Legal
Privacy Policy
How Iron Path Advisory handles information collected through this website and in the course of an engagement.
1. Overview
IronPath Advisory LLC ("Iron Path Advisory," "we," "us," or "our") provides executive technology leadership services, including fractional CIO, CTO, and virtual CISO engagements. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with this website (ironpathadvisory.com) and the professional services we provide to our clients. It applies to information about website visitors and prospective, current, and former clients. It does not apply to third-party websites we link to, or to information we process on behalf of a client as a service provider under a separate engagement agreement, which is governed by that agreement. If you have questions about this policy, contact us at [email protected].
2. Information we collect
We collect information in these ways:
Information you provide directly. When you email us, book a call, or send a note through our contact form, we receive the information you choose to share, such as your name, email address, company or organization, and the contents of your message. During an engagement we may receive additional business and technical information necessary to deliver our services.
Contact form. Our contact form is delivered by Web3Forms, which transmits your submission to us by email. It is used only to receive and route your message and to reply to you; your details are not added to a marketing list. Web3Forms processes the submission under its own privacy policy.
Scheduling information. If you book a call, that scheduling is handled by Calendly, which collects the details you enter (for example, name, email, and selected time) in order to arrange the meeting. Calendly processes your information under its own privacy policy.
Technical and usage data. Our hosting and content-delivery providers keep ordinary web-server logs that may include your IP address, browser and device type, referring page, pages requested, and timestamps, used for security, troubleshooting, and reliability. As described in Section 4, we also collect aggregate, non-identifying analytics through cookieless Google Analytics 4.
3. How we use information
We use the information we collect to: respond to inquiries and communicate with you; schedule, provide, and administer our services; manage our client relationships, contracts, and billing; operate, secure, and improve this website; detect, investigate, and prevent fraud, abuse, or security incidents; and comply with legal, regulatory, and professional obligations. We do not use the information collected through this website for automated decision-making that produces legal or similarly significant effects.
4. Cookies & analytics
Cookieless analytics. This site uses Google Analytics 4 configured with Google Consent Mode set to "denied" by default (no consent banner is shown). In this mode it sets no cookies and stores no persistent identifier on your device, and it does not retain your IP address. It provides only aggregate, non-identifying measurements such as approximate region, device and browser type, pages viewed, and referring site.
Because analytics runs in consent-denied mode, no analytics or advertising cookies are placed on your device. Our hosting and CDN providers may use strictly necessary cookies for security and performance. You can control or block cookies in your browser settings, and you can install the Google Analytics Opt-out Browser Add-on. Analytics is provided by Google LLC. See the Google Privacy Policy.
5. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only in these circumstances:
Service providers. We share information with vendors that perform functions on our behalf, such as website hosting, content delivery, email, contact-form delivery (Web3Forms), scheduling (Calendly), and analytics, under contracts that limit their use of the information to providing services to us.
Legal and safety. We may disclose information when required by law, subpoena, or other legal process, or when we believe disclosure is reasonably necessary to protect our rights, our clients, or the public, or to investigate potential violations.
Business transfers. If Iron Path Advisory is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
6. Data retention & security
We retain information only as long as needed for the purposes described in this policy, for example, to respond to your inquiry, deliver and administer an engagement, meet our legal, tax, and contractual obligations, and resolve disputes. Server logs and aggregate analytics are retained for limited periods consistent with our providers' standard configurations, after which they are deleted or aggregated further. When information is no longer needed, we delete or de-identify it.
We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit (TLS), access controls on a least-privilege basis, and logging and monitoring of relevant systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Your rights
Depending on where you live, you may have rights over your personal information, including the right to request access to the information we hold about you, to correct inaccurate information, to request deletion, and to opt out of the sale or sharing of personal information (we do not sell or share it for advertising). To exercise a right, email us at [email protected]. We will verify your request as required by law and respond within the applicable timeframe, and we will not discriminate against you for exercising a right.
Residents of certain U.S. states (such as California, and others with comprehensive privacy laws) and individuals in the EU/UK may have additional rights under laws such as the CCPA/CPRA, the Florida Digital Bill of Rights, the GDPR, or the UK GDPR. Where those laws apply, you may also have the right to appeal a decision or to lodge a complaint with your local data protection authority.
8. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Effective date" shown below and post the updated version on this page. Material changes will be indicated by updating that date, and where appropriate we may provide additional notice. Your continued use of the website after an update takes effect constitutes acceptance of the revised policy.
9. Contact
For any questions, requests, or complaints regarding this policy or your personal information, contact IronPath Advisory LLC at [email protected].