Privacy Policy
LEGAL DOCUMENT
WILDFLOWER CYBER CONSULTING LLC
Privacy
Policy
Effective date: 01/01/2026 | Last updated: 01/01/2026
wildflowercyberconsulting.com | hello@wildflowercyberconsulting.com
CONTENTS
1. Overview
2. What we collect
3. How we use your information
4. Legal basis for processing (GDPR)
5. Who we share your information with
6. How long do we keep your information
7. Your rights
8. Cookies
9. Security
10. Children
11. Changes to this policy
12. Contact
1. OVERVIEW
Wildflower Cyber Consulting LLC ("Wildflower," "we," "us," or "our") operates this website at wildflowercyberconsulting.com. This policy explains what personal information we collect when you visit the site, how we use it, and your rights regarding it.
We collect a limited amount of personal information — primarily what you choose to provide through the contact form. We do not run advertising, sell data, or use tracking beyond what Wix provides as our hosting platform.
Plain summary:
We collect your name, email, and message when you contact us. We use it to respond to you. We do not sell it, share it with advertisers, or add you to lists without your consent.
2. WHAT WE COLLECT
Information you provide directly
When you complete the contact form on this site, we collect the information you enter: your name, email address, company name (if provided), phone number (if provided), and the content of your message. We only collect what you choose to give us.
Information collected automatically
When you visit this site, our hosting platform (Wix) automatically collects certain technical information as part of normal website operation. This includes your IP address, browser type and version, the pages you visit, the time and duration of your visit, and the page you came from. Wix collects this information and is subject to Wix's Privacy Policy (wix.com/about/privacy).
Information from booking
If you book a discovery call through Calendly, Calendly collects your name, email address, and the time you selected. That information is subject to Calendly's Privacy Policy (calendly.com/privacy). Wildflower receives a notification of your booking containing your name, email, and selected time.
What we do not collect
We do not collect payment information through this website. We do not run advertising pixels or third-party tracking tools. We do not collect sensitive personal data such as health information, financial data, or government identifiers.
3. HOW WE USE YOUR INFORMATION
Purpose
Information used
Why
Responding to your inquiry
Name, email, message content
You contacted us and expect a response
Scheduling a discovery call
Name, email, booking time
To confirm and manage the call
Sending the free checklist
Email address (if provided)
To deliver the resource you requested
Improving the website
Anonymized visit data via Wix
To understand how the site is used
Legal and compliance obligations
As required
Where we are legally required to process or retain data
We do not use your information for automated decision-making, profiling, or marketing communications unless you have specifically opted in to receive them.
4. LEGAL BASIS FOR PROCESSING (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases under the UK GDPR and EU GDPR:
-
Legitimate interests (Article 6(1)(f)):
Responding to inquiries you have sent us and operating this website. Our legitimate interest is in conducting our consulting business and communicating with people who contact us. This does not override your rights.
-
Contract (Article 6(1)(b)):
Where processing is necessary to take steps at your request before entering a contract — for example, discussing a potential engagement following a discovery call.
-
Legal obligation (Article 6(1)(c)):
Where we are required to process or retain data to comply with applicable law.
-
Consent (Article 6(1)(a)):
For optional communications, such as email newsletters or follow-up marketing, for which we have asked for and received your consent.
If you are in the EEA or UK, you have the right to object to processing based on legitimate interests. See Section 7 (Your rights) below.
5. WHO WE SHARE YOUR INFORMATION WITH
We do not sell, rent, or trade your personal information. We share it only in the following limited circumstances.
Service providers
We use third-party services to operate this website and run our business. These providers process your data on our behalf and are contractually required to protect it:
-
Wix —
Website hosting and contact form processing. Data is processed in accordance with Wix's Privacy Policy and their standard contractual clauses for EEA users.
-
Calendly —
Appointment scheduling. If you book a call, Calendly processes your booking data.
-
Google Workspace/email provider —
Email communication following your contact form submission.
