Privacy & GDPR notice
How Cambermast handles personal data
We only gather the business data needed to respond, deliver training, run experiences, and
celebrate client success. This notice summarizes how Cambermast stores, secures, and deletes the
information you share with us across email, meetings, and online tools. If we ever need new data
points, we will explain the purpose and retention before collecting anything.
Who controls your data
Cambermast LLC is the data controller for submissions on cambermast.com. We are based in
San Francisco, California, USA. Reach us any time through the contact page.
Cambermast LLC also does business as Bill Talks AI (BillTalksAI.com) and The Occasional Developer
(mainly a YouTube property). All data collected under those names is governed by this notice unless a
Project-specific agreement states otherwise.
We review this page whenever we add a new form, vendor, or program so you always know which data
flows we rely on.
Information you share with us
We collect only the business details you provide when you submit a request - typically your name, work email, organization, topic, and the context you want us to address. We use that information solely to answer questions, scope work, and coordinate next steps.
All submissions are handled in Cambermast-controlled systems secured with encryption and
access limited to the small team that needs the information.
Events, surveys, testimonials, and future forms
Whenever we host an event, ask for survey input, or invite testimonials, we limit each form to the fields required to run that experience. Optional fields are clearly marked, and any new form will describe its purpose before you hit submit. We never repurpose those responses for unrelated marketing without asking first.
All submissions are handled in Cambermast-controlled systems secured with encryption and
access limited to the small team that needs the information.
We keep each record only as long as it helps us progress your request, deliver contracted work, or
meet legal obligations such as accounting rules. When something is no longer needed - or if you ask
us to remove it - we delete or anonymize the data.
Legal bases for processing
Responding to inquiries and planning work
Legitimate interest & pre-contractual steps (GDPR Art. 6(1)(f) and 6(1)(b))
When you contact us about training or advisory services, we process your details so we can reply, schedule meetings, and prepare proposals.
Delivering paid engagements
Contractual necessity (GDPR Art. 6(1)(b))
If you hire Cambermast, we process participant rosters, billing contacts, and project files to deliver the work outlined in our agreement.
Testimonials, surveys, and marketing opt-ins
Consent (GDPR Art. 6(1)(a))
We only publish testimonials, send optional marketing updates, or reuse quotes when you have clearly opted in. You can withdraw consent whenever you like.
Tools and partners we use
Cambermast relies on a small number of trusted tools and service providers to run our website,
communicate with clients, deliver training, and accept payments. These providers only receive the
information needed to do their job and are required to protect it under contractual privacy
safeguards.
The list below covers the main services we use day to day. From time to time, we may use additional
tools for a specific project, pilot, or event. When that happens, we apply the same privacy
standards described on this page.
Google Workspace. Used for business email, calendars, shared documents, and internal collaboration related to
training and advisory work.
Google Forms. Used occasionally for surveys, intake forms, or event-related questions. Each form is limited to
the information needed for its stated purpose, and responses are stored in Cambermast-managed
systems.
Cal.com. Optional scheduling tool you can use to book time with us. Personal data is shared only if you
choose to schedule a meeting and is used solely for coordination.
Zoom and Google Meet. Used for workshops, office hours, and project sessions. Names, email addresses, and audio or
video streams are used only during the call.
Mailchimp. Used for occasional mailing lists or event follow-ups when you opt in. Email addresses and
preferences are stored in Mailchimp solely to send the communications you requested.
Substack. Hosts our newsletter. If you subscribe, Substack stores your email address and analytics about
opens/clicks so we can tailor content and honor unsubscribe requests.
Lu.ma. Used for some training or community events so attendees can register, receive reminders, and add
calendar invites.
Stripe. Processes payments and course registrations securely. Cambermast does not store or process full
payment card details.
Google Analytics. Loaded only if you allow analytics cookies. We use anonymized and aggregated usage data to
understand which pages are helpful and to improve site navigation.
Cloudflare Turnstile. Helps protect our forms from spam and automated abuse by issuing a short-lived verification token
during submission.
Large language models (LLMs). Used in limited cases to validate, clean, or enrich customer-provided data before or after a
project. Inputs are minimized, processed under confidentiality, and retained only as long as
required for the task.
If we introduce a new tool that materially changes how personal data is processed, we will update
this page before using it.
Cookies, consent, and analytics
Cambermast only sets two types of browser storage: essential security tokens that protect our
forms, and optional analytics cookies that measure site performance. Nothing loads until you see
the consent banner the first time you visit.
Functional protection
Cloudflare Turnstile may set a short-lived verification cookie only while you submit a form
so we can block spam and automated attacks. It expires quickly and is required to deliver
your message.
Optional analytics (requires consent)
If you select “Allow analytics,” we load Google Analytics 4 and it may create the _ga and _ga_<container> cookies for up to 13
months. We anonymize IP addresses, disable Google signals and ad personalization, and rely on
the data only to understand which pages help visitors most.
Your consent choice is saved locally as cambermast-consent-v1 so we remember it until
you change it. You can reopen the banner through the “Cookie preferences” link in the site footer, from
this page, or by contacting us via the contact page.
International transfers
Cambermast is based in the United States, so information you provide may be processed on U.S.-hosted systems. When EU, EEA, or UK personal data moves to the United States we implement appropriate safeguards such as vendor standard contractual clauses or Data Privacy Framework commitments where available.
If we add a new vendor that processes EU, EEA, or UK data outside those regions, we will update this
page and the underlying contracts before enabling the integration.
We rely on Standard Contractual Clauses and each vendor's participation in the EU-U.S. Data Privacy
Framework (where available) to keep cross-border transfers lawful.
Your rights under GDPR
Know & access
Request a copy of the data we store about you, including raw form submissions, email history, and live testimonials.
Correct or delete
Ask us to fix inaccurate information or delete your contact history, testimonial, or any other personal data.
Withdraw consent
Change your mind about having a testimonial published or opt out of future marketing follow-ups at any time.
Complain to an authority
If you live in the EU, EEA, or UK you may lodge a complaint with your local supervisory authority in addition to contacting Cambermast.
Send any request through the contact page and we will acknowledge it within two business days.
Make a data request
Whether you reached out for help, registered for something, or shared feedback, you're always in
control. Tell us what to change or remove and we'll confirm in writing once it's done.
Send your request through the contact page and we will acknowledge it
within two business days and complete the response within 30 days unless law requires a faster
turnaround.
Contact Cambermast