How your data is handled.

Information collection

ColdFusion Café Consulting collects the information you voluntarily submit through contact forms, email correspondence, or the scheduling tool. The contact form requires your name, work email address, reason for writing, and message. Organization, CFML engine and version, primary concern, and approximate decision deadline are optional assessment details. The homepage assessment form asks for name, work email, and primary concern, with optional organization, engine and version, decision deadline, and message. Scheduling intake asks for name, work email, organization, engine and version, primary concern, and decision deadline. This information is used only to respond to your inquiry, send a guide link you requested, scope potential projects, and provide consulting services.

Please do not send credentials, system access, or specific vulnerability detail through the public form. If your situation involves an active security finding, book a call and we will arrange a secure channel first.

Data protection & confidentiality

We do not sell personal information. We do not share your contact details with third-party marketers or data brokers.

Client technical materials, architecture diagrams, and vulnerability disclosures are handled as strictly confidential. Such materials should be exchanged only through approved secure channels after a Mutual Non-Disclosure Agreement (MNDA) is executed, not through public website forms.

AI-assisted work. Part of the delivery method is AI-assisted: code archaeology, documentation, test generation, and vulnerability triage across large legacy codebases. Client code and client data are not used to train models. That work is covered by the same confidentiality terms as the rest of the engagement, and every production decision is reviewed by a person before it ships.

Third-party processors

This site is static HTML served from Amazon S3 through Amazon CloudFront. The following third parties are involved in operating it, and each processes information under its own privacy terms:

• Formspree — receives and forwards contact form submissions.
• Calendly — scheduling. The booking calendar is embedded on the booking page and loads from Calendly when you open that page. Doing so sets Calendly's own cookies in your browser and loads resources from Calendly's providers. If you would rather not load it at all, use the contact form or email instead — every route reaches the same place.
• Google Workspace — email delivery for correspondence.
• Amazon Web Services — hosting and content delivery, including standard server request logs.

There is no analytics or advertising tracking on this site. No analytics script, tag manager, advertising pixel, or cross-site tracker is loaded on any page, and no cookies are set by this site itself. If that changes, this section will be updated before the change ships.

Contact

If you have questions about how your data is handled, or wish to request deletion of your inquiry records, contact admin@coldfusioncafe.com.