Privacy Policy

1. Information we collect

Information you provide

When you contact us or submit a consultation request, we may collect your name, email address, phone number, contact preferences, venue or business name, venue location, service interests and the consultation answers or other information you choose to provide. Our consultation form is provided through Tally. Please avoid including sensitive personal information or information about children in free-text answers.

Technical and website activity information

Website delivery and security services may process information such as your IP address, browser and device characteristics, requested pages, timestamps and diagnostic information. Optional analytics and advertising tools, when enabled and allowed by your effective privacy settings, may process page visits, referring pages, campaign information, clicks and other website interactions, cookie or similar identifiers, and approximate location derived from technical information.

We do not request GPS access or collect precise device location through a website location-permission feature. A venue address you provide in a form is business information you submit, rather than GPS tracking.

Other sources

We may receive technical information and reports from the service providers described below. We do not use data brokers, affiliate programs or joint marketing partners to obtain contact lists, intent data or enriched personal profiles for this website. Google Search Console provides search-performance and indexing reports, rather than the contact information submitted in our consultation form.

2. How we use information

We use information to respond to the inquiry or consultation you requested, understand your venue and service needs, arrange relevant follow-up, maintain and improve the website, protect against misuse, measure website and campaign performance subject to your choices, and comply with applicable legal obligations.

Submitting a form does not enroll you in a newsletter or promotional email or SMS program. We use your contact information for requested follow-up and related service or administrative communication. You can ask us to stop inquiry follow-up by emailing our DPO.

This website does not collect payment details through a checkout or customer-account feature. This policy does not describe orders, returns or exchanges that are not offered through this website.

3. Service providers and disclosures

We use providers for website delivery, forms, measurement and advertising. Their access and responsibilities depend on the service, our configuration and the applicable agreements. Some providers also process information under their own privacy notices. We do not promise that every provider acts solely on our instructions for every purpose.

• Tally: hosts and processes consultation-form submissions. We may also retain your inquiry in business email and working records used to respond. See Tally's Privacy Policy.
• Cloudflare: supports website hosting, delivery and security. Cloudflare Web Analytics is a separate optional measurement service described in Section 4. See Cloudflare's Privacy Policy.
• Google: Google Analytics 4 (GA4) measures website traffic and actions when enabled and Analytics is on in your effective privacy settings. Google Tag Manager (GTM) manages permitted tags. Google Search Console reports search visibility and indexing. See Google's Privacy Policy.
• Meta: Meta Pixel, when enabled and Advertising is on in your effective privacy settings, supports Facebook and Instagram campaign measurement and may disclose website activity and browser or similar identifiers to Meta. See Meta's Privacy Policy.

We do not sell contact information submitted to us or provide it to advertising platforms. Names, email addresses, phone numbers, consultation answers and other form contents, including hashed contact identifiers, are excluded from our analytics and advertising event payloads. We do not use submitted contacts to create advertising-platform customer lists.

These contact-data restrictions are distinct from the website-activity disclosures made by optional analytics or advertising tools. Advertising-related activity disclosures may be treated as targeted advertising, a sale or sharing under an applicable privacy law, even when no contact list is sold for money. You can control optional Advertising separately as described below.

We may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect rights or safety, or in connection with a business transfer such as a merger or acquisition, subject to applicable requirements.

4. Analytics, advertising and your choices

Our selected measurement tools are GA4, GTM, Meta Pixel, Google Search Console and Cloudflare Web Analytics. Optional tools operate only when enabled on the website and permitted by your relevant choice. Selection of a tool does not mean that every feature or advertising option offered by its provider is used.

• Analytics: controls optional GA4 and Cloudflare Web Analytics measurement. Cloudflare Web Analytics does not use cookies or localStorage to collect its usage metrics. We nevertheless group it with optional Analytics for your choices.
• Advertising: separately controls optional Meta Pixel activity measurement. In our opt-out configuration, it starts on for new visitors unless a saved choice or GPC restriction turns it off.
• Necessary functions: support website delivery, security, the form you choose to use and storage of your privacy choices. They are separate from optional measurement.

