Privacy
Last updated: August 1, 2026
1. The short version
This website sets no cookies and runs no advertising or cross-site tracking. There is no advertising pixel here, no session recording, and no third-party script loading in the background. We use basic analytics to see which pages get read: it is aggregate, and tells us a page was read, not who read it. A normal visit to this site contacts our own server and nothing else.
We only hold personal information you deliberately send us: an email address for the newsletter, a message through the contact form, or the details you enter when you book a call.
The one exception is the booking scheduler, and it only runs if you ask it to. Section 5 covers it.
2. Who we are
Needle Movement, LLC, a limited liability company based in the United States. Throughout this policy, “we” and “us” mean that company.
Questions, or any request about your information: info@needlemovement.com, or the contact form.
3. What we collect, and why
Newsletter signup. If you enter your email address in the signup form, we send it to Klaviyo, the service we use to send email. That is the only field we ask for. This is a single opt-in list: you are subscribed as soon as you submit the form, without a confirmation email. Every email we send includes an unsubscribe link, which works immediately and without asking us.
Our emails carry standard open and click tracking: we can see whether a message was opened and which links were followed. That is how we judge whether what we send is worth sending.
Contact form. The form asks for your name, email address, a topic and a message. That message is delivered to our own inbox as an email. We use it to reply to you and to carry on any conversation that follows. Nothing else happens to it. In particular, sending us a message does not add you to the newsletter — those are separate, and we do not move addresses from one to the other.
Before the form is accepted, Cloudflare Turnstile checks that the submission is not automated. That check processes your IP address and basic browser information for security purposes. It sets no cookies, though it does keep a single value in your browser for the check itself, and it builds no profile of you.
Booking a call. Booking is handled by TidyCal. If you open the scheduler and book, TidyCal receives your name, email address, chosen time and your answers to the booking questions, and passes them to us.
Site statistics. Our host keeps standard web server logs, which include visitor IP addresses. We look at aggregate figures drawn from those logs, chiefly how many times each page was requested. We do not build profiles of individual visitors, and nothing is placed in your browser to produce these numbers.
4. What we never do
We do not sell your personal information, and we do not share it for anyone’s advertising. On this website we run no advertising pixels and no cross-site tracking of any kind, and we make no attempt to identify you when you read a page. Our newsletter is the one place we measure anything about you individually, and section 3 says what that is.
5. Cookies, and the one exception
This site sets no cookies at all. No consent banner is required, because there is nothing to consent to.
The booking scheduler is the exception, and it is deliberately behind a button. Until you click “Pick a time and book the call”, nothing from TidyCal loads and nothing is set in your browser. When you do click it, TidyCal’s scheduler loads inside the page, and at that point TidyCal sets its own cookies and runs its own analytics, which currently includes Microsoft Clarity. Those are TidyCal’s, not ours, and they are covered by TidyCal’s privacy policy. If you would rather not load it, you can email us instead and we will arrange a time by hand.
Some browsers send a “Do Not Track” signal. We do not track visitors across sites in the first place, so there is nothing for us to switch off in response.
6. The services we rely on
Each of these only ever sees the slice of information described here. They are established providers with their own privacy policies, and several run global infrastructure, so information may be handled by servers outside your own country.
- Netlify — hosting, and the aggregate page statistics described in section 3. Sees requests to the site, including IP addresses, in its server logs (retained for a short period, on the order of a month).
- Klaviyo — newsletter email. Holds subscriber email addresses.
- Resend — delivery of contact form messages to our inbox. Holds the message content in its sending logs for 30 days, then deletes it.
- Cloudflare — the Turnstile spam check on the contact form.
- Google Workspace — our email. Contact form messages arrive and live here.
- TidyCal — call booking, only if you open the scheduler.
7. How long we keep things
Messages you send us are kept for as long as they are useful to our working relationship with you, the same way any business keeps its email. We do not run them on a deletion timer. You can ask us to delete yours at any time, and we will.
Newsletter subscriptions last until you unsubscribe. While you are subscribed, Klaviyo also holds the record of which emails you opened and which links you followed. After that we keep a record that you unsubscribed, which is what stops you being added again by mistake.
Booking details stay in TidyCal and in our calendar for as long as we need them for the meeting and any work that follows.
Where a service keeps its own copy, its retention applies too — Resend’s 30 days and Netlify’s server logs are the two that matter.
8. Your choices
Whoever you are and wherever you live, you can ask us to:
- tell you what personal information we hold about you;
- correct it, if it is wrong;
- delete it;
- stop emailing you, which the unsubscribe link also does instantly.
Email info@needlemovement.com and we will handle it. We do not charge for this, and we will not make you create an account to ask. If you are in the UK or EU and think we have handled your information badly, you are entitled to complain to your national data protection authority.
9. Security
The site is served entirely over HTTPS. We hold no database of visitor information — there is no account system here and nothing to log into. Access to the services listed in section 6 is limited to us.
No system is perfectly secure, and we will not pretend otherwise. What we can say is that we deliberately collect very little, which is the most reliable protection available.
10. Children
This site sells services to businesses and is not directed at children. We do not knowingly collect information from anyone under 16.
11. Changes
If we change how any of this works, we will update this page and change the date at the top. If a change is significant — a new service handling your information, for instance — we will say so plainly here rather than quietly editing a sentence.