Privacy Policy
Last updated: October 14, 2026
Hey Kaleb & Co. is the consulting practice of Loosbrock Strategies, LLC. I'm Kaleb Loosbrock, and I run it myself. When this policy says "I," "me," or "my," it means the business.
This page explains what I collect through my website, why, who else handles it, and what you can do about it. I help research teams use AI responsibly, so I've tried to be as specific here as I'd ask a client to be. Questions: kaleb@heykaleb.com.
What this policy covers
- heykaleb.com, including my blog (Musings) and my free tools: the HEARTS Scorecard (a self-assessment of how a team uses AI), the ROI calculator, and the AI Disclosure Tool
- packs.heykaleb.com, where the free toolkits ("packs") that go with my newsletter live
- My newsletter, and the rating buttons in it
- Calls you book through the site
- Emails you send me
It doesn't cover client work. That's governed by the contract and data terms we sign together. It also doesn't cover other sites I link to, such as LinkedIn or the AIxUXR Discord community. Each has its own privacy policy.
Who is responsible for your data
Loosbrock Strategies, LLC (doing business as Hey Kaleb & Co.)
1915 W Balmoral Avenue, Chicago, IL 60640, USA
kaleb@heykaleb.com
What I collect
What you give me
| When you... | I collect |
|---|---|
| Book a call | Your name, email, and answers to the booking questions (such as your LinkedIn profile and what you'd like to discuss). Calendly collects this for me. |
| Take the HEARTS Scorecard | Your results show on the page. If you choose "Email it to me," I collect your email and your answers so I can send them. They're saved to a Google Sheet. |
| Request a toolkit or pack, or subscribe to the newsletter | Your email address. Requesting a toolkit or pack also signs you up for the newsletter. You can unsubscribe anytime. |
| Rate a newsletter, pack, or blog post | Your rating and any comment you choose to add. |
| Email me | Your email address and whatever you write. |
Please don't put sensitive details in free-text fields, such as health or financial information, or information about other people.
What I look up
Before a call, I may read public information about you and your company, such as your LinkedIn profile or company website, so the call is useful.
What's collected automatically
- Visit statistics. Squarespace counts page visits on heykaleb.com even if you decline cookies. It records the page, how you arrived (the referring site and any tracking tags in the link that show which campaign it came from), your approximate location, your device, and your browser.
- Analytics cookies, only if you allow them. If you accept analytics cookies, Google Analytics and Squarespace use cookies to tell new visits from returning ones and see how people move through the site.
- Rating details. When you rate a blog post, the rating widget also sends your browser, operating system, device type, language, time zone, screen size, the page address, and the link's tracking tags. When you rate from an email or a pack page, the rating, which newsletter issue or pack it's for, and the link's tracking tags are saved to my feedback sheet. My sheet doesn't store your IP address. Google, which runs the sheet, can see that the link was clicked. For ratings from an email, so can Squarespace, which sends my newsletter.
- Server logs. Like every website, my hosts record your IP address and basic request details to keep the sites running and secure. Squarespace hosts heykaleb.com, Netlify hosts packs.heykaleb.com, and GitHub hosts the AI Disclosure Tool and the ROI calculator.
- Fonts and page code. My pages load fonts from Adobe Fonts and Google Fonts. Pack pages load images from jsDelivr, and the AI Disclosure Tool loads styling code from Tailwind CSS. Each of these services receives your IP address when a page loads.
- Newsletter activity. Squarespace, which sends my newsletter, records whether it was delivered and opened, and which links were clicked.
What I don't do
- The AI Disclosure Tool and the ROI calculator don't send what you type anywhere. They run in your browser, so I never see your answers. The pages themselves load like any other page on this site.
- Pack pages don't use analytics cookies.
- I don't use advertising pixels, I don't retarget, and I don't sell your information.
Cookies
Cookies are small files a website stores in your browser. On heykaleb.com:
- Necessary cookies keep the site working and remember your cookie choice. These are always on.
- Analytics cookies (Google Analytics and Squarespace analytics) help me see which pages are useful. You choose whether to allow them in the cookie banner. You can change your choice anytime with the Cookie Preferences button at the bottom of the page.
If you open the scheduling tool, Calendly may set its own cookies.
How I use AI with your information
What I do. I sometimes use AI tools to help me with information you send me, such as summarizing a booking request, drafting a reply to your email, or reviewing your scorecard answers before a call. The tools are:
- Claude (Anthropic)
- Gemini (Google)
- Perplexity
- Granola, for call notes (see below)
My rules:
- I put in only what the task needs.
- I don't use AI to make decisions about you. I review everything myself before I use it.
