Cambermast logo

Privacy & GDPR notice

How Cambermast handles personal data

We only gather the business data needed to respond, deliver training, run experiences, and celebrate client success. This notice summarizes how Cambermast stores, secures, and deletes the information you share with us across email, meetings, and online tools. If we ever need new data points, we will explain the purpose and retention before collecting anything.

Who controls your data

Cambermast LLC is the data controller for submissions on cambermast.com. We are based in San Francisco, California, USA. Reach us any time through the contact page.

Cambermast LLC also does business as Bill Talks AI (BillTalksAI.com) and The Occasional Developer (mainly a YouTube property). All data collected under those names is governed by this notice unless a Project-specific agreement states otherwise.

We review this page whenever we add a new form, vendor, or program so you always know which data flows we rely on.

Information you share with us

We collect only the business details you provide when you submit a request - typically your name, work email, organization, topic, and the context you want us to address. We use that information solely to answer questions, scope work, and coordinate next steps.

All submissions are handled in Cambermast-controlled systems secured with encryption and access limited to the small team that needs the information.

Events, surveys, testimonials, and future forms

Whenever we host an event, ask for survey input, or invite testimonials, we limit each form to the fields required to run that experience. Optional fields are clearly marked, and any new form will describe its purpose before you hit submit. We never repurpose those responses for unrelated marketing without asking first.

All submissions are handled in Cambermast-controlled systems secured with encryption and access limited to the small team that needs the information.

We keep each record only as long as it helps us progress your request, deliver contracted work, or meet legal obligations such as accounting rules. When something is no longer needed - or if you ask us to remove it - we delete or anonymize the data.

Legal bases for processing

  • Responding to inquiries and planning work

    Legitimate interest & pre-contractual steps (GDPR Art. 6(1)(f) and 6(1)(b))

    When you contact us about training or advisory services, we process your details so we can reply, schedule meetings, and prepare proposals.

  • Delivering paid engagements

    Contractual necessity (GDPR Art. 6(1)(b))

    If you hire Cambermast, we process participant rosters, billing contacts, and project files to deliver the work outlined in our agreement.

  • Testimonials, surveys, and marketing opt-ins

    Consent (GDPR Art. 6(1)(a))

    We only publish testimonials, send optional marketing updates, or reuse quotes when you have clearly opted in. You can withdraw consent whenever you like.

Tools and partners we use

Cambermast relies on a small number of trusted tools and service providers to run our website, communicate with clients, deliver training, and accept payments. These providers only receive the information needed to do their job and are required to protect it under contractual privacy safeguards.

The list below covers the main services we use day to day. From time to time, we may use additional tools for a specific project, pilot, or event. When that happens, we apply the same privacy standards described on this page.

Google Workspace. Used for business email, calendars, shared documents, and internal collaboration related to training and advisory work.

Google Forms. Used occasionally for surveys, intake forms, or event-related questions. Each form is limited to the information needed for its stated purpose, and responses are stored in Cambermast-managed systems.

Cal.com. Optional scheduling tool you can use to book time with us. Personal data is shared only if you choose to schedule a meeting and is used solely for coordination.

Zoom and Google Meet. Used for workshops, office hours, and project sessions. Names, email addresses, and audio or video streams are used only during the call.

Mailchimp. Used for occasional mailing lists or event follow-ups when you opt in. Email addresses and preferences are stored in Mailchimp solely to send the communications you requested.

Substack. Hosts our newsletter. If you subscribe, Substack stores your email address and analytics about opens/clicks so we can tailor content and honor unsubscribe requests.

Lu.ma. Used for some training or community events so attendees can register, receive reminders, and add calendar invites.

Stripe. Processes payments and course registrations securely. Cambermast does not store or process full payment card details.

Google Analytics. Loaded only if you allow analytics cookies. We use anonymized and aggregated usage data to understand which pages are helpful and to improve site navigation.

Cloudflare Turnstile. Helps protect our forms from spam and automated abuse by issuing a short-lived verification token during submission.

Large language models (LLMs). Used in limited cases to validate, clean, or enrich customer-provided data before or after a project. Inputs are minimized, processed under confidentiality, and retained only as long as required for the task.

If we introduce a new tool that materially changes how personal data is processed, we will update this page before using it.

Cookies, consent, and analytics

Cambermast only sets two types of browser storage: essential security tokens that protect our forms, and optional analytics cookies that measure site performance. Nothing loads until you see the consent banner the first time you visit.

  • Functional protection

    Cloudflare Turnstile may set a short-lived verification cookie only while you submit a form so we can block spam and automated attacks. It expires quickly and is required to deliver your message.

  • Optional analytics (requires consent)

    If you select “Allow analytics,” we load Google Analytics 4 and it may create the _ga and _ga_<container> cookies for up to 13 months. We anonymize IP addresses, disable Google signals and ad personalization, and rely on the data only to understand which pages help visitors most.

Your consent choice is saved locally as cambermast-consent-v1 so we remember it until you change it. You can reopen the banner through the “Cookie preferences” link in the site footer, from this page, or by contacting us via the contact page.

International transfers

Cambermast is based in the United States, so information you provide may be processed on U.S.-hosted systems. When EU, EEA, or UK personal data moves to the United States we implement appropriate safeguards such as vendor standard contractual clauses or Data Privacy Framework commitments where available.

If we add a new vendor that processes EU, EEA, or UK data outside those regions, we will update this page and the underlying contracts before enabling the integration. We rely on Standard Contractual Clauses and each vendor's participation in the EU-U.S. Data Privacy Framework (where available) to keep cross-border transfers lawful.

Your rights under GDPR

Know & access

Request a copy of the data we store about you, including raw form submissions, email history, and live testimonials.

Correct or delete

Ask us to fix inaccurate information or delete your contact history, testimonial, or any other personal data.

Withdraw consent

Change your mind about having a testimonial published or opt out of future marketing follow-ups at any time.

Complain to an authority

If you live in the EU, EEA, or UK you may lodge a complaint with your local supervisory authority in addition to contacting Cambermast.

Send any request through the contact page and we will acknowledge it within two business days.

Make a data request

Whether you reached out for help, registered for something, or shared feedback, you're always in control. Tell us what to change or remove and we'll confirm in writing once it's done. Send your request through the contact page and we will acknowledge it within two business days and complete the response within 30 days unless law requires a faster turnaround.

Contact Cambermast