Privacy Policy

This policy explains what personal data Results2Go collects, why, how long we keep it, and who else sees it. It is written to be read, not to be survived.

1. Who we are

Results2Go is a sole trader business operated by Johannes (Jo) O'Kelly, NIF 313749612, of Rua do Viveiro, Lagoa, Portugal. We are the data controller for the personal data described here. You can reach us at jo@results2go.com.

2. The short version

We collect personal data in three places only: the Busywork Audit form, the booking of an AI Strategy Call, and the voice assistant on our home page — each of which you start yourself. We set no advertising cookies and do no profiling of any kind. We use Google Analytics to count visits and Microsoft Clarity to see how pages get used, but only if you allow it — both stay switched off until you do. We do not sell or rent personal data, and we never will.

3. What we collect, and when

3.1 The Busywork Audit

The Busywork Audit runs entirely in your browser. Nothing is sent anywhere while you use it. Only when you press submit do we receive:

• Your first name and email address
• The hours-per-week figures you entered, and the estimate calculated from them

That submission is delivered to our inbox by Web3Forms, which acts as a processor for us. We use it to send you your audit and a short action plan, and to follow up about our services.

3.2 Booking an AI Strategy Call

Bookings are handled by Calendly. When you book, you give Calendly your name, email address and chosen time, and we receive those details along with anything you write in the booking form. Calendly is a controller in its own right for the data it holds; its own privacy notice applies to that. See our cookie policy for how the widget is loaded only with your permission.

3.3 The voice assistant

The voice assistant on our home page is powered by Vapi. Nothing is captured until you press the microphone button and grant your browser's microphone permission. From that moment until you end the call, your speech is streamed to Vapi and its AI model providers, where it is transcribed and answered. Ending the call ends the capture. We do not use these conversations to identify you, and we do not attach them to any other record.

3.4 Email and other correspondence

If you email us, or we correspond about a proposal or an active engagement, we hold that correspondence and the business contact details in it.

3.5 Server logs

Our site is hosted by Vercel, which records standard request logs including IP address, user agent and the pages requested. These are generated by the hosting infrastructure for security and reliability, are retained briefly by Vercel, and are not used by us to build any profile of you.

3.6 Counting visits

We count and study visits three ways, and they are not the same in what they see.

Vercel Web Analytics runs on every page. It sets no cookies and stores nothing on your device: to separate one visitor from another within a day it derives a temporary hash and discards it daily, so it cannot recognise you on a later visit. It records the page, and coarse details such as country and device type. Because it cannot identify you, it needs no consent.

Google Analytics 4 runs only if you allow it in the cookie banner. It sets its own first-party cookies so it can tell a returning visit from a new one, and it does not store your IP address. Decline, or ignore the banner, and it is never loaded at all. Withdraw later and we delete its cookies for you. We use it to count and group visits and for nothing else: no advertising, no remarketing, and Google Signals is switched off. Full detail in our cookie policy.

Microsoft Clarity runs only on the same yes. It records how you move through a page — clicks, scrolling, where you stop — as a replay and heatmap, so we can see what gets in the way. Text typed into forms is masked in your browser before anything is sent. It sets its own cookies to tell a returning visit from a new one. Microsoft processes this data for us; decline and Clarity is never loaded, withdraw later and we tell it to stop and delete its cookies on our site.

4. What we do not collect

• No analytics at all unless you allow it, and nothing we do collect is used for advertising
• No advertising, remarketing or conversion-tracking pixels
• No social media trackers
• No profiling and no automated decision-making that produces legal or similarly significant effects
• No special category data. Please don't send us any

The only thing we store on your device is a record of your analytics choice — unless you allow analytics, in which case Google Analytics and Microsoft Clarity set cookies of their own. Both are described in the cookie policy.

