Privacy

This policy describes what Cloud Advisory Solutions collects, what it does not, and how data from audit engagements is handled. It is written in plain language on purpose. Last updated: 19 August 2026.

Who we are

Cloud Advisory Solutions provides AWS cost optimisation and governance services. For anything in this policy, the contact is contact@cloudadvisory.dev.

This website

This site is static. It sets no cookies, runs no advertising trackers and loads no third-party analytics. Fonts are served from this domain, not from a font network, so no third party learns you visited by supplying assets.

The site is delivered by Cloudflare. Like any host, Cloudflare processes your IP address and request details in transit to serve pages and to protect against abuse; that processing is described in Cloudflare's privacy policy. We do not receive or keep per-visitor logs from it.

The inquiry form

The form on the connect page has no backend. Pressing send composes an email in your own mail client, addressed to us; nothing you type is transmitted to or stored by this website. The message only reaches us if you choose to send it, and it arrives as ordinary email.

Booking a call

Scheduling is handled by Cal.com. When you book, Cal.com collects your name, email address and the details you enter, under Cal.com's privacy policy. We receive the booking details and use them only to hold the call and follow up on it.

Email correspondence

If you write to us, we keep the correspondence for as long as we are talking, and afterwards only as long as tax and contractual record-keeping require. We do not add you to a mailing list, and we do not share or sell correspondence to anyone.

Audit data

An audit uses a read-only IAM role in your AWS accounts, scoped by you. Through it we read resource metadata, configuration, tags, utilisation metrics and billing data. We do not read the contents of your databases, object storage or application data — and the role we ask for is not able to.

Findings and the evidence behind them are stored in your own AWS account wherever the engagement allows it; working copies we hold are limited to what the engagement needs, accessible only to the people working on it, and deleted within 90 days of the engagement ending unless you ask us to keep them or the contract says otherwise. The findings themselves are yours.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email contact@cloudadvisory.dev and a person will answer. If you are in a jurisdiction that grants you further rights — the GDPR or UK GDPR, for instance — those rights apply and we will honour them.

Changes

If the site starts collecting something it does not collect today — analytics, a form backend, anything — this page changes first, with a new date at the top. A practice this policy does not describe is a practice we do not have.