- Each provider's own terms decide whether it can use what I put in to improve its models. I review those settings and keep what I put in to what the task needs.
Calls. If you book a call, I may use Granola to take notes or transcribe it. I'll ask at the start of the call, and I won't record or transcribe without your yes. If you say no, the call goes ahead the same way.
Why I use your information (and the legal basis)
Privacy laws in the EU and UK (the GDPR) require me to name a legal reason for each use. In plain terms:
| What I do | Why | Legal basis | What that means |
|---|---|---|---|
| Schedule and hold your call; reply to your email | You asked me to | Pre-contract steps | You asked for something, and I need your information to do it |
| Email your scorecard results; send a toolkit or pack | You asked for them | Consent | You said yes |
| Send the newsletter | You subscribed | Consent | You said yes, and you can take it back anytime |
| Analytics cookies | See which content helps | Consent | Only if you accept them |
| Visit counts without cookies, rating details, server logs | Improve content; keep the site secure | Legitimate interests | A reasonable business need that doesn't override your rights |
| Look up public information before a call; AI-assisted notes and drafts | Prepare well and work accurately | Legitimate interests (consent for call recordings) | As above. Recordings happen only with your yes. |
| Keep tax and accounting records | The law requires it | Legal obligation | I have to |
If I'm relying on your consent, you can withdraw it anytime. Withdrawing doesn't undo what already happened.
Who I share it with
I don't sell your personal information, and I don't use it for targeted advertising.
These service providers handle data for me:
| Provider | What it does |
|---|---|
| Squarespace | Hosts heykaleb.com, runs its forms, sends the newsletter, and provides visit statistics |
| Hosts my business email (Google Workspace). Runs Google Analytics (only if you accept). Stores scorecard answers and ratings in Google Sheets. Provides Gemini and Google Fonts. | |
| Calendly | Call booking |
| Netlify | Hosts packs.heykaleb.com |
| GitHub | Hosts the AI Disclosure Tool and the ROI calculator |
| Adobe, jsDelivr, Tailwind CSS | Fonts, images, and page styling |
| Anthropic, Perplexity, Granola | AI assistance, as described above |
I may share information with my accountant or lawyer when needed, or with authorities when the law requires it. If the business is ever sold or reorganized, I'd only transfer your information to a buyer who agrees to protect it in line with this policy.
International transfers
I'm in the United States, and so are most of my providers. If you're in the EU, UK, or Switzerland, your information is transferred to the US. For those transfers I rely on the safeguards my providers offer, such as the EU–US Data Privacy Framework (including its UK and Swiss extensions) and Standard Contractual Clauses.
How long I keep it
| Information | How long |
|---|---|
| Booking details and email conversations | About 2 years after we last talked |
| Scorecard answers | About 2 years, or until you ask me to delete them |
| Ratings and comments | About 2 years |
| Call notes and transcripts | About 2 years, or until you ask me to delete them |
| Newsletter list and newsletter activity | Until you unsubscribe |
| Google Analytics event data | No more than 14 months |
| Squarespace visit statistics and server logs | Kept by my hosts under their own retention rules |
| Tax and contract records | As long as the law requires |
I clear older records every quarter. When I delete something from my own accounts, any copies Calendly, Granola, Google, or the AI providers hold are kept or deleted under those providers' own terms.
Your rights
Everyone can:
- Unsubscribe using the link at the bottom of any email
- Change cookie choices with Cookie Preferences
- Ask what I hold about you, and ask me to correct or delete it
If you're in the EU or UK, you can also ask me to limit how I use your data, ask for a copy in a portable format, and object to uses based on legitimate interests. You can complain to your data protection authority (in the UK, that's the Information Commissioner's Office).
If you're in California or another US state with a privacy law, you can ask to know, correct, or delete what I hold. I don't sell your information or use it for targeted advertising, so there's nothing to opt out of. I won't treat you differently for asking.
To make a request, email kaleb@heykaleb.com. I may need to confirm it's you. I'll reply within one month for EU and UK requests, and within 45 days for US state requests.
Security
I limit access to me, and I use established providers. No system is perfectly secure. If a breach affects your information, I'll tell you as the law requires.
Children
This site is for professionals. I don't knowingly collect information from anyone under 16. If you think a child has sent me information, email me and I'll delete it.
Changes to this policy
When my tools or the law change, I'll update this page and its date. If I make a significant change, such as collecting a new kind of information or using AI in a new way, I'll also note it in the newsletter.
Version history - October 14, 2026: First published version
Contact
kaleb@heykaleb.com
Loosbrock Strategies, LLC (dba Hey Kaleb & Co.) · 1915 W Balmoral Avenue, Chicago, IL 60640, USA