Privacy Policy
Last updated: 2026-09-06
Who we are
OK Next LLC is the controller of the personal data described in this policy. OK Next LLC is a limited liability company formed in the State of Wyoming, United States.
Its registered office is 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Questions about this policy, and any request under it, go to hello@oknextllc.com.
What this policy covers
This policy covers oknextllc.com and the email enquiries sent to us through it. It does not cover work carried out for a client.
Client engagements are governed by a written engagement agreement and, where OK Next LLC handles personal data on a client’s behalf, by a data processing agreement. In that relationship the client is the controller and OK Next LLC is the processor. Those documents prevail over this policy for that work.
What we collect
There is no form on this site, so nothing is collected by filling anything in. Every page is statically rendered and served as a file. Three things still produce data.
- Server logs. The hosting provider records the requests it serves: IP address, timestamp, the URL requested, the referrer, the user agent string, and the response status. They exist so the site can be kept available and defended against abuse.
- Analytics. Vercel Analytics and Speed Insights count page views and measure real-user loading performance. Both are cookieless. A visit is counted using a short-lived hash derived from the request and rotated daily; it cannot be reversed to identify you and it is not shared with any other site.
- Email you choose to send. Your address, whatever you write, your name and employer if you sign with them, and any attachment you include.
Nothing on this site asks for a password, stores an account, or takes a payment. There is no login and no user record.
Cookies
This site sets no cookies and runs no cross-site tracking, which is why there is no cookie banner. No advertising pixel, no tag manager, no session cookie, no fingerprinting script, no third-party embed that could set one on our behalf.
The only thing this site can place in your browser is a single session-storage flag that stops an opening animation from replaying while you move between pages in the same tab. It carries no identifier, it is never sent to a server, and the browser discards it when the tab closes.
If that ever changes — if a cookie is set here for any purpose beyond delivering the page you asked for — this section changes with it, and a consent banner appears before the cookie does.
Legal bases under GDPR
Where the GDPR applies, each purpose below has one legal basis and we do not swap between them.
- Server logs and security. Article 6(1)(f), legitimate interests: keeping the site available and protecting it from abuse.
- Aggregate analytics. Article 6(1)(f), legitimate interests: knowing which pages are read, measured without an identifier and without profiling.
- Email about a possible project. Article 6(1)(b), steps taken at your request before entering into a contract.
- Any other correspondence. Article 6(1)(f), legitimate interests: answering a message addressed to us.
- Records kept for tax and accounting. Article 6(1)(c), compliance with a legal obligation.
The categories of personal data processed are: identifiers you supply in an email, such as your name, email address and telephone number if you include one; the content of your message; your employer and role where you state them; and technical data in server logs, such as IP address and user agent. We do not ask for any special category of data under Article 9, and you should not send it.
Where we rely on legitimate interests you can object at any time, and we will stop unless there is a compelling ground that overrides your objection. There is no automated decision-making and no profiling on this site.
US state privacy rights
OK Next LLC does not sell personal information and does not share it for cross-context behavioral advertising. It never has, and it has no advertising business that would give it a reason to.
Under the California Consumer Privacy Act as amended by the CPRA, and under the comparable laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and the other states that have enacted them, the categories of personal information collected through this site are: identifiers, meaning name, email address and IP address; commercial information, meaning the nature of an enquiry; and internet activity, meaning the pages requested and the cookieless performance measurements described above.
We collect no biometric data, no precise geolocation, no sensitive personal information as those statutes define it, and no information about education, employment history or protected characteristics, except where a person volunteers it in an email. Because there is no sale and no sharing, this site carries no “Do Not Sell or Share My Personal Information” link: there is nothing for it to opt you out of.
Residents of those states may request access to the personal information held about them, a copy of it in a portable form, correction of it, and its deletion. Exercising a right costs nothing and changes nothing else about how you are treated. An authorized agent may make a request on your behalf with written proof of authority.
Processors and sub-processors
Two companies process data on our behalf, and both are named here. No unnamed partner sits behind them.
- Vercel Inc. (United States) — hosting and content delivery for oknextllc.com, the server logs that hosting produces, and the Vercel Analytics and Speed Insights measurement described above.
- Cloudflare, Inc. (United States) — authoritative DNS for oknextllc.com and the email routing that carries a message addressed to us to the mailbox we read.
Each is bound by its own data processing terms, which restrict it to processing on documented instructions. If a third processor is ever added, it is named in this section before it starts.
International transfers
Data reaches the United States, because that is where OK Next LLC and both processors are.
If you are in the European Economic Area, Switzerland or the United Kingdom, the email you send and the log entry your request produces are transferred to the United States. That transfer relies on the Standard Contractual Clauses adopted by the European Commission in Decision 2021/914 and, for the United Kingdom, on the Information Commissioner’s International Data Transfer Addendum. Both form part of the data processing terms in place with each processor named above. Traffic is encrypted in transit, and mailbox contents are encrypted at rest.
Retention
Nothing is kept because it might one day be useful.
- Server logs are held by the hosting provider on its own retention schedule and deleted on that schedule. OK Next LLC does not export them or keep a copy.
- Analytics are reported in aggregate. The daily hash a visit is counted with is discarded after 24 hours.
- An enquiry that does not become an engagement is kept for 24 months from the last message, then deleted.
- An enquiry that becomes an engagement is kept for the life of that engagement and for seven years after it ends, which is the period United States tax and corporate record-keeping expects.
- A privacy request and our answer to it are kept for 24 months, because both GDPR and the US state statutes require us to be able to show that we answered.
Your rights and how to exercise them
Every right on this page is exercised the same way: send one email. Say which right you are exercising and give us enough to find your data. Usually the address you write from is enough.
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You may also lodge a complaint with the supervisory authority of the country you live in. Under the US state laws listed above you have the rights described in that section.
We answer a GDPR request within one month of receiving it, and a US state request within 45 days, and we tell you if we take the extension both allow. There is no charge and no account to create. If we cannot tell that a request comes from you, we ask for one more piece of information before we act on it.
Children’s data
This site is not directed at children, and we do not knowingly collect personal data from anyone under 16. Nothing here is marketed to a child and there is no account to open. If you believe a child has sent us personal data, write to the address above and we will delete it.
Changes to this policy
The date at the top of this page is the date this text last changed. When the policy changes, that date changes with it.
A change that affects what is collected, why it is collected, or who processes it is summarized in this section for at least 12 months after it takes effect. There is no mailing list to notify you from, so the date and this note are the record.