Privacy policy

What we collect

We collect the information you type into the contact form: your name, work email, company, role, a description of the workflow you want to discuss, optionally the systems and teams involved and the outcome you want, and optionally an indication of timing and engagement range. We also use standard web analytics, covered below, and short-lived abuse-prevention identifiers derived from network addresses and email addresses.

We do not ask for, and ask you not to send, patient information, credentials, confidential client material, or regulated records. The contact form says so at the point where it matters. If you send that kind of material anyway, tell us and we will delete it.

What we do with it

We read it, decide whether the work is something we can help with, and reply. That is the whole purpose. We do not sell it, rent it, or add you to a marketing list because you contacted us.

When online submission is enabled, inquiries are held in a delivery queue provided by Upstash and sent to HubSpot, our customer relationship management provider. We use email notifications to bring inquiries to our attention. If online submission is unavailable, the form explains this and offers email as an alternative.

Resend processes inquiry details to send notifications to our business inbox.

Vercel hosts this website and provides firewall and bot protection. Its security checks process network and browser signals to help prevent automated abuse before inquiries reach our delivery queue.

Analytics and cookies

This site runs Google Analytics 4, which sets cookies and collects usage data — pages viewed, approximate location derived from IP address, device and browser type, and how you arrived. Google processes this on our behalf. We use it to understand which pages are read, not to identify individuals, and we do not attempt to match analytics data to contact-form submissions. We count accepted online inquiries using an analytics event that contains no names, email addresses, inquiry text, or lead identifiers. A temporary marker in your browser session prevents the same acceptance being counted twice.

Browser controls and extensions that block analytics will work normally here. Nothing on this site requires those cookies to function.

How long we keep it

Contact details are removed from the delivery queue after the configured destinations confirm acceptance. Inquiries awaiting delivery or manual resolution remain in the queue until resolved, subject to the inquiry retention period below. Duplicate-prevention records without the inquiry text or contact fields expire seven days after delivery; abuse-prevention counters expire after one hour or 24 hours. We keep inquiries that do not become client relationships in our CRM and business inbox for 30 days from receipt. Email delivery records are subject to our provider's retention policy. You can request earlier deletion using the address below. Analytics retention follows the settings on our Google Analytics property.

Getting your data removed

Email peter@progenydig.com and ask. We will delete the inquiry and confirm when it is done. You do not need to give a reason, and you do not need to have been a client.