Written in plain language on purpose. If anything here is unclear, ask me and I will fix the wording.
Last updated October 2026. This policy covers this website and the notes people send me through it.
The short version: I collect the little I need to reply to you and to run the site, I do not sell or share it for marketing, and anything you share during an engagement is confidential under our agreement.
If you use the contact form, I collect what you send: your name, your email address, your organization, and whatever you write in the message. Nothing on this site requires an account, and I do not ask for payment details here.
The site also records basic, aggregate usage through Netlify, the service that hosts this site: pages visited, how you arrived, rough region, and device type. There are no advertising trackers and no cross-site profiling.
To reply to you, to work out whether I am the right help, and, if we work together, to deliver and administer the engagement. Site analytics are used to understand which pages are useful and nothing more.
I do not sell, rent, or trade your information. I do not add you to a marketing list because you sent a note, I do not share your details with vendors looking for leads, and I do not use your information to target advertising anywhere.
The usual infrastructure: a website host, an email provider, an analytics provider, and a scheduling tool. They process data on my behalf under their own security and privacy terms. Beyond that, I disclose information only if I am legally required to. If that happens I will tell you, unless I am prohibited from doing so.
Anything you share with me during an engagement, including assessments, architecture, incidents and board material, is governed by our engagement agreement and any NDA, not by this page.
None. The analytics described above are measured by the host from ordinary web requests, so this site sets no cookies at all, for analytics or anything else. Nothing is stored in your browser by visiting.
Email privacy[@]codyadvisory.com and you can ask what information I hold about you, ask me to correct it, or ask me to delete it. I will answer within 45 days. If a request is complex enough to need longer, I will tell you before the deadline rather than after it. Depending on where you live, you may have formal rights under laws such as the Virginia Consumer Data Protection Act, the GDPR, or the CCPA. I extend the same practical rights to everyone regardless of location.
I apply the safeguards I would advise a client to apply: current systems, multi-factor authentication, encryption in transit, least-privilege access, and no unnecessary copies. No safeguard is perfect, and it would be dishonest for a security practice to claim otherwise. If a breach affected your information, I would tell you promptly and plainly.
This site is meant for business audiences and is not directed at children. I do not knowingly collect information from anyone under 16.
If this policy changes, the date at the top changes with it. For anything material, I will note what changed rather than quietly swapping the text.