Privacy Policy | True Focus

Effective Date: April 28, 2026 Last Updated: April 28, 2026

Plain English Summary #

We respect your time and your data. The short version:

We collect very little. Only what we need to run the site, deliver what you signed up for, and answer your inquiries.
We do not sell your data. Not for money. Not for trade. Not for “value exchange.”
We use privacy-first tools. Our analytics are cookieless. Our forms do not track you across the web. We deliberately avoided ad pixels.
You have rights. California law gives you specific rights to access, correct, delete, and limit our use of your data. We honor those rights, including Global Privacy Control browser signals.
We don’t market to children. This is a business-to-business site for working professionals.
True Focus is not a law firm. Even though the founder is a California-licensed attorney, True Focus does not provide legal services. Submitting any form here does not create an attorney-client relationship.

The full version follows. If anything is unclear, email [email protected].

1. Who We Are #

True Focus LLC (“True Focus,” “we,” “us,” or “our”) is a strategic communications and media systems advisory firm based in San Diego, California. We operate the website at https://truefocusadvisory.com (the “Site”).

This Privacy Policy explains what personal information we collect, how we use it, who processes it on our behalf, how long we keep it, and what rights you have. It applies to the Site and to anyone who visits, signs up for our newsletter, downloads our resources, completes our assessments, contacts us, or purchases our products.

Responsible Attorney for Advertising Compliance (California SB 37): Taylor Darcy, San Diego, California.

True Focus is not a law firm. See Section 11 for the full firewall.

2. Information We Collect #

We separate the information we collect into two categories: what you give us directly, and what is collected automatically when you use the Site.

2.1. Information You Provide Directly #

When you interact with the Site, you may choose to provide:

Identifiers and contact information. Your name, email address, business name, role or title, and any other fields you complete in our forms.
Inquiry content. The substance of any message you send through a contact, advisory application, or speaking inquiry form, including any details you choose to share about your business.
Assessment responses. Your answers to any diagnostic assessment we offer (such as the Credibility Gap Assessment) and the result tier we generate from those answers.
Newsletter and lead-magnet sign-ups. Your email address and, where provided, your name when you subscribe to our newsletter or request a downloadable resource.
Purchase information. When you buy a digital product or paid service: your name, email address, billing address, and the products you purchased. We do not collect or store full payment card numbers. Card processing is handled directly by Stripe (see Section 4.1).

2.2. Information Collected Automatically #

When you visit the Site, the following information is collected automatically:

Server logs. Our hosting provider (Cloudflare Pages) automatically logs basic information for security and performance, including IP address, user-agent string, referrer, requested page, and timestamp.
Privacy-first analytics. We use Plausible Analytics, a cookieless analytics service hosted in the European Union. Plausible aggregates anonymous metrics (pages viewed, country, device type, referring source, time on page) without using cookies and without persistent identifiers. It does not build profiles of individual visitors and does not track you across other sites.
Embedded YouTube video. Our YouTube embeds use the privacy-enhanced mode (youtube-nocookie.com). YouTube does not set tracking cookies until you actively play a video. Once you press play, YouTube (a Google service) collects information under its own privacy policy, which we do not control.
Spam protection. Our forms use Cloudflare Turnstile to filter automated bot traffic. Turnstile may briefly process basic environmental data from your browser to verify you are a real person. It does not use this data for advertising.

2.3. Information We Do Not Collect #

To be explicit:

We do not deploy Meta Pixel, LinkedIn Insight Tag, Google Analytics, Google Ads pixels, or any other cross-context behavioral advertising tracker.
We do not buy email lists.
We do not enrich, append, or augment your data using third-party data brokers (Apollo, ZoomInfo, Clearbit, or similar tools).
We do not knowingly collect information from anyone under sixteen (see Section 9).

3. How We Use Your Information #

We use the information we collect for the following business purposes only:

Deliver what you asked for. If you sign up for the newsletter, we send the newsletter. If you request a lead magnet, we email it to you. If you take an assessment, we generate and deliver your results.
Respond to your inquiries. If you submit a contact, advisory application, or speaking form, we use your information to evaluate and reply.
Fulfill purchases. If you buy a product or service, we process the transaction, deliver the product, provide receipts, and handle support.
Send relevant emails, with consent. We send periodic emails about our work, content, products, and services. Every marketing email contains a one-click unsubscribe.
Operate the Site responsibly. We use server logs and privacy-first analytics to understand which content is useful, fix bugs, prevent abuse, and improve the Site.
Meet legal obligations. We may use information to comply with applicable laws, respond to lawful requests, enforce our Terms of Use, and protect our rights and the rights of others.

