Privacy Policy

This Privacy Policy explains how David P. Otey (“David,” “we,” “us,” or “our”) handles information when you visit davidotey.com, contact David through the website, or choose to view an embedded video.

Information you choose to provide

Contact form

The Contact page uses a form provided by Zoho Forms. If you submit it, the form may collect:

• first and last name;
• email address;
• phone number, if you provide it;
• organization, if you provide it;
• event date, if you provide it; and
• the message you enter in “How can I help?”

The website also supplies Zoho Forms with the Contact page’s canonical origin and pathname so the submission can be identified as coming from the davidotey.com Contact page. The website does not include search parameters, URL fragments, UTM values, or another visitor-entered URL in that referrer value.

We use this information to respond to your inquiry, discuss possible speaking or coaching work, communicate about an event, maintain appropriate business records, and protect the form and website from abuse.

Zoho Forms stores the submission, invokes a configured Zoho Flow automation, and has a new-record email notification configured for David’s business email account. A controlled staging submission produced the expected acknowledgement and downstream notification. The website does not send Contact submissions directly to Zoho CRM, and it does not maintain a separate WordPress contact-form database.

Direct email, telephone, and scheduling links

If you contact David by email or telephone, or use the external scheduling link, the information you provide is handled through the applicable email, telephone, or scheduling service rather than by the website itself. Those providers may apply their own privacy policies.

Information collected automatically

Hosting and security logs

The website is hosted by SiteGround. Like most hosting providers, SiteGround processes technical request information needed to deliver and secure the site. This may include:

• IP address;
• date and time;
• requested domain and page or file;
• request method and response status;
• browser and device user-agent information;
• referring page, when the browser sends one;
• TLS and cache diagnostics; and
• information used to detect malicious or automated requests.

SiteGround makes raw access logs available to the hosting account. SiteGround has published a general statement that server logs containing account-related IP information are normally kept for approximately six months, but the site-specific access-log interface does not expose a separate retention control.

SiteGround’s Security Optimizer also keeps a security activity log containing visitor type, IP address, page visited, time, and response information. On this site, that activity log is configured for 12 days.

No visitor analytics

This website does not use a site-owned visitor analytics service. It does not include Umami, Plausible, Google Analytics, Amplitude, advertising pixels, custom analytics events, or a project-created stable visitor identifier.

Hosting and security logs described above are operational records, not marketing analytics.

Third-party content and services

Zoho Forms and Zoho Flow

The Contact form is loaded from Zoho only when you visit the Contact page. Zoho receives the form information you submit and may receive technical information needed to deliver and protect the form, such as IP address, browser information, and request details. Zoho may use strictly necessary service cookies and other controls described in its own privacy and cookie notices.

Zoho states that Zoho Forms data is encrypted in transit and at rest and that the customer controls submitted service data. Zoho Forms does not impose one universal form-entry retention period, so we apply the retention policy described below.

Vimeo testimonials

Video testimonials use Vimeo. The page initially displays locally hosted poster images. The Vimeo player is not loaded until you select a video testimonial.

When loaded, the player uses Vimeo’s dnt=1 setting, which Vimeo says prevents the player from collecting session data and analytics and from setting new non-essential cookies for that viewing session. Vimeo may still process technical request information, use essential security or delivery cookies, and receive Vimeo cookies already present in your browser.

External links

The website links to third-party resources, social networks, retailers, feedback services, a scheduling service, the podcast archive, and mental-health and suicide-prevention organizations. Those destinations do not receive a request from this website merely because a link appears on a page. If you follow a link, the destination’s privacy practices apply. The website uses a same-origin referrer policy, which prevents the browser from sending the davidotey.com page address in ordinary cross-origin requests.

Cookies and browser storage

In anonymous browser testing, the WordPress pages did not set a first-party visitor cookie and the website did not use local storage, session storage, IndexedDB, or a service worker for visitor identification.

Zoho or Vimeo may use cookies or similar technical mechanisms when their service is loaded, as described above. WordPress sets authentication and preference cookies for authorized site administrators and editors who sign in; these are not used to track ordinary public visitors.

How long we keep information

• Contact inquiries: We keep a Contact submission and its downstream notification copies for no longer than 24 months, with a quarterly review and earlier deletion when the record is no longer reasonably needed for the inquiry, an active or reasonably anticipated engagement, accounting, dispute resolution, or legal obligations.
• Security Optimizer activity log: 12 days.
• SiteGround access logs: SiteGround’s published general statement is approximately six months; this is controlled by the hosting provider rather than a site-level setting.
• Backups: SiteGround may maintain up to 30 daily backup copies and manual restore points under the hosting plan. Deleted information can remain in a backup until that backup expires or is replaced.
• Zoho audit records: Zoho states that Zoho Forms record audit logs are retained for 90 days.

When information is no longer required, we delete or anonymize it where reasonably possible. A service provider’s backup and security retention may continue for its documented cycle.

When information is shared

We do not sell personal information and do not use it for targeted advertising.

Information is shared only as reasonably needed with:

• SiteGround, to host, deliver, back up, and secure the website;
• Zoho Forms and Zoho Flow, to receive and route Contact inquiries;
• the providers of David’s business email, telephone, or scheduling services when you use those methods;
• Vimeo, only when you choose to load a testimonial video; and
• professional advisers, service providers, or authorities when reasonably necessary to operate the business, protect rights or security, comply with law, or respond to a valid legal request.

Security

We use HTTPS, access controls, least-privilege WordPress roles, login-attempt limits, security monitoring, backups, locally hosted website assets, restricted public interfaces, and tested response-security policies. No Internet service can guarantee absolute security.

Please do not submit passwords, payment-card information, medical or health information, or other highly sensitive information through the Contact form. The form is intended for event, speaking, coaching, and general business inquiries—not for emergency or clinical care.

If you or someone you know is in crisis, call or text 988 in the United States or visit the 988 Suicide & Crisis Lifeline.

Your choices and requests

You may ask us to confirm whether we hold information you submitted, request a copy, ask us to correct it, or request deletion, subject to applicable law and legitimate business or legal needs.

You may also:

• contact David by email or telephone instead of using the web form;
• decline to load Vimeo testimonials;
• control cookies through your browser; and
• enable browser privacy signals. The website has no site-owned visitor analytics to opt out of.

Children’s privacy

The website is intended for business and general audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the website.

Changes to this policy

We may update this Privacy Policy when the website, service providers, or legal requirements change. The updated policy will show a revised effective date.

Contact

For privacy questions or requests, contact:

David P. