Privacy

This site has one form and no tracking. Here is exactly what happens to what you send me.

Effective September 15, 2026

Who is responsible

Audrey Tsang is the data controller for this website — meaning I decide what is collected and why. I am based in San Francisco, California.

For anything on this page, including a request to see or delete your information, write to privacy@audreytsang.co. That address exists for privacy questions and reaches me directly.

What I collect

Only what you type into the contact form, which is four things: your name, your email address, your message, and a link to your LinkedIn or website.

There is nothing else. No account to create, no payment details taken on this site, no files to upload, and no information bought or received from anyone else.

The message box asks what brings you here, and people sometimes share something personal in answering. You are not required to, and whatever you write is used only to reply to you and prepare for a conversation.

Why, and on what legal basis

To read your enquiry, work out whether we are a good fit, and reply to arrange an intro call. That is the only purpose.

Under UK and EU data protection law my legal basis is Article 6(1)(b) — taking steps at your request before entering into a contract. Where an enquiry does not lead to work together, the basis is Article 6(1)(f), my legitimate interest in responding to people who contact me about coaching.

I do not send marketing. You will not be added to a mailing list.

Who else sees it

Three companies handle your message on the way to me:

• Formspree receives the form submission and relays it to my inbox. They are based in the United States.
• Cloudflare hosts this website and provides its analytics. They are based in the United States.
• My email provider holds your message once it arrives, as it would any email you sent me.

They act on my instructions and are not permitted to use your information for their own purposes. I do not sell, rent or share your information with anyone else, and I never will.

Information leaving the UK and EU

Because Formspree and Cloudflare operate in the United States, a message sent from the UK or the EU is transferred there. Where that happens I rely on the Standard Contractual Clauses in my agreements with those providers to keep the information protected to the same standard it had when it left.

How long I keep it

If we do not end up working together, I delete your enquiry within two years. If we do, I keep our correspondence for as long as I am working with you and for a reasonable period afterwards, in line with my professional and tax obligations.

You can ask me to delete it sooner at any point, and I will.

Cookies and analytics

This site sets no cookies. It stores nothing on your device and uses no tracking pixels, no advertising networks and no social media trackers.

I use Cloudflare Web Analytics to see roughly how many people visit and which pages they read. It is built to work without cookies: it does not follow you between websites, does not build a profile of you, and does not store your IP address, which is used only in passing to tell which country a visit came from. What I see is a count, not a person.

Do Not Track

Some browsers can send a Do Not Track signal. This site does not track you in the first place, so there is nothing for that signal to switch off, and the site behaves the same either way.

Your rights

Wherever you are, you can ask me to show you what I hold about you, correct it, or delete it, and I will do it. If you are in the UK or the EU, data protection law also gives you the right to restrict how I use it, to object to my using it, to receive a copy in a portable form, and to withdraw consent where consent is what I relied on.

Write to privacy@audreytsang.co and I will respond within one month. There is no charge.

If you are in the UK or the EU and you think I have handled your information badly, you can complain to a data protection regulator — the Information Commissioner’s Office in the UK (ico.org.uk), or the supervisory authority in your country. I would rather you told me first so I can put it right.

If you are in California

California residents can ask me what categories of personal information I have collected and who I shared it with, and can ask me to correct or delete it. Those categories are the four listed above, and the recipients are the three companies named above. I have never sold or shared personal information for advertising, and I do not.

Changes

If I change how any of this works I will update this page and move the effective date at the top. If a change is significant and I hold your information at the time, I will email you about it rather than rely on you noticing.

Getting in touch

Questions about anything here, or a request about your own information: privacy@audreytsang.co.