We do not use your information for automated decision-making that produces legal or similarly significant effects on you.

We do not sell your personal information for monetary consideration.

The California Privacy Rights Act (“CPRA”) also defines “sharing” to mean disclosing personal information to a third party for cross-context behavioral advertising. We do not engage in cross-context behavioral advertising. We do not “share” your personal information under that definition.

What we do is engage a small number of trusted vendors as Service Providers. These vendors process information on our behalf, under contract, only for the purposes we direct. They may not use your information for their own marketing, sell it, or share it for behavioral advertising.

4.1. Our Current Service Providers #

Service Provider	Function	Data Processed
Cloudflare Pages	Static site hosting and edge delivery	Server logs, IP addresses
Plausible Analytics	Cookieless website analytics (EU-hosted)	Aggregated, anonymous usage data
Cloudflare Pages Functions	Form submission processing (runs on Cloudflare’s SOC 2 Type 2 certified infrastructure)	Form field contents, IP address
Cloudflare Turnstile	Bot and spam protection	Browser environment signals
MailerLite	Email marketing (newsletter, lead magnets, customer email)	Name, email, subscription activity
Stripe (when you purchase a paid product)	Payment processing (PCI-DSS Level 1)	Name, billing address, transaction data, card data (Stripe holds card data; we do not)
ScoreApp	Diagnostic assessment hosting and scoring	Assessment responses, name, email

We may add or change Service Providers over time. When we make a material change, we will update this Section.

4.2. Embedded Third-Party Content #

Our Site includes embedded content from YouTube (using youtube-nocookie.com). When you play an embedded video, YouTube acts as an independent data controller under its own privacy policy. We do not control what YouTube collects once playback begins. To review YouTube’s practices, see https://policies.google.com/privacy.

4.3. Other Disclosures #

We may disclose your information:

In response to lawful legal process. Subpoenas, court orders, or other valid government or regulatory requests.
To protect rights and safety. Where we reasonably believe disclosure is necessary to enforce our Terms of Use, prevent fraud, or protect the rights, property, or safety of True Focus, our customers, or others.
In connection with a business transition. If True Focus is merged, acquired, reorganized, or its assets are transferred, your information may be part of that transaction. We will provide notice if this materially changes how your data is handled.

5. Cookies and Tracking Technologies #

5.1. What We Use #

The Site is built to minimize tracking. Specifically:

No analytics cookies. Plausible is cookieless and uses no persistent identifiers.
No advertising cookies or pixels. We do not run Meta, Google, LinkedIn, or other advertising trackers.
Strictly necessary browser storage only. We may use limited browser storage strictly necessary to deliver the Site (for example, to remember a dismissed notice or to maintain a session during checkout). These do not track you across sites.
YouTube cookies, only on play. When you play an embedded YouTube video, YouTube may set its own cookies under its privacy policy.
Stripe cookies, on checkout. Stripe uses cookies during checkout to process payments and prevent fraud.

Because we do not run advertising pixels, do not engage in cross-context behavioral advertising, and use only privacy-first analytics that act as Service Providers under the CPRA, we are not legally required to display a cookie banner or a “Do Not Sell or Share My Personal Information” link. If we ever add advertising tracking technologies, we will deploy a CPRA-compliant consent banner before those technologies fire and will update this Policy accordingly.

6. Data Retention #

We do not keep data longer than we need it. Our retention periods:

Newsletter and email list data. Retained for the duration of your subscription, plus thirty (30) days after unsubscribe to allow for backup purging and final compliance audits.
Inquiry and contact form submissions. Retained for up to twenty-four (24) months from the date of submission, then deleted.
Assessment responses. Aggregated, anonymized analytics retained indefinitely. Identifiable individual responses retained for twenty-four (24) months.
Customer and purchase records. Retained for the period required by California tax, accounting, and consumer protection laws — currently up to seven (7) years from the date of transaction.
Server logs. Retained for up to ninety (90) days, then automatically purged by the hosting provider.
Plausible analytics data. Aggregated, non-identifying analytics retained per Plausible’s standard retention.

You may request earlier deletion of your information at any time, subject to our legal retention obligations (see Section 7).

7. Your Privacy Rights #

7.1. California Residents (CCPA / CPRA) #

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”):

Right to Know. Request the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties to whom we have disclosed it.
Right to Delete. Request that we delete the personal information we have collected from you, subject to legal retention exceptions.
Right to Correct. Request that we correct inaccurate personal information we maintain about you.
Right to Limit Use of Sensitive Personal Information. We do not currently collect sensitive personal information for purposes that would trigger this right.
Right to Opt Out of Sale or Sharing. As stated above, we do not sell or “share” your personal information for cross-context behavioral advertising. There is nothing to opt out of today, but if that ever changes, we will provide a clear and conspicuous opt-out mechanism.
Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email [email protected] with the subject line “California Privacy Request” and include:

Which right you wish to exercise.
Enough information for us to verify your identity (typically the email address you used with us, plus a brief description of your most recent interaction with the Site).

