Privacy

Privacy notice

Effective 12 November 2026

Who is responsible

McIntosh Consulting LLC, an independent consulting practice run by Vernon McIntosh, controls the personal information collected through this website. For any privacy question or request, email consulting@vernonmcintosh.com.

What I collect and why

Project inquiries

When you use the form on Discuss your project, I receive your name, your email address, what you are working on and when you would like to start. If you fill them in, I also receive your organization, your role and any relevant work, data or tools you mention. The form records that you agreed to a reply, and it adds the page context that brought you there: the service, field or example you came from, any campaign tags in the link (cut to 64 characters) and the website you arrived from (its domain only, not the full address).

The contact window

The "Send Vernon a message" window takes your return email address and, if you choose to add them, a subject, your company website, a message and a job description or link. It is for consulting inquiries and for employment opportunities, so a recruiter or hiring manager can send me a role through it.

I use what you send through either form to reply to you and to discuss and scope the work or the role you asked about. Giving it is voluntary, but without an email address I cannot answer. Please keep what you send nonconfidential and leave out private documents, health or financial records and other sensitive information.

New-article emails

If you sign up for new-article emails, I receive your email address and use it only to tell you when I publish something new. You can unsubscribe at any time by replying to one of those emails or writing to consulting@vernonmcintosh.com.

Visit statistics

The site counts visits with GoatCounter, a hosted analytics service. For each page view it records the page, the referring site, the browser and operating system, screen size and an approximate country derived from the connection. I look only at the totals to see which pages are read; they are not used for advertising, profiling or decisions about you. The site also counts clicks on a few buttons, such as the links to start a project or open a case study, and counts a completed inquiry when the thank-you page loads. These are totals too, with no name or email address attached.

Server records

Like any web server, the server that delivers these pages receives technical details with each request, such as your IP address, the page requested, the time and your browser type. These are used only to deliver the site and keep it secure.

Legal bases (for visitors in the EU, EEA and UK)

• Replying to inquiries and scoping work, including employment inquiries: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR), and my legitimate interest in answering business messages (Art. 6(1)(f)).
• New-article emails: your consent (Art. 6(1)(a)), which you can withdraw at any time without affecting earlier processing.
• Visit statistics and server records: my legitimate interest in running a secure site and knowing which pages are useful (Art. 6(1)(f)). You can object at any time.

Who receives it

I do not sell personal information or share it for advertising. It reaches only the services that run the site for me:

• Web3Forms receives what you submit through the site's forms and forwards it to my email.
• My email provider stores the messages I receive and send.
• GoatCounter receives the visit statistics described above.
• The hosting provider runs the server that delivers the pages.

I may also disclose information if the law requires it or to protect the rights and safety of the practice or others. Links to LinkedIn and to published sources only contact those sites if you follow them; their own privacy notices then apply. Fonts and images are served from this site, so viewing a page does not contact a font or image service.

International transfers

McIntosh Consulting is based in the United States, so information you send from elsewhere is transferred to and handled in the US. Sending an inquiry is a transfer you ask for in order to receive a reply (Art. 49(1)(b) GDPR). For the services listed above, I rely on the safeguards those providers offer, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

How long I keep it

• Inquiries: up to three years after our last contact, or longer when they become part of client work and its records.
• New-article email addresses: until you unsubscribe.
• Visit statistics: kept as totals by GoatCounter.
• Server records: no longer than 30 days.

You can ask me to delete your information sooner, and I will unless the law requires me to keep it.

Your rights

You can ask for a copy of the personal information I hold about you, ask me to correct or delete it, ask me to limit how I use it, object to my using it, or ask for it in a portable format. Where I rely on consent, you can withdraw it at any time. To make any of these requests, email consulting@vernonmcintosh.com. I will reply within 30 days and may ask you to confirm your identity first. You may use an authorized agent; I will ask the agent for proof of your permission.

If you are in the EU, EEA or UK and think I have handled your information wrongly, you can complain to your local data protection authority. I would appreciate the chance to fix it first.

US state privacy rights

Residents of California and other states with consumer privacy laws have the rights described above to know, access, correct and delete their personal information. In the past twelve months this site has collected identifiers (name, email address), professional information you chose to share, and internet activity (the visit statistics and server records), all from you or your browser, for the purposes described in this notice. I do not sell or share personal information for cross-context behavioral advertising, I do not use it for targeted advertising or profiling, and I do not use sensitive personal information to infer anything about you. I will not treat you differently for using any of these rights.

I do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. If your browser sends a Global Privacy Control signal, I treat it as that request. Browsers' Do Not Track signals do not change how the site works, because the site does not track you across other websites.

Cookies

The site sets no cookies and stores nothing in your browser for tracking. You can block the visit statistics with any standard tracking blocker; the site works the same without them.

Children

This site is for businesses and professionals. It is not directed to children, and I do not knowingly collect personal information from anyone under 16. If you believe a child has sent me information, email me and I will delete it.

Security and automated decisions

The site is served over HTTPS, and I limit access to inquiries to my own accounts. No method of transmission or storage is perfectly secure, so please keep what you send nonconfidential. I do not make automated decisions about you, and none of this information is used for profiling.

Changes

If what the site collects or how it is used changes, I will update this notice and the effective date at the top.