Privacy, in plain English

Effective October 11, 2026

1. Who we are and what this covers

Camdun Solutions is the business name of Jaelyn Denise, a sole proprietor in the United States. In this policy, "we," "us" and "our" mean Camdun Solutions. "You" means anyone who visits this website, contacts us, books a call, uses our client portal or works with us.

This policy covers camdunsolutions.com, our contact form, our booking page, our client portal and the information we receive while working with clients. Our Terms of Service explain the rules for using this site, the portal and our services.

2. What we collect

• What you send us. If you use the contact form or email us, we get your name, email address, business name and whatever you write in your message.
• Booking details. If you book a call, our scheduling service collects your name, email address, the time you choose and any notes you add.
• Client details. If you hire us, we keep the contact and billing details, proposals, agreements, invoices and project messages needed to do the work and run the business.
• Client portal. If you have a portal account, we keep your name, email address, business name and sign-in settings, plus the files, messages and requests you share there. For security, the portal records sign-ins and account changes, including the IP address and browser used. Only Camdun Solutions can see these records.
• Payments. If you pay online, the payment runs through an established processor such as Stripe or Square. We see that you paid, the amount and the last four digits of the card or account. We never receive or store full card or bank account numbers.
• Basic server logs. Our hosting provider keeps standard technical logs, such as IP address, browser type and the pages requested, to run and protect the site.
• Security reports. If you report a vulnerability, we keep your report, your contact details and our messages with you.

This site uses no advertising trackers and no third-party analytics. Fonts are served from our own site.

Please don't send passwords, card numbers, Social Security numbers or health information through the contact form or by email. If a project involves information like that, we'll set up a safer way to handle it first.

3. Cookies

This website doesn't set cookies of its own. Our hosting provider may set a strictly necessary cookie to tell real visitors apart from automated attacks. The client portal uses strictly necessary cookies to keep you signed in and to protect your account. We don't use cookies for advertising or to follow you around the web.

Because we don't sell or share your information or track you across other sites, there is nothing for a "Do Not Track" signal or Global Privacy Control to switch off. If your browser sends one, we treat it as a request not to sell or share your information, which we already don't do.

Our booking page is run by our scheduling service on its own site, under its own cookie and privacy policies.

4. How we use it

• To answer your questions and hold the calls you book.
• To write proposals, do the work you hire us for, send invoices and keep business records.
• To run the client portal and keep accounts safe, including spotting and investigating suspicious sign-ins.
• To protect this site, the portal and our clients from fraud, abuse and attacks.
• To meet our legal, tax and accounting obligations.

We don't sell or rent your information. We don't use it for advertising. We don't add you to a mailing list without asking first, and every list we send has a one-click way to leave it.

We use AI assistants to help us work. We use only business plans of those tools that don't train their models on what we enter, and we never give them passwords or other credentials. Our security page explains how we use them.

5. Who else handles it

A small number of service providers help us run things. They may handle your information only to provide their service to us, under their own security and privacy commitments:

• Cloudflare hosts this website, protects it from attacks and forwards email sent to our addresses.
• Cal.com runs our booking page.
• Web3Forms delivers contact form messages to our inbox.
• Our email provider stores the email we send and receive.
• Our client portal's hosting and database providers store portal accounts, content and security records.
• Our payment processor handles online payments.
• Our accounting software keeps invoices and payment records.

We may also share information:

• With professional advisers, such as our attorney or accountant, who must keep it confidential.
• When the law requires it, such as a valid subpoena or court order. Unless the law forbids it, we'll tell you first so you have a chance to object.
• To protect someone's safety or to investigate fraud or a security incident.
• If the business changes form, for example by becoming a company, or is sold. Your information would stay protected by this policy, and we'd tell you before anything changed.

6. When we handle your customers' data

When we work inside a client's systems, the information in those systems belongs to the client. We act as the client's service provider. We use that information only to do the work the client asked for, we don't keep copies we don't need, and we follow the client's instructions and our agreement with them.

If you're a customer of one of our clients and want to use your privacy rights, please contact that business directly. If you contact us instead, we'll pass your request to them and help them respond.

If a client's work involves patient health information, we put a Business Associate Agreement in place before we handle it whenever the law requires one.

7. How long we keep it

We keep information only as long as we need it, then delete it:

• Inquiries and booking details that don't become projects: deleted within 12 months of our last contact.
• Client records such as proposals, agreements, invoices and payment records: kept for the engagement plus 7 years, to meet tax and legal requirements.
• Project messages and working files: returned or deleted within 90 days after an engagement ends, unless your agreement says otherwise.
• Client portal data, including sign-in and account-change records: kept while your account is open, then deleted within 90 days after the account closes. Before we close it, we'll offer you a copy of your files.
• Security reports: kept for 3 years after the issue is closed, so we have a record of the fix.
• Server logs are kept by our hosting provider under its own schedule. We don't keep separate copies.

We may keep information longer only when the law requires it or while we investigate a security incident or a legal claim. Deleted information can stay in encrypted backups for up to 90 days until those backups are replaced.

8. How we protect it

We use multi-factor authentication on every account, encrypted devices, a password manager and access limited to what each job needs. Our practices follow the CIS Controls and are aligned with SOC 2. Our security page has the details.

No one can honestly promise a system is 100% secure. If we learn that your information was exposed, we'll tell you without unreasonable delay, explain what happened and what we're doing about it, and meet any deadline the law or our agreement with you sets.

9. Your choices and rights

Wherever you live, you can ask us to:

• Tell you what information we have about you and show it to you.
• Correct anything that's wrong.
• Delete your information.
• Give you a copy in a common format you can take elsewhere.
• Stop sending you anything you didn't ask for.

Email hello@camdunsolutions.com to make a request. You can also ask someone you trust to make a request for you, with your written permission. To protect you, we'll confirm it's really you before we act, usually by replying to the email address we have on file.

We'll respond within 30 days. If we need more time, we'll tell you why and finish within another 30 days. Requests are free. Using your rights will never change how we treat you or the price you pay.

Some information we can't delete right away, such as invoices we must keep for tax purposes. If that applies, we'll tell you what we're keeping and why, and delete it as soon as we're allowed.

If we turn down your request and you disagree, reply with "Appeal" in the subject line. We'll review it again and answer within 45 days. If you're still not satisfied, you can contact your state attorney general or data protection authority.

10. Children

This website, the portal and our services are for businesses and adults. We don't knowingly collect information from anyone under 16. If you believe a child has sent us information, email us and we'll delete it.

11. Where your information is processed

We're based in the United States. Your information is stored and processed in the United States and in other places where our service providers operate, under their security and privacy commitments. If you contact us from outside the United States, your information will be transferred to the United States.

12. Changes to this policy

If we change this policy, we'll post the new version here with a new effective date. If a change affects how we use information we already have, we'll email clients and portal users at least 30 days before it takes effect, unless the law requires a faster change.

13. Contact us

Questions or requests about privacy: hello@camdunsolutions.com. To report a security issue: security@camdunsolutions.com.