5. Our legal basis for each use

• Sending your audit result and action plan — performance of a step taken at your request, and our legitimate interest in responding to an enquiry you started.
• Responding to enquiries and holding a strategy call — our legitimate interest in dealing with people who approach us about our services.
• Delivering a plan you have engaged us for — performance of our contract with you.
• Running Google Analytics and Microsoft Clarity — your consent, which you can withdraw at any time via Cookie settings. Nothing is loaded before you give it.
• Running the voice assistant — your consent, given by starting a conversation and stopping when you end it.
• Marketing emails about our services — your consent, withdrawable at any time via the unsubscribe link or by emailing us.
• Keeping accounting and tax records — compliance with our legal obligations under Portuguese law.

Where we rely on legitimate interests, we have considered your interests and rights, and we use the data only for the purpose you would reasonably expect from having contacted us.

6. How long we keep it

• Audit submissions and enquiries that go nowhere — twenty-four months from your last contact with us, then deleted.
• Booking records — twenty-four months from the call.
• Voice assistant conversations — held by Vapi under its own retention schedule. We do not keep our own copy.
• Client records for an active engagement — for the life of the agreement and six years afterwards, to cover legal and contractual claim periods.
• Invoices and accounting records — ten years, as Portuguese tax law requires.
• Your analytics choice — twelve months on your own device, after which we ask again.
• Google Analytics cookies — twelve months on your own device if you allow them, deleted sooner if you withdraw. The aggregated reports Google holds follow its own retention, set to the shortest period it offers.
• Microsoft Clarity cookies — up to twelve months on your own device if you allow them, deleted sooner if you withdraw. Recordings are kept by Microsoft for thirty days unless we mark one to keep, which we do only to fix a specific problem.

7. Who else sees your data

We use a small number of service providers. Each receives only what it needs to do its job, and none is permitted to use your data for its own purposes:

• Web3Forms — delivers audit form submissions to our inbox
• Calendly — scheduling
• Vapi and its underlying AI model providers — the voice assistant
• Vercel — website hosting, and cookieless page-view counting
• Google — Google Analytics, and only if you have allowed it
• Microsoft — Microsoft Clarity, and only if you have allowed it
• Our email provider, for correspondence

Typefaces are served from our own origin rather than Google Fonts, so loading a page discloses nothing to Google unless you have allowed Google Analytics.

Beyond these, we disclose personal data only to our professional advisers where necessary, or to regulators, courts or law enforcement where we are legally required to. We do not sell personal data, and we do not share it with third parties for their own marketing.

8. Transfers outside the EEA

Several of the providers above are based in the United States, so some of your data is processed outside the European Economic Area. Those transfers rely on the European Commission's Standard Contractual Clauses, or on the EU–US Data Privacy Framework where the provider is certified under it. You may request details of the safeguards that apply to a particular provider by emailing us.

9. Security

The site is served over HTTPS. Access to our inbox and client records is protected by strong, unique credentials and multi-factor authentication, and is limited to Jo O'Kelly. We keep the data we hold deliberately small, which is the most effective protection available to a business of our size. No system is perfectly secure, and we cannot guarantee absolute security.

10. Your rights

Under the GDPR you have the right to:

• Ask what personal data we hold about you, and receive a copy
• Have inaccurate data corrected
• Have your data erased
• Restrict or object to our processing, including any processing based on legitimate interests
• Receive data you gave us in a portable, machine-readable form
• Withdraw consent at any time, without affecting anything done before you withdrew it
• Object to direct marketing at any time, which we will always honour

Email jo@results2go.com to exercise any of these. We will respond within one month. There is no charge, and you do not need to give a reason.

11. Who this site is for

We provide our services to businesses, and this website is aimed at business audiences. It is not directed at children, and we do not knowingly collect data from anyone under 18.

12. Changes to this policy

If we change how we handle personal data, we will update this page and change the date below. If a change is significant and we hold your contact details, we will tell you directly.

13. Contact

Results2Go
Rua do Viveiro
Lagoa, Portugal
Email: jo@results2go.com

14. Complaints

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1º
1200-651 Lisboa, Portugal
Website: www.cnpd.pt

Last updated: 21 August 2026