Our current website configuration uses an opt-out model: Analytics and Advertising preferences default to on for new visitors, and you can turn off either category separately in Cookie Settings. Previously saved opt-outs are respected. GPC turns Advertising off. Default-on preferences are not a record of affirmative consent. Before using optional tools where applicable law requires prior consent, we will obtain that consent. GTM must respect the same categories for any optional tags it manages. We do not use GA4 Demographics and Interests Reporting, Remarketing with Google Analytics or Google Display Network Impressions Reporting for this website.

Read the Cookie Policy section below and open Cookie Settings there. The footer Privacy link brings you back to this page, where you can change either setting or opt out independently. Withdrawal applies to future optional tracking. It does not automatically delete information previously collected. Use the request methods below for deletion requests.

You can also manage cookies through your browser. Browser blocking and this website's controls may have different effects, including on third-party sites you visit through external links.

5. Cookie Policy and Cookie Settings

This section explains cookies, similar technologies and browser-stored preferences on the Tabletop Shepherd website.

Open Cookie Settings

Necessary functions

Website delivery, security and a form you choose to use may need technical information or browser storage. Our own preference record, tts_privacy_preferences_v1, stores your Analytics and Advertising choices, a version, the time saved and whether you explicitly saved a choice. It is kept in this browser's localStorage until cleared or replaced. It is not a contact record or advertising identifier. Necessary functions are separate from optional measurement.

Optional Analytics

The Analytics setting controls GA4 and Cloudflare Web Analytics when those tools are enabled on the website. GA4 may use cookies or similar identifiers to measure visits and website actions. Cloudflare Web Analytics does not use cookies or localStorage to collect usage metrics, but we include it in your optional Analytics choice. In our opt-out configuration, Analytics starts on for new visitors unless a saved choice turns it off.

Optional Advertising

The Advertising setting separately controls Meta Pixel when enabled, for Facebook and Instagram campaign measurement and related website-activity disclosures. It may use cookies and browser identifiers. In our opt-out configuration, Advertising starts on for new visitors unless a saved choice turns it off. It remains off when this browser sends a Global Privacy Control signal.

Google Tag Manager manages tags rather than providing an additional permission category. Any optional tags it manages must follow the effective Analytics or Advertising setting, including saved opt-outs, GPC and any required prior-consent configuration. Google Search Console provides search visibility/indexing reports and is not a visitor tracking tag controlled by these switches.

Changing your choices

Use Cookie Settings in this section of our Privacy Policy. You can turn off optional measurement, turn on both categories, or select each category independently. Saved choices apply in this browser. Clearing browser storage removes the saved preference and restores the current default settings, subject to GPC and any configured prior-consent mode. If saved preferences cannot be read or are invalid, optional settings start off as a precaution. You may change them for the current page session; unavailable storage means those changes will not persist after you leave or reload.

Changing a choice applies to future optional tracking. It does not automatically erase previously collected data or all third-party cookies. Your browser also provides controls for deleting or blocking cookies. If you want to request deletion of personal information, use the request methods in Section 13.

Provider information and contact

Providers' cookie names, durations and behavior depend on the features actually enabled and the provider's configuration. The 14-month GA4 data-retention setting is not a cookie lifetime. We exclude submitted names, contact details and form answers from analytics and advertising events, as described in Section 3.

Section 3 identifies Google, Meta, Cloudflare and Tally and links to their notices. External websites and embedded form functionality may have their own necessary storage and settings. This website's optional choices do not control every activity on those providers' own websites.

Contact James, our Data Protection Officer, at info@tabletopshepherd.com with questions.

6. How long we keep information

Inactive inquiries: our retention period is 12 months after the last interaction. This applies to inquiry records in our form, email and working records. Information needed for an ongoing customer relationship, a legal obligation, accounting, a dispute or protection of legal rights may be retained longer for that purpose.

GA4: when GA4 is enabled, we use its 14-month retention setting for the user-level and event-level data covered by that setting. This is not a 14-month limit on standard aggregated reports, other providers' data or records retained for a separate stated purpose. Google applies its deletion schedule and retention-setting behavior. Our current GA4 configuration resets the user identifier's retention period on new activity. Returning activity can therefore extend user-level retention beyond 14 months from the first visit. This reset applies only to user-level data.

