Last updated October 2, 2026
Privacy policy
What I collect, why, and what I do not do with it. Written to be read, not to be skipped.
(no small print. promise.)The short version
- I collect what you give me: your email, your inquiry, your booking details, and your order
- I never sell your information, and I only share it with the services listed below that run this business
- Marketing emails only go to people who asked for them, and every one has an unsubscribe link
- Access to your Google or website accounts is used only for your project, and you can revoke it at any time
- Questions or removal requests: joann@thegrandschema.com
Who I am
The Grand Schema is an SEO and UX studio owned and run by Joann Schermerhorn, based in Overland Park, Kansas. Contact: joann@thegrandschema.com or (913) 283-4203. This policy covers thegrandschema.com and the services offered through it.
What I collect
When you fill in a form: your name, email address, phone number if you give it, your website address, and whatever you write in the message field.
When you book an audit: the details above, plus your chosen time slot and answers to the booking questions.
When you buy a toolkit: your name, email address, and billing details, so the receipt and downloads reach you. Payment is processed by Stripe. I never see or store your full card number.
When you take the scorecard or join a waitlist: your email address, and your answers if you send them to me.
When you become a client: access you grant me to your Google Business Profile, Google Search Console, analytics, or website, plus the data those tools contain about your business.
Automatically, when you visit: standard analytics, meaning pages viewed, roughly where you are, which site sent you, and what kind of device you used. This is aggregate and does not identify you personally.
Why I collect it
To answer your message, deliver work and downloads you have paid for, take payment, send you what you asked for, and understand which pages on this site are useful. Nothing else.
Who else touches it
These services run parts of this business, and your information passes through them: Rocket.net hosts the website. Stripe handles payments. FluentBooking, FluentCart and Fluent Forms handle scheduling, toolkit orders, and forms, and store that information on this website. Kit sends the email list and waitlists, if you joined. Google Analytics and Google Search Console measure the site. Google Workspace handles email.
Each has its own privacy policy. I do not sell your information to anyone, and I do not share it with advertisers.
Cookies
This site uses cookies for analytics, for the checkout and your account, and for the booking and form tools. You can block or delete cookies in your browser settings. Reading the site works without them, but checkout and your account need them to function.
Marketing emails
You only receive marketing email if you asked for it, by taking the scorecard or joining a list or waitlist. Every email has an unsubscribe link, and unsubscribing is immediate. Emails about work you have booked or something you bought are not marketing and continue until the project or order is finished.
Client data and account access
Access you grant me to your accounts is used only to complete your project. I do not change anything outside the agreed scope, I do not share your site data or reports with anyone else, and I do not use your account data to benefit another client. Revoke access whenever you like, including the moment your report is delivered.
Results and screenshots may be used anonymously as an example. Naming your practice in a case study only happens with your written permission.
How long I keep things
Inquiries and form submissions: up to two years. Client project files and reports: up to seven years, since they are business records. Toolkit orders: as long as you have an account, so your downloads stay available. Email list: until you unsubscribe. Payment records are kept by Stripe on their own schedule.
Your choices
You can ask me what I hold about you, ask me to correct it, or ask me to delete it. Email joann@thegrandschema.com and I will respond within 30 days. Deleting information I need for tax or legal records is not always possible, and I will tell you if that applies.
Security
The site runs over HTTPS, accounts use strong unique passwords with two-factor authentication where it is available, and access to client accounts is limited to what the work requires. No system is perfect. If something goes wrong that affects you, I will tell you.
Children
This site and these services are for business owners. They are not directed at children, and I do not knowingly collect information from anyone under 16.
Changes
If this policy changes, the date at the top changes with it. Material changes that affect how I use your information will be emailed to anyone on the list.
Questions
Email joann@thegrandschema.com. If something here is unclear, tell me and I will rewrite it, because a privacy policy nobody understands is not doing its job.