Privacy Policy
This policy explains what Charm and Strange Limited Liability Company ("Charm and Strange", "we") collects through charmandstrange.co and our related pages, how we use it, and the choices the law gives you. Charm and Strange Limited Liability Company is a Florida limited liability company and operates this website. You choose whether we use analytics cookies, our visitor ID and ad measurement: nothing beyond what the site needs to work is stored in your browser until you click "Accept", and refusing never stops you using the site.
Who we are
Charm and Strange Limited Liability Company, 7901 4th St N #37202, St Petersburg, FL 33702. Email hello@charmandstrange.co. Call (727) 594-0102.
What we collect
Information you give us. When you request an AI Opportunity Scan we collect your business website, work email, role, company size and, if you choose, your company name and phone number. Before you book a Time Audit we ask for your name, work email, team size and, if you choose, how you heard about us. Our scheduling provider then collects your name, email and the answers you give.
Phone numbers and texts. Your phone number is optional. We will only call or text you using automated technology, prerecorded or AI-generated voices if you tick the separate consent box, which is never pre-ticked and is not a condition of any purchase. You can withdraw consent at any time by replying STOP or telling us.
Calculator inputs. When you use the Hours Back calculator we record the roles, task types, area and the totals it shows, never your name or contact details.
Chat. When our AI assistant (the Concierge) is available, it answers from this website and our published answers and can show you the booking button. It cannot send email, save your contact details or pass them to our CRM, and it does not look anything up on the internet. On our service pages it can show you a short form to leave your email for our founder: you fill it in and send it yourself, and what you send (your email and, if you shared them in the chat, your industry, role and team size, plus the conversation so far) goes to our CRM and to our founder, who may email you about it. We automatically remove email addresses, US-format phone numbers and card numbers that you type in the chat before the message is processed or stored, so please don't type other contact or payment details there. Your conversation is sent to our AI model provider to produce the replies. The assistant is an AI and can make mistakes; our founder confirms everything on the call.
Information collected automatically. We record how visitors use the site: pages viewed, buttons clicked, the page you arrived on, the website or campaign that sent you (UTM tags and, if you clicked one of our Google ads, Google's click identifier: gclid, gbraid or wbraid), approximate location from your IP address, device and browser type, and page-speed measurements. Only if you click "Accept", we give your browser a random identifier (our first-party cs_vid cookie) so we can connect your visits, and we connect it to your email if you submit a form. Before you choose, if you are in the United States, our analytics provider (PostHog) counts page views and clicks without storing cookies or identifiers in your browser; in the EU, EEA, UK and Switzerland nothing is counted until you click "Accept".
Session recording. Only if you click "Accept", parts of this site record your session (mouse movements, clicks, scrolling and page changes) so we can find and fix problems. Nothing is recorded before you click "Accept". What you type into form fields is masked, so recordings never capture it. We do not record sessions on scan report pages or personalised prospect pages.
Sensitive information. We do not ask for, and you should not enter, sensitive information such as health, financial account, government ID or precise location details. We do not use sensitive information for any purpose that would require your consent.
How we use it
- To run the site and answer your request: prepare and deliver your scan report, arrange and prepare for your Time Audit, follow up with you about your request, keep the site secure and stop spam, and meet legal obligations.
- To understand and improve: learn which pages and campaigns work, and improve our assistant, our answers and our services.
- De-identified and aggregated uses. We also use information only after it has been de-identified and aggregated (names, email addresses, phone numbers, company names, web addresses and similar identifiers removed in code, and the result checked again) to train and evaluate AI models, to build industry benchmarks (for example typical hours spent on quoting by industry and team size), and to develop new products and services, including those of companies affiliated with us. We do not use de-identified information to identify you, and we commit not to try to re-identify it.
How long we keep it
- What you type in the Concierge chat: deleted after 24 hours, or after 30 days if you book a Time Audit. A de-identified copy, as described above, may be kept.
- Our first-party event records, including calculator totals: 13 months.
- Logs of messages sent to our CRM and email providers: 30 days.
- Scan requests and contact details: until you ask us to delete them or they are no longer needed for your request or our records.
- De-identified, aggregated information: as long as it is useful for the purposes above. It no longer identifies you.