Privacy preferences: choices are stored in your browser until you clear them or they are replaced by a later choice. They are separate from inquiry and analytics records.

When information is no longer needed, we delete or anonymize it. Some backup copies may remain until the relevant backup cycle permits deletion and are not used for routine processing in the meantime. Provider-controlled data and backups may be subject to the provider's own retention rules. The GA4 setting does not impose a retention period on Meta, Cloudflare or Tally.

7. Information about minors

Our website and inquiry process are intended for adults. We do not knowingly collect or solicit personal information from, or market to, anyone under 18 years of age. Parents and guardians making inquiries should provide their own contact information and avoid submitting personal information about children.

If we learn that we have collected personal information from someone under 18, we will take reasonable measures to promptly delete it. If you believe this has occurred, contact our DPO at info@tabletopshepherd.com.

8. Your privacy choices and rights

Depending on applicable law and your location, you may have rights to know whether we process your information, access it, receive a copy, correct inaccuracies, request deletion, withdraw consent, or opt out of certain uses. These rights may have exceptions and limitations.

Manage optional tracking through our Cookie Policy section and Cookie Settings. Contact our DPO to stop requested inquiry follow-up or make a request about your information. We do not require a website account to use these methods.

Withdrawing consent does not affect processing that occurred lawfully before withdrawal or processing supported by another applicable legal basis.

9. DNT and Global Privacy Control

Do Not Track (DNT): we do not currently respond to the older DNT browser setting. This statement does not apply to Global Privacy Control.

Global Privacy Control (GPC): the website's privacy controls recognize a GPC signal and apply it as an opt-out of optional Advertising and related sale or sharing of website activity. While GPC is active, Advertising remains off in Cookie Settings. GPC does not by itself turn off the separate Analytics choice.

Browser preferences generally apply to the browser and device sending them. You may need to set your choices again in another browser or after clearing browser storage. Learn about GPC at globalprivacycontrol.org.

10. Additional information for US residents

The following describes the information relevant to this website and its purposes. Optional measurement categories apply when the corresponding tools are enabled and permitted. This description does not assert that every selected tool operated throughout the preceding 12 months.

We do not deliberately collect sensitive personal information, biometric identifiers, student records, protected-classification characteristics or audio/video recordings through this website. We do not build enriched personal profiles from submitted contacts. Enabled analytics or advertising providers may derive estimates or interests from permitted website activity under their own notices. Payment and purchase-history collection is outside this website policy's scope.

Retention follows Section 6. Sources, purposes and recipient roles are described in Sections 1 to 4. We do not sell submitted contact information. Optional advertising activity disclosures may fall within sale, sharing or targeted-advertising definitions under applicable law and can be opted out of through Cookie Settings or GPC.

Where an applicable US state privacy law grants rights, these may include access, correction, deletion, portability, non-discrimination and an opt-out of sale, sharing, targeted advertising or certain profiling. You may also have rights to information about recipients, an authorized agent and an appeal. We consider requests under the law applicable to the request and any relevant exceptions.

We may need proportionate information to verify an access, correction or deletion request or an agent's authority. We use verification information for that purpose. Cookie Settings and GPC advertising opt-outs do not require a website account. If we decline a request and an appeal right applies, email our DPO to appeal. We will explain the outcome and applicable further options.

California residents may also contact our DPO about disclosures for third-party direct marketing under California's Shine the Light law, where applicable. This does not change our restriction on providing submitted contact information to advertising platforms.

11. Policy updates

We may update this policy to reflect changes in our practices or applicable requirements. The date at the top identifies the latest revision. When required, we will provide additional notice of material changes. Changes to this policy do not automatically enable optional tracking or change your saved choices.

12. Contact our DPO

Tabletop Shepherd LLC
James, Founder and Data Protection Officer
info@tabletopshepherd.com

13. Access, correction and deletion requests

To request access to, correction of or deletion of your personal information, email info@tabletopshepherd.com or submit a privacy request through our request form. You can also use these methods to ask about our collection or disclosures and exercise other applicable rights.

For cookie and tracking choices, visit our Cookie Policy section and use Cookie Settings. This page explains your choices. The settings control records them.