AssessmentOptimization SprintFractional FinOpsAbout

Legal

Privacy Policy

Effective Date: August 24, 2026

Cambia LLC ("Cambia," "we," "us," or "our") is a cloud cost optimization and FinOps consultancy. This policy explains what personal information we collect through cambia.io and in the course of our consulting work, why we collect it, and what you can ask us to do about it.

1. Information We Collect

Assessment and contact requests

When you submit the assessment request form we collect your name, work email address, company, approximate monthly cloud spend, primary cloud provider, and anything you choose to write in the optional notes field. We ask for the spend and provider only to judge whether an engagement makes sense before either of us spends time on a call.

Correspondence

If you email us, we keep the message and your contact details so we can respond and maintain a record of the conversation.

Website usage

With your consent, we collect analytics about how this website is used — pages visited, referring source, approximate location derived from IP address, browser and device type, and interactions such as which calls to action are clicked. Analytics are off until you accept them. See Section 4.

2. Client Environment Data

During an engagement we work with billing, usage, configuration, and architecture information from your cloud environment. That information belongs to you, and we handle it under the engagement agreement and any NDA you have in place with us — not under this policy, which covers personal information we handle for our own purposes.

  • Access is read-only, scoped to what the engagement requires, and time-bound.
  • We do not sell, license, or share client environment data with anyone.
  • We do not use one client's environment data to produce a deliverable for another client.
  • Where your policies require it, we work from exported billing and utilization data rather than direct access.
  • Environment data is deleted or returned at the end of the engagement on request, and in any case within the period set out in the engagement agreement.

3. How We Use Personal Information

  • To respond to your request and arrange a discovery call
  • To deliver, administer, and invoice for consulting engagements
  • To operate, secure, and improve this website
  • To comply with legal, tax, and accounting obligations

We do not sell personal information, and we do not share it with third parties for their own marketing. Submitting the assessment form does not enrol you in a marketing sequence.

4. Cookies and Analytics

This site uses no advertising or cross-site tracking cookies. We use one product-analytics provider (PostHog) to understand how the site is used, and it is loaded only after you accept analytics in the cookie banner. If you decline, no analytics script is initialized and nothing is transmitted. You can change your choice at any time through the "Cookie Preferences" link in the footer.

If your browser sends a Global Privacy Control signal, we treat it as a decision to decline and never initialize analytics, whatever the banner says. A small amount of information is stored in your browser's local storage to remember your choice; that is not transmitted to us.

5. Service Providers

We use a small number of providers who process personal information on our behalf, under contract and only on our instructions:

  • Twenty CRM — customer relationship management; receives assessment request submissions
  • PostHog — website product analytics, only with your consent
  • Microsoft Azure — hosting for this website, and short-term queuing of assessment requests on their way to our CRM
  • Email, accounting, and document providers used in the ordinary course of running the business

We may also disclose information where required by law, or to establish, exercise, or defend legal claims.

6. Legal Bases

Where the GDPR or UK GDPR applies, we rely on: your consent for analytics; performance of a contract, or steps taken at your request before entering one, for responding to enquiries and delivering engagements; our legitimate interests in operating and securing the website and our business; and legal obligation for tax and accounting records. Where we rely on consent, you may withdraw it at any time.

7. Retention

We keep enquiry and contact information for as long as there is a realistic prospect of working together, and then for a further period consistent with our legal and accounting obligations. Records relating to an engagement are kept for the period set out in the engagement agreement. Analytics data is retained according to our provider's configured retention period. You can ask us to delete your information sooner — see Section 9.

8. Security

We apply access controls, encryption in transit, least-privilege credentials, and multi-factor authentication to the systems that hold client and prospect information. No system is perfectly secure, but the access we request from clients is deliberately minimal — read-only and time-bound — so that the consequences of any compromise are bounded by design.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict certain processing, to withdraw consent, and not to be discriminated against for exercising those rights. To make a request, email legal@cambia.io. We will verify the request using the email address associated with the information, respond within the time required by applicable law, and explain any refusal. If you are in the EEA or UK you may also complain to your local supervisory authority.

10. International Transfers

We are based in the United States, and our providers may process information in the United States and elsewhere. Where information is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Children

This website and our services are intended for businesses. We do not knowingly collect personal information from anyone under 18.

12. Changes

If we make a material change to this policy we will update the effective date above and, where the change affects an existing relationship, tell you directly.

13. Contact

Cambia LLC
legal@cambia.io