Legal requirements
We may disclose your information where required to do so by law, court order, or at the request of a government authority, or where we believe disclosure is necessary to protect our legal rights, the safety of any person, or to investigate fraud.
Business transfers
If Wildflower Cyber Consulting LLC is involved in a merger, acquisition, or asset sale, personal data held by us may be transferred as part of that transaction. We will notify affected individuals before personal data is transferred and becomes subject to a different privacy policy.
6. HOW LONG WE KEEP YOUR INFORMATION
We keep your personal information only for as long as necessary for the purposes set out in this policy or as required by law.
-
Contact form inquiries: retained for 2 years from the date of the last communication, unless a consulting engagement follows
-
Consulting engagement records: retained for 7 years following the end of the engagement, in line with standard business record-keeping practice
-
Booking records: retained for 12 months from the date of the call, or longer if an engagement follows
-
Website analytics data: retained in accordance with Wix's data retention policies
When data is no longer needed, we delete it securely or anonymize it so it cannot be linked to you.
7. YOUR RIGHTS
Depending on where you are located, you may have rights over your personal data. For individuals in the EEA, UK, and California, these include:
Right
What it means
Access
Request a copy of the personal information we hold about you
Correction
Ask us to correct inaccurate or incomplete information
Erasure
Ask us to delete your personal information, subject to legal retention requirements
Restriction
Ask us to pause processing of your information in certain circumstances
Portability
Receive your personal data in a structured, machine-readable format (EEA/UK)
Object
Object to processing based on legitimate interests or for direct marketing
Withdraw consent
Where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, email us at hello@wildflowercyberconsulting.com. We will respond within 30 days. We may need to verify your identity before processing your request.
If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk). In the EU, it is the supervisory authority in your country of residence.
California residents (CCPA/CPRA)
California residents have the right to know what personal information we have collected, request deletion, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising these rights. To make a request, contact us at the address below.
8. COOKIES
This website is hosted on Wix, which uses cookies to operate the site. Cookies are small text files placed on your device when you visit a website. Wix uses cookies for site functionality, security, and analytics. We do not place any additional tracking or advertising cookies beyond those set by Wix as part of its hosting service.
When you first visit the site, you may see a cookie consent banner. You can adjust your cookie preferences through that banner or through your browser settings. Disabling cookies may affect how some parts of the site function.
For a full list of cookies used by Wix and their purposes, refer to Wix's cookie documentation at support.wix.com.
9. SECURITY
We take the security of your personal data seriously — as a cybersecurity consultancy, we practice what we advise. We use reasonable technical and organizational measures to protect the information we hold, including TLS encryption for data in transit, access controls on systems storing personal data, and secure email for correspondence.
No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and we encourage you not to send sensitive or confidential business information through the contact form. If you need to share sensitive information as part of a consulting engagement, we will agree on a secure channel with you at that time.
If we become aware of a data breach that is likely to affect your rights or freedoms, we will notify you and any applicable regulatory authority in accordance with our legal obligations.
10. CHILDREN
This website is directed at business owners, professionals, and organizations. It is not intended for, and we do not knowingly collect personal information from, anyone under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us, and we will delete it promptly.
11. CHANGES TO THIS POLICY
We may update this policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our practices. When we update it, the "Last updated" date at the top of this document changes. We will not reduce your rights under this policy without giving you clear notice.
For material changes that significantly affect how we process your data, we will make a reasonable effort to notify you directly — for example, by email, if we have your address — before the change takes effect.
12. CONTACT
If you have a question about this policy, want to exercise your rights, or have a concern about how we handle your data, contact us at:
Wildflower Cyber Consulting LLC
hello@wildflowercyberconsulting.com
Wildflower Cyber Consulting LLC prepared this privacy policy. A lawyer has not reviewed it. If you are in a jurisdiction with specific privacy law requirements (GDPR, CCPA, HIPAA, PIPEDA), we recommend that you have legal counsel review this document before relying on it.