Legal

Privacy policy.

What we collect, who we share it with, and how to turn it off. Plain English.

Effective date: June 5, 2026

This policy describes what information Don Norman Associates ("DNA," "we," "our," "us") collects when you use donnormanassociates.com, what we do with it, and the choices you have. It applies only to this website. Our document-ordering site, getmymcletter.com, has its own privacy policy that governs orders placed there.

We run advertising. To make those ads cost-effective, we use analytics and ad-platform tracking to measure what's working. The sections below name every platform we use, what each one collects, and how to turn them off.

What we collect

Contact form submissions. When you fill out a form on this site, we collect what you send us — typically your name, email, company, and the details of your inquiry.
Server logs. Our hosting provider (Cloudflare) logs IP addresses and standard web request metadata to protect the site from abuse and keep it online.
Analytics and advertising cookies. The platforms listed in the next section drop cookies in your browser that let them recognize you across visits and across other sites that use the same platforms. We use the resulting data to measure ad performance and to build audiences of people who look similar to our existing leads ("lookalike" or "similar" audiences) for future ad targeting.
Session recordings (Microsoft Clarity). Clarity records anonymized recordings of pages you view here — mouse movements, clicks, scroll position — so we can see where the site is confusing. Form input fields are masked by default, so what you type into the contact form is not captured in the recording.

We do not collect Social Security numbers, financial account numbers, or other sensitive personal data through this website.

Third-party platforms we use

Each of these is loaded through Google Tag Manager. Each one drops the cookies listed and sends data to its parent company.

Google Analytics 4 (Google LLC). Page view counts, basic interaction data, rough geography. Cookies: _ga, _ga_*. Google's privacy policy.
Google Ads conversion tracking (Google LLC). Records when a visit that came from a Google ad turns into a contact form submission. Used to optimize Google Ads campaigns and to build "similar audiences." Cookies: _gcl_*. Same Google privacy policy applies.
Meta Pixel (Meta Platforms, Inc.). Records page visits and form submissions to optimize Facebook/Instagram ads and to build Custom and Lookalike audiences. Cookies: _fbp. Meta's privacy policy.
Microsoft Ads UET (Microsoft Corporation). Records visits and form submissions to optimize Bing/Microsoft ad campaigns. Cookies: MUID, _uetsid, _uetvid. Microsoft's privacy policy.
Microsoft Clarity (Microsoft Corporation). Anonymized session recordings and heatmaps so we can improve the site. Cookies: _clck, _clsk. Same Microsoft privacy policy applies.

Why we collect it

To respond to your inquiry and follow up on the work you're asking us about.
To measure which marketing channels are working so we don't waste money on ones that aren't.
To build lookalike / similar audiences in Google, Meta, and Microsoft so our ads reach more people who look like our existing customers.
To prevent spam, fraud, and abuse of the site.
To understand which pages are useful and which aren't, so we can improve the site.

Who we share it with

We share information with the platforms named above (Google, Meta, Microsoft) when their cookies fire — that's how those platforms work. We do not directly sell email lists or contact details to other businesses. Beyond those platforms, we share information only:

With service providers we use to run the website, including Cloudflare for hosting and security and Twilio SendGrid for delivering contact-form messages, and only as needed to operate the site.
When we are legally required to — for example, in response to a valid subpoena or court order.

How long we keep it

Contact form data: kept as long as needed to serve you. If we begin a working relationship with you, your information becomes part of our client records and is governed by our engagement terms.
Server logs: retained for up to 30 days, then discarded or aggregated.
Analytics and ad-platform data: retained per each platform's own policy. Google Analytics 4 default retention is 14 months; Meta and Microsoft retain Pixel/UET data per their published schedules.

Your rights & choices

Opt out of advertising and analytics tracking on this site. Click the button below to disable all third-party tracking platforms (Google Analytics, Google Ads, Meta Pixel, Microsoft UET, Microsoft Clarity) for your visits going forward. We do this by setting a small cookie named dnt in your browser; on every page load we check for it and skip loading any tracking scripts if it's present.

Opt out at each platform directly. The site-level opt-out above only affects this site. To opt out across all sites that use these platforms:

Browser-level signals. We honor the opt-out cookie set by the button above. If your browser sends a Global Privacy Control (GPC) signal, treat the opt-out as the same outcome — but for now, use the button on this page to be certain.

Access, deletion, and other requests. You can ask us to delete the personal information you've submitted through this site. Email hello@donnormanassociates.com with the request and we'll handle it. If you live in a jurisdiction with specific privacy rights (California, Colorado, Connecticut, Virginia, Texas, Utah, or the EU/UK), the same email address is the right place to start. We don't charge for these requests and we don't retaliate against people who make them.

U.S. state-specific rights

California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Texas (TDPSA), and Utah (UCPA) residents have specific rights to know, delete, correct, and limit the "sale" or "sharing" of personal information for cross-context behavioral advertising. The lookalike-audience use described above qualifies as "sharing" under several of these laws. Use the button in the "Your rights & choices" section to opt out for this site, or email hello@donnormanassociates.com to exercise any of the other rights.

Children

This site is not directed to children under 13, and we don't knowingly collect information from children. If you believe a child has submitted information to us, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time. When we do, we'll update the effective date at the top of the page. Material changes — like adding a new tracking platform — will be flagged on the site.

Contact

Questions about this policy? Email hello@donnormanassociates.com or call 703-821-0000.