The short version
We collect the minimum we need to work with you: contact details,
scheduling logistics, and general self-assessment responses. Sensitive
coaching conversations stay out of web forms and out of our marketing
systems. We don't sell your information — to anyone, ever.
What we collect, and why
-
Forms on this site collect logistics and preferences:
your name, email, organization, scheduling constraints, accessibility
needs, and general self-assessment ratings. This is what lets us
schedule sessions and show up prepared.
-
Email, if you subscribe to resources like the
Quickstart series — you can unsubscribe from any message, instantly,
no guilt trip.
-
Basic site analytics — aggregate page-level
statistics that tell us what content helps. We keep this minimal and
don't build individual behavioral profiles.
What we never ask for in a form
Descriptions of security incidents. Names of at-risk staff. Details
about your vulnerabilities or adversaries. Those conversations happen
live, with your coach, at your pace — because a web form is the wrong
risk envelope for information that could endanger you, and because
being asked to type out hard experiences into a cold form is
extractive. If you've written something sensitive into a form by
accident, tell us and we'll delete it.
Where your information lives
Two separate places, on purpose:
-
Scheduling and contact information lives in our
client-management platform — the system that sends confirmations and
reminders.
-
Coaching specifics — session notes, threat-modeling
details, anything sensitive from our conversations — live in separate,
encrypted storage. They are never entered into the client-management
platform, never used for marketing, and never shared with third
parties without your explicit consent.
How long we keep it
Client engagement records are retained for three years after an
engagement ends, then destroyed. Contact information stays as long as
you want to hear from us; ask, and it goes.
What we never do
- Sell or rent your information. Full stop.
-
Share your information with funders, partners, or anyone else without
your explicit consent — except where the law compels us, and where
legally permitted we will tell you it happened.
-
Use coaching-session content in marketing. Anonymized insights appear
in reporting only under consent you give explicitly (and can decline
without consequence).
- Name any client publicly without written permission.
Your choices
-
See it: ask what we hold about you and we'll tell
you.
- Fix it: ask us to correct anything wrong.
-
Delete it: ask us to delete your information, and we
will — except records we're legally or contractually required to keep,
and we'll tell you which those are.
-
Leave quietly: unsubscribe links work, immediately.
For any of these:
[email protected]. If email itself is the concern, say so in any live conversation with
us and we'll arrange a safer channel.
Changes to this page
When our practices change, this page changes first, and the date below
changes with it. Material changes get a note in our email updates.
Effective date:
July 12, 2026 · Hacking
the Workforce, Inc. · Jacksonville, FL