We will respond to verifiable requests within forty-five (45) days, with a possible 45-day extension where reasonably necessary, in line with CCPA timelines.

You may designate an authorized agent to make a request on your behalf, in which case we will require written authorization and verification of identity.

7.2. Global Privacy Control (GPC) #

We honor the Global Privacy Control browser signal as a valid universal opt-out request for sale or sharing under California law. Because we do not sell or share personal information for cross-context behavioral advertising in the first place, the GPC signal does not change how our analytics or core Site features behave. If we ever add advertising technologies that would qualify as sale or sharing under the CCPA, the GPC signal will automatically opt you out, and we will display visible confirmation of the opt-out.

7.3. Visitors Outside California or Outside the United States #

If you visit from outside California or the United States, you may have rights under your local laws (for example, the General Data Protection Regulation in the European Union or United Kingdom). To exercise such rights, email [email protected]. We process such requests on a good-faith basis. The Site is operated from the United States, and information collected is processed primarily in the United States, except where Plausible, MailerLite, Cloudflare, or other Service Providers process data in the European Union or other regions under their standard contractual safeguards.

8. Security #

We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction:

The Site is delivered exclusively over HTTPS with modern TLS encryption.
Form submissions are protected by Cloudflare Turnstile and processed via Cloudflare Pages Functions running on Cloudflare’s SOC 2 Type 2 certified infrastructure.
Payments are processed by Stripe, a PCI-DSS Level 1 certified processor. We do not store full card numbers.
We use strong, unique credentials and multi-factor authentication on administrative accounts.
Database access is limited to the founder and any explicitly authorized contractors operating under written confidentiality terms.

No system is perfectly secure. If a security incident materially affects your personal information, we will notify you and applicable regulators as required by California law.

9. Children’s Privacy #

True Focus is a business-to-business advisory firm. The Site is not directed to children, and we do not knowingly collect personal information from anyone under the age of sixteen (16). If you are under 16, please do not submit information through the Site. If you are a parent or guardian and you believe a minor has provided us information, contact [email protected] and we will delete it.

10. International Visitors #

The Site is operated from the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Site, you consent to that transfer.

Where we use Service Providers in the European Union (such as Plausible Analytics), data covered by EU law remains subject to applicable EU protections.

11. True Focus Is Not a Law Firm — Rule 5.7 Firewall #

This is the most important non-privacy disclosure on this page. We treat it with the same weight as the rest of this Policy.

True Focus LLC is a strategic communications and media systems advisory firm. It is not a law firm. It does not provide legal services, legal advice, or legal representation.

The founder of True Focus, Taylor Darcy, is a California-licensed attorney whose separate law practice is conducted under a different entity. The two are firewalled. Specifically:

True Focus and Taylor Darcy’s law practice maintain separate websites, separate corporate bank accounts, separate client engagement processes, and separate email infrastructure.
Engaging True Focus, communicating with True Focus, or submitting any form on this Site does not create an attorney-client relationship.
Communications with True Focus are not protected by attorney-client privilege or attorney work-product protection.
True Focus does not accept legal inquiries, qualify legal matters, or refer leads to any law practice through this Site.

If you require legal advice, retain independent licensed counsel in your jurisdiction. Do not submit privileged, confidential, or sensitive legal information through any form on this Site.

This disclosure is required and tracked under California Rule of Professional Conduct 5.7 (Responsibilities Regarding Law-Related Services) and is reinforced at the point of every contact form on the Site.

12. Changes to This Policy #

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the “Last Updated” date at the top of this Policy.
Post the revised Policy on this page.
For material changes affecting how we collect, use, or share your information, notify newsletter subscribers by email at least fourteen (14) days before the changes take effect, where reasonably practicable.

Continued use of the Site after the effective date of any update constitutes acknowledgment of the updated Policy.

13. Contact Us #

For privacy questions, requests, or concerns:

Email: [email protected]
Postal mail: True Focus LLC Attn: Privacy 7220 Trade Street, Ste 101 San Diego, CA 92121

We aim to acknowledge privacy requests within five business days and resolve them within the legal timelines applicable to your jurisdiction.

True Focus LLC | San Diego, California | Responsible Attorney for Advertising Compliance: Taylor Darcy, San Diego, CA