Privacy Policy
This policy explains what this website collects, why it collects it, and who else ends up seeing it. We are a small managed IT company, not an advertising business. The short version: we collect what we need to answer your enquiry and to understand which marketing actually brings people here, and nothing beyond that.
Information you give us
Three forms on this site send information to us. Each one collects only the fields you can see on it:
Every submission also carries the short attribution summary described below, so we know which campaign or referral it came from. Each form contains a hidden field that a real visitor never sees; if something fills it in, we treat the submission as spam and discard it.
Please do not send passwords, account credentials, or confidential business information through these forms. They become ordinary email once they reach us, and email is not a secure channel.
Information collected automatically
Attribution. When you first arrive, a small script on the page records how you got here and keeps it for the rest of that browsing session: the page you landed on, the time, the hostname and path of the site that referred you, and any campaign tags in the address (utm_source, utm_medium, utm_campaign, utm_term, utm_content) or advertising click identifiers (gclid, gbraid, wbraid, fbclid, msclkid, li_fat_id). The first arrival in a session wins, so browsing around afterwards does not overwrite it.
That record lives in your browser's sessionStorage under the key stadtler_attr. It is not a cookie, it is not shared with anyone, and your browser discards it when you close the tab. None of it reaches us unless you submit one of the forms, and what is sent then is a single summary line such as "source=google · medium=organic · landing=/".
Analytics. Google Analytics 4 runs on every page, using measurement ID G-N7KD9HZ4LH. See the next section.
Server logs. Our web server, and the small API that handles the forms and the booking calendar, see your IP address as a normal part of answering a request, and the web server keeps standard access logs. The API also keeps recent request times per IP address in memory for about a minute so it can rate-limit abuse; that is never written to disk or to a database.
Cookies and analytics
This site sets no cookies of its own. The only cookies it causes are Google Analytics 4's — typically one named _ga and one named _ga_ followed by the measurement ID. They hold a random identifier for your browser so Google can tell a returning visit from a new one. We do not run advertising, remarketing, or ad-network tags on this site, and we do not sell data to anyone.
Besides page views, we ask Google Analytics to record a few interactions: clicking a phone number, clicking a call-to-action that jumps to a form, submitting the contact or business enquiry form, and completing a booking. Your campaign source, medium, campaign name and Google click identifier are attached to those events so we can tell which marketing works. The contents of your message, and the rest of what you type into a form, are never sent to Google.
We do not currently respond to browser "Do Not Track" signals, because there is no agreed standard for what a site should do when it receives one. The opt-outs below work regardless.
Who else receives your information
Three companies see some of this, each for a specific reason:
We do not sell personal information, and we do not share it with anyone else except where we are legally required to, or where we need to in order to protect the site from abuse.
How long we keep it
Form submissions arrive as email and stay in our Microsoft 365 mailbox for as long as we have a business reason to keep them — a lead we are still following up, or a record of work we did for you. Bookings stay in Wix Bookings and on the calendar they sync to.
Google Analytics data is kept for the retention period set on our Analytics property, after which Google deletes the user-level records; aggregate reporting remains. The rate-limiting record of your IP address in our API is gone within a minute. We do not build a separate marketing database out of this website.
Your choices
You can opt out of Google Analytics entirely by installing Google's opt-out add-on from tools.google.com/dlpage/gaoptout, or by blocking googletagmanager.com or analytics cookies in your browser or a content blocker. The site works normally with analytics blocked — nothing on it depends on Google Analytics loading.
Clearing site data for this domain in your browser removes the Google Analytics cookies and the attribution record. Closing the tab clears the attribution record on its own.
If you would like to know what we hold about you, have it corrected, or have it deleted, contact us using the details below and we will handle it — normally within 30 days. If you have already sent us an enquiry, telling us to delete it is enough; there is no account to close.
Security
The site is served over HTTPS, so what you type into a form is encrypted on its way to our server, and encrypted again on its way from there to Microsoft or Wix. The credentials for those services live only on our server and are never sent to your browser.
No system is perfect, and once a submission becomes an email it has the security properties of email. That is why the forms ask you not to include passwords, credentials, or confidential business information.
Children
This site is for businesses. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us something through this site, contact us and we will delete it.
Changes to this policy
If what the site does changes, this page changes with it, and the "last updated" date at the top will move. There is no archive of previous versions — the date is the best way to tell whether anything has changed since you last read it.
Contact us
Questions about this policy, or about information you have already sent us? Call or email and we will get back to you.