1. Who I am
This site is published and operated by Francesco Federico to support the book The Agentic CMO. For the purposes of UK and EU data-protection law, the data controller is Francesco Federico, contactable at privacy@the-agentic-cmo.com.
2. What I collect
I collect personal data in only two circumstances:
When you request the Cited. PDF. The form on /cited asks for an email address, an optional role, and an optional answer to "what are you trying to solve". I collect these fields only.
When you subscribe to the newsletter. The Chronicles of Change subscribe form is hosted by Substack. Their privacy policy applies; this site does not store newsletter subscriber data directly.
I do not run third-party analytics, advertising, or tracking pixels. I do not place cookies for tracking purposes. The site is hosted on Cloudflare Pages, which logs request metadata for routine operations and security; that log is held by Cloudflare under their privacy policy.
3. Why I hold it
I hold your email address for the limited purpose of sending you the document you requested and one short follow-up email three weeks later asking what you tried. The lawful basis is your consent (Article 6(1)(a) UK GDPR), expressed by completing and submitting the form. Your role and "what are you trying to solve" answers, where given, help me improve the manual; they are stored alongside the email address.
4. Where it sits
The Cited. request data is stored in Cloudflare KV (a key-value store hosted in the United Kingdom and the European Union). Email delivery is handled by Resend (resend.com), which acts as a data processor on my behalf under a data-processing agreement. Resend stores the recipient address and message metadata only for the period required to deliver and audit the email.
5. How long I keep it
Cited. request data is retained for twelve months from the date of submission, after which it is deleted automatically. If you ask me to delete it earlier — by emailing privacy@the-agentic-cmo.com — I will do so within thirty days.
6. Who I share it with
I do not sell, rent, or share your data with third parties for marketing purposes. Your data is processed by:
- Cloudflare — site hosting and KV storage.
- Resend — transactional email delivery for the PDF.
- Substack — newsletter delivery, only if you separately subscribe to Chronicles of Change.
These are technical service providers acting on my written instructions. I do not transfer your personal data outside the UK or EEA except where covered by the appropriate Standard Contractual Clauses or an adequacy decision.
7. Your rights
Under UK GDPR and the EU GDPR you have the right to:
- request a copy of the personal data I hold about you (right of access);
- have it corrected (right to rectification);
- have it deleted (right to erasure);
- withdraw your consent at any time, with effect from withdrawal;
- object to processing or request that processing be restricted;
- lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or the relevant supervisory authority in your member state.
To exercise any of these rights, email privacy@the-agentic-cmo.com. I aim to respond within seven days and in any event within thirty.
8. Cookies
This site does not set tracking cookies. The only cookies that may be set are technical cookies issued by Cloudflare for security and rate-limiting (such as __cf_bm); these are essential to the site's operation and are not used for analytics or profiling.
9. Children
This site is not directed at, and I do not knowingly collect personal data from, anyone under sixteen.
10. Changes to this notice
If I make material changes to how I handle personal data, I will update this page and refresh the "last updated" date at the top. The current version is always at the-agentic-cmo.com/privacy.
11. Contact
Questions, complaints, or data-subject requests: privacy@the-agentic-cmo.com.