Privacy ยท Last updated 9 October 2026
What is collected, and what is not.
This site runs no cookies, no analytics, no advertising pixels and no third-party embeds. The short version: unless you email, call or send the contact form, nothing about you reaches us at all.
Section AWho is responsible
Boutet Holdings LLC, a New Mexico limited liability company (business ID 0008126973), trading as Truepoint Works, is the controller of any personal information described here. Contact: boutet@truepointworks.us.
The business is operated by one person. Any information you send is processed outside the United States.
Section BThis website
The site sets nothing and calls nobody.
- B.1
No cookies, no storage
No cookies are set, and nothing is written to your browser's local storage. There is no consent banner because there is nothing to consent to.
- B.2
No analytics and no tracking
There is no Google Analytics, no advertising pixel, no heatmap, no session recorder and no visitor identification of any kind. We run no tool that identifies who visits this site.
- B.3
No third-party requests while you read
Every file the page loads, including stylesheets, fonts, scripts and icons, is served from this domain, and your browser contacts no other site while you read. The one exception is pressing Send on the contact form (B.4). The domain itself is served through Cloudflare, described under B.5. Typefaces are self-hosted rather than loaded from Google Fonts, so your IP address is never passed to a font provider.
- B.4
The contact form sends your message through Formspree
Nothing you type into the form on the contact page leaves your device until you press Send. When you do, the details you entered (company, name, email address, awarding authority, due date and message) are sent to Formspree, the form service we use, which delivers them to our mailbox. If the form cannot send, it tells you so and you can email us directly instead.
- B.5
Server logs
Cloudflare hosts and secures this site, so it processes standard technical data (IP address, time, page requested, browser type) to deliver the page and defend it against attack. Cloudflare holds those logs under its own retention policy. We do not use them to identify visitors or to build any profile of you.
Section CIf you get in touch
Email, and what happens to it.
If you email, directly or through the form, we receive whatever you put in that message: typically your name, company, email address, and details of a solicitation you are considering. It is used for one purpose: to answer you and, if you engage us, to do the work.
It is never sold, rented or shared. Solicitation documents and bid information you send are treated as confidential and are not used as examples, samples or case studies anywhere without your written agreement.
Enquiries that do not become engagements are deleted within twelve months. Records connected to paid work are kept for seven years, which is what tax and accounting obligations require, then deleted.
Email is handled through Microsoft 365, and files may be stored in Microsoft's cloud storage or another commercial cloud storage service. Messages sent through the contact form also pass through Formspree, which keeps a copy of each submission in its dashboard under its own retention policy; we delete enquiries there on the same twelve-month schedule. These providers process the data on our behalf and under contract. If you call or text +1 (213) 928-5551, we receive your number and whatever you say or write, and it is handled the same way as email.
Section DYour rights
Ask, and it is done.
Wherever you are, you can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. If you are in the UK or the European Economic Area, the UK GDPR and GDPR give you those rights formally, along with the right to object to processing, the right to restrict it, and the right to complain to your data protection authority. If you are in California, the CCPA gives you comparable rights, and note that we do not sell or share personal information as those terms are defined there. Because we run no tracking, there is nothing for a Global Privacy Control signal to switch off.
The lawful basis for handling enquiry correspondence is legitimate interest. You contacted a business about its services and expect a reply. For paid work it is performance of a contract, and for the seven-year records it is a legal obligation.
To exercise any of this, email boutet@truepointworks.us. There is one person to ask and no ticket queue; expect a reply within one business day and completion within thirty days.
Information you send is transferred and processed outside the United States. Sending it is your choice, and it is handled under the terms set out here.
Section EHousekeeping
This site is not directed at children and does not knowingly collect information from anyone under 18.
Links to external sites, such as solicitation portals and government pages, are outside our control and have their own privacy practices.
If this notice changes, the date at the top of the page changes with it. Material changes will be stated plainly rather than buried.