Legal

Privacy policy

Effective September 26, 2026 · Version 2026-09-26.2

peakbeyond.com is the website of Peak Beyond, operated by Peak Beyond, LLC, 435 Merchant Walk Square, Suite 300-132, Charlottesville, VA 22902. It tells businesses about our consulting services. It has no accounts and no sign-in, sets no cookies and sells nothing. This policy explains the little personal information it does collect and what we do with it.

What we collect

When you contact us

The contact form asks for your name, your email address and what your message is about, and optionally your company and phone number. Your message is emailed to us; it isn't stored on the website. We send you a short confirmation that repeats only your first name and the topic you chose, never your message.

To keep spam out, we check that your email address's domain can receive mail, keep one-way codes made from your IP address and email address (never the addresses themselves) for up to 24 hours to limit how many messages can be sent, and check a message's wording for unsolicited sales offers, which still reach us but get no confirmation.

Visit statistics

We count visits with Vercel Web Analytics, run by our hosting provider. It records the page you viewed, the website that sent you, your device type, browser and country, without cookies and without storing anything on your device. Visits are told apart by a code that is discarded after 24 hours, so no one can be followed from one day to the next, and we see only totals.

Success stories and testimonials

Our success stories describe work for our clients with their agreement. Where we quote someone, we publish their name, organization and words only with their permission, and we remove a quote or picture on request.

How we use it

To reply to you and arrange any conversation you ask for, to keep spam out of the website, to understand how the site is used, and to show our work with our clients' permission. We don't sell or rent personal information, use it for advertising or profiling, or collect sensitive information.

Cookies, Do Not Track and your choices

The website sets no cookies, so there is no cookie banner, and it loads no third-party scripts, fonts or widgets. When your browser sends a Do Not Track or Global Privacy Control signal, we don't count your visits at all. You can also switch visit statistics off for this browser — the only thing the site may store on your device is that choice:

Who we share it with

Only the service providers that run the website and our email, each handling it just to provide that service to us:

ProviderWhat it does for us
VercelHosts the website and counts visits (Vercel Web Analytics)
UpstashHolds the anti-spam counters for the contact form
ResendDelivers the contact form's emails
Microsoft 365Our business email, where your message arrives and we reply
CloudflareDomain name service (DNS) for peakbeyond.com

They and we are in the United States, so if you contact us from elsewhere your information is handled there. We share it with no one else, except where the law requires or as part of a sale of our business.

How long we keep it

  • Messages — in our email while we're talking or working together, and no longer than three years after our last contact.
  • Anti-spam codes — up to 24 hours.
  • Visit statistics — only as totals, for as long as Vercel reports them.
  • Privacy requests — up to two years after we answer, so we can show that we did.

Seeing, correcting or deleting your information

You can ask us what information we hold about you and for a copy, to correct it, to delete it, or to take down a testimonial. Use our contact form and choose “Privacy request”, or email us: . We may reply to your address first to confirm it's you, and we answer within 30 days. Depending on where you live, you may have other rights under local law, and you can also contact your privacy regulator.

Children

The website is for businesses and isn't directed to children. We don't knowingly collect information from anyone under 16; if you think a child has contacted us, tell us and we'll delete it.

Security

All traffic is encrypted (HTTPS only), a strict Content Security Policy keeps third-party code off the site, and the forms store nothing on it. No service can promise perfect security; if a breach affects your information, we'll tell you and the authorities as the law requires.

Changes

When we change this policy, we update the effective date and version at the top of this page.