can withdraw consent whenever you like.
Tools and partners we use
Cambermast relies on a small number of trusted tools and service providers to run our website,
communicate with clients, deliver training, and accept payments. These providers only receive
the information needed to do their job and are required to protect it under contractual privacy
safeguards.
The list below covers the main services we use day to day. From time to time, we may use
additional tools for a specific project, pilot, or event. When that happens, we apply the same
privacy standards described on this page.
Google Workspace. Used for business email, calendars, shared documents, and internal collaboration related to training
and advisory work.
Google Forms. Used occasionally for surveys, intake forms, or event-related questions. Each form is limited to
the information needed for its stated purpose, and responses are stored in Cambermast-managed systems.
Cal.com. Optional scheduling tool you can use to book time with us. Personal data is shared only if you
choose to schedule a meeting and is used solely for coordination.
Zoom and Google Meet. Used for workshops, office hours, and project sessions. Names, email addresses, and audio or video
streams are used only during the call.
Mailchimp. Used for occasional mailing lists or event follow-ups when you opt in. Email addresses and preferences
are stored in Mailchimp solely to send the communications you requested.
Substack. Hosts our newsletter. If you subscribe, Substack stores your email address and analytics about
opens/clicks so we can tailor content and honor unsubscribe requests.
Lu.ma. Used for some training or community events so attendees can register, receive reminders, and add
calendar invites.
Stripe. Processes payments and course registrations securely. Cambermast does not store or process full
payment card details.
Google Analytics. Loaded only if you allow analytics cookies. We use anonymized and aggregated usage data to understand
which pages are helpful and to improve site navigation.
Cloudflare Turnstile. Helps protect our forms from spam and automated abuse by issuing a short-lived verification token
during submission.
Large language models (LLMs). Used in limited cases to validate, clean, or enrich customer-provided data before or after a project.
Inputs are minimized, processed under confidentiality, and retained only as long as required for
the task.
If we introduce a new tool that materially changes how personal data is processed, we will
update this page before using it.
Cookies, consent, and analytics
Cambermast only sets two types of browser storage: essential security tokens that protect our
forms, and optional analytics cookies that measure site performance. We can send limited,
cookieless analytics pings before you opt in, but we only create analytics cookies after you
select “Allow analytics.” If you decline analytics, we continue in cookieless mode and do not
store analytics identifiers in your browser.
Functional protection
Cloudflare Turnstile may set a short-lived verification cookie only while you submit a form
so we can block spam and automated attacks. It expires quickly and is required to deliver
your message.
Optional analytics (requires consent)
Before consent, we use Google Analytics 4 in a cookieless mode that avoids storing
identifiers in your browser. If you select “Allow analytics,” it may create the _ga and _ga_<container> cookies for
up to 13 months. We anonymize IP addresses, disable Google signals and ad personalization, and
rely on the data only to understand which pages help visitors most.
Your consent choice is saved locally as cambermast-consent-v1 so we
remember it until you change it. You can reopen the banner through the “Cookie preferences” link
in the site footer, from this page, or by contacting us via the contact page.
International transfers
Cambermast is based in the United States, so information you provide may be processed on U.S.-hosted systems. When EU, EEA, or UK personal data moves to the United States we implement appropriate safeguards such as vendor standard contractual clauses or Data Privacy Framework commitments where available.
If we add a new vendor that processes EU, EEA, or UK data outside those regions, we will update
this page and the underlying contracts before enabling the integration. We rely on Standard
Contractual Clauses and each vendor's participation in the EU-U.S. Data Privacy Framework (where
available) to keep cross-border transfers lawful.
Your rights under GDPR
Know & access
Request a copy of the data we store about you, including raw form submissions, email history, and live testimonials.
Correct or delete
Ask us to fix inaccurate information or delete your contact history, testimonial, or any other personal data.
Withdraw consent
Change your mind about having a testimonial published or opt out of future marketing follow-ups at any time.
Complain to an authority
If you live in the EU, EEA, or UK you may lodge a complaint with your local supervisory authority in addition to contacting Cambermast.
Send any request through the contact page and we will acknowledge it within two business days.
Make a data request
Whether you reached out for help, registered for something, or shared feedback, you're always in
control. Tell us what to change or remove and we'll confirm in writing once it's done. Send your
request through the contact page and we will acknowledge
it within two business days and complete the response within 30 days unless law requires a faster
turnaround.
Contact Cambermast