Privacy.

Mesa Group collects and uses information narrowly. This page describes what we collect, how we use it, and how to reach us with questions about your data.

What we collect.

Mesa Group collects no personal data through web analytics. The firm uses Plausible Analytics, a privacy-first analytics platform that does not use cookies and does not collect personal information. Page views and traffic patterns are recorded in aggregate only.

The firm collects information you voluntarily provide through forms on the site:

  • Information submitted through the structured intake at /begin (name, email, phone if provided, title, firm name, firm website, revenue range, industry, employee count, engagement type, description of need, timeline, referral source, and any additional notes you choose to include).
  • Email addresses submitted to download the Command Mapping Thesis or other gated documents, along with your optional opt-in preference for future research.

How form data is used.

Information submitted through the structured intake is used solely to respond to your inquiry. Mesa Group reviews your submission, develops a scope and proposal, and responds within twenty-four hours. Your information is not shared with third parties, used for marketing to other audiences, or sold under any circumstances.

If your engagement proceeds, the information you provided in the intake becomes part of the engagement record. If your engagement does not proceed, the information remains in the firm's records for the data retention period described below.

Email-gated downloads.

When you submit your email to download the Command Mapping Thesis or another gated document, Mesa Group uses your email address to deliver the requested document. If you opt in to future research, your email is added to a research distribution list that the firm uses to send notifications when new publications are released. The frequency is low — typically one or two communications per quarter.

You can unsubscribe from research communications at any time by clicking the unsubscribe link in any message or by contacting us using the address below. Your email is not shared with third parties, used for marketing on behalf of other organizations, or sold.

Data retention.

Form submissions are retained for two years from the date of submission. After that period, submissions that did not result in an engagement are deleted. Submissions that resulted in an engagement are retained as part of the engagement record for the duration of the engagement and for seven years thereafter, consistent with standard professional services record-keeping practice.

Email addresses submitted for document downloads are retained until you unsubscribe or until you request deletion under the rights described below.

Your rights.

You have the right to access the information Mesa Group holds about you, to correct any information that is inaccurate, and to request deletion of your information at any time. To exercise any of these rights, contact us using the address below.

Requests are processed within thirty days. Mesa Group does not charge fees for access, correction, or deletion requests.

Cookies and tracking.

The Mesa Group sites do not use cookies for analytics, advertising, or behavioral tracking. The Plausible Analytics platform the firm uses operates without cookies entirely. The sites do not include third-party tracking scripts of any kind — no Google Analytics, no Facebook pixels, no advertising technology, no session recording, no behavioral analytics.

Your browsing of the Mesa Group sites is not tracked across sessions or across other sites you visit.

Contact.

For questions about this privacy policy or to exercise the rights described above, contact privacy@mesa.group.

Mesa Group is headquartered in Mount Pleasant, South Carolina, United States.

Last updated · May 2026