Privacy

What we collect, and what we do with it.

This notice is written to be read, not to be survived. It covers this website and the outreach we do on behalf of our clients.

This website

• Analytics. Our own usage records include the requested page, country, referring site and device type, without setting a cookie. For approved visitors, our own usage records include the firm supplied in the access request. On public pages, Cloudflare Web Analytics measures page views and loading speed without cookies. Google Analytics measures how visitors find and use the site; Microsoft Clarity records scrolling and clicks. These tools may set cookies. Third-party analytics are omitted for approved visitors, on pages containing query strings, and on access and approval pages. Google Analytics receives page addresses without query strings; forms are marked for masking in Clarity, and we do not send their contents in our analytics events.
• Advertising. We advertise this firm and we use the ordinary tools to do it: search advertising, conversion measurement, and audiences built from activity on this website. Some of what is described above can therefore be used to show you Old Soldier advertising elsewhere. Under California law that counts as sharing for cross-context behavioral advertising, even though no money changes hands, so we say it plainly rather than hiding behind the fact that we are not paid for it. Two things it never includes: we do not sell personal information, and no client data and no business owner's information ever goes into any advertising tool. Advertising uses this website's visitors, and nothing else.
• Turning it off. When your browser sends a Global Privacy Control signal, we do not load Google Analytics, Microsoft Clarity, or advertising tags. Private browsing does not necessarily disable these tools. The site works without them. You can also write to barker@oldsoldier.org with a privacy request. Our own usage records are separate from these third-party tools and include the firm association described above for approved visitors.
• Cookies. The analytics and advertising tools above set cookies, in the ordinary way, unless you have opted out. One other cookie is ours: when your access is approved we set a single signed token so the fee schedule and the sample deal room open for you on later visits. It carries no personal information, it is marked HttpOnly, Secure and SameSite=Lax, it is sent to our server with each request because that is how the server recognizes you, and it expires after 90 days. Clearing your site data removes all of them.
• The unlock form. If you submit it, we receive your name, firm, firm website, work email and the line you write about what you are buying. Alongside those we record the technical signals that came with the request: IP address, the approximate city and country the network resolves to, the network operator, the browser's user-agent string, the page you arrived from and the result of the automated bot check. We use all of it to decide whether to grant access, to reply to you, and to keep a record that a buyer asked. If we go on to correspond with you, that correspondence lives in our CRM and email under the retention described below. We do not sell it and we do not add you to any list you did not ask for.
• Server logs. Our hosting provider records ordinary request data, including IP address, for security and abuse prevention, and keeps it for a short period.
• Fonts. Typefaces are served by Google Fonts, so your browser makes a request to that service when the page loads.
• Booking a call. The scheduling link opens HubSpot, which is our CRM. What you enter there is governed by HubSpot's own processing on our behalf.

Business owners we contact

Before we contact a company we hold what is public about it, such as its website, state filings, trade association listings and news, plus business contact details for its owners or officers obtained from public sources and commercial business directories. We contact a company only when a client with a written mandate has named it.

After a conversation we hold the notes from it and anything the owner chooses to share. That material is visible only to Old Soldier and to the one client whose mandate named the company. It is never pooled across clients and never sold, and it is not shared with another buyer or used for another client's search without the owner's consent.

Owners can ask what personal information we hold about them and we answer within 30 days: contact details and the record of our correspondence. That is not a route to our client's identity, our research or the work product we produce for a client, none of which is the owner's personal information. Ask us to correct what we hold and we will. Ask us to stop and we stop the same day, permanently and across every mandate. Write to barker@oldsoldier.org.

Clients

For clients we hold the engagement record, contact details for the people on your team, the work product of your search, and correspondence. Handling of the deal room is described in the security summary.

How long we keep things

• Client work product and correspondence: retained under the engagement agreement, which sets the period and what happens at the end of it.
• Owner conversation notes and owner contact records: kept while the relationship is live, which can be years. Owners regularly ask us to check back annually, sometimes long after the search that first reached them has closed, and we cannot honor that from a deleted file. Ask us to stop and we stop.
• A do-not-contact request: kept permanently, because that is the only way to honor it.
• Unlock form submissions: kept as an ordinary business record of who asked for access.

Who else touches the data

Service providers acting on our instructions: hosting, email, the CRM, file storage, the phone system, company research data providers, and AI drafting tools under business terms that exclude the data from training. Separately, the analytics and advertising providers named above receive website activity, as described in that section. We do not sell personal information, and client and owner data is never handed to an advertising provider.

Your choices

Ask for a copy of what we hold about you, ask for a correction, ask for deletion, ask us to stop contacting you, or opt out of sharing for advertising, by writing to barker@oldsoldier.org or calling 307-690-7536. We answer within 30 days and do not require you to create an account to ask. A Global Privacy Control signal from your browser is treated as an opt-out on its own, with nothing to send us.

Last updated September 8, 2026. Old Soldier LLC, Luther, Montana.