Who we share it with
We do not sell your personal information. If you click "Accept", Google's advertising cookies may count as "sharing" for cross-context behavioural advertising under some state laws; "Reject", "Your Privacy Choices" or Global Privacy Control opts you out. We share personal information with service providers who process it for us: Cloudflare (hosting, security, database), HubSpot (CRM, scheduling and, after you accept, website visit tracking), PostHog (product analytics and, after you accept, session recording), Google Analytics (site analytics), Google Ads (measuring which of our ads lead to enquiries, only after you accept), our email delivery provider, and our AI model provider. We may share de-identified, aggregated information with anyone. We may also disclose information if the law requires it, or as part of a merger, financing or sale of our business.
Google Analytics and Google Ads
We use Google Analytics to understand how the site is used, and Google Ads conversion tracking to learn which of our ads lead to a Time Audit request or booking. We send Google a small set of events: a Time Audit button clicked, the Time Audit form submitted (with your team size and how you heard about us), a meeting booked, and a scan requested. We never put your name, email or phone number in these events or in any web address.
Google Consent Mode. Google's cookies and advertising signals stay off until you click "Accept", wherever you are. Without consent Google receives only basic signals without cookies or identifiers (for example that a page was viewed), plus the technical details every web request carries, such as your IP address and browser type. Google uses them to estimate results in aggregate.
Enhanced conversions. Only if you have clicked "Accept": when you submit the Time Audit form, the Google tag turns your email address into a one-way code (a "hash") in your browser and sends that code, not your email, to Google, so Google can match the enquiry to an ad you clicked. Google's own privacy policy applies to what Google does with this information.
Cookies and your choices
We use cookies and similar storage for security, to remember your choices, for analytics, to connect your visits and to measure our ads. When you arrive from an ad or a campaign link, a first-party cookie remembers the campaign details and the page you landed on for 90 days, so we know which campaign brought an enquiry.
- Before you choose: only the cookies the site needs to work are set. In the United States our own analytics count page views and clicks without cookies or identifiers; in the EU, EEA, UK and Switzerland they wait for "Accept". If you arrive from an ad or a campaign link, those details stay only in the page you are viewing (nothing is stored) and are saved as the campaign cookie only if you click "Accept".
- Accept turns on analytics cookies, our visitor ID, the campaign cookie, session recording, HubSpot's website tracking and Google's cookies, including enhanced conversions.
- Reject keeps all of them off, turns off our analytics and deletes the campaign cookie and our visitor ID.
- Global Privacy Control: if your browser sends it, we treat it as an opt-out of everything above, including any "sale" or "sharing" of personal information and targeted advertising.
Cookies and browser storage we use
| Name | Set by | What it is for | How long | Before you choose |
|---|---|---|---|---|
cs_geo |
Us | Which consent rules apply, from your country | A day | Yes: needed |
Your choice (cs-consent, browser storage) |
Us | Remembers "Accept" or "Reject" | Until you clear it | Only once you choose |
cs_noid |
Us | Remembers that you said no to a visitor ID | A year | Only after "Reject" or Global Privacy Control |
| Display and chat (browser storage) | Us | Remembers display choices you make (theme, motion, the intro) and keeps your chat on screen in this tab | Until you clear it, or until you close the tab | Only when you use them |
| Security cookies | Cloudflare | Spam and bot protection, including the human check on forms | As Cloudflare sets them | Yes: needed |
cs_vid |
Us | Our visitor ID | A year | No: only after "Accept" |
cs_touch |
Us | The ad or campaign that brought you, and your landing page | 90 days | No: only after "Accept" |
| PostHog cookie | PostHog | Analytics that connect your visits | As PostHog sets it | No: only after "Accept" |
| HubSpot cookies | HubSpot | Website visit tracking for our CRM | As HubSpot sets them | No: only after "Accept" |
| Google cookies | Analytics and ad measurement | As Google sets them | No: only after "Accept" |
Your Privacy Choices
Use the "Your Privacy Choices" link in the footer of any page to see the choice again and change it at any time. Your choice is saved in this browser only. To opt out of the de-identified uses of information you gave us in a form or the chat, contact us using the details above.
Your rights
Depending on where you live, you may have the right to know what we hold about you, get a copy, correct it, delete it, and opt out of the sale or sharing of personal information, targeted advertising and profiling. Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, among others, have rights like these under their state laws. Visitors in the EU, EEA, UK and Switzerland have rights under the GDPR and UK GDPR, including to object and to complain to a regulator. We will not discriminate against you for using any of these rights. Email hello@charmandstrange.co. Call (727) 594-0102. We may need to verify your request, and you may use an authorised agent where the law allows.
Children
This site is for businesses. It is not directed at children under 16, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Changes
When this policy changes we publish a new version at /privacy with a new date, and keep every earlier version online at its own dated address for the record. Material changes apply only to information collected after the change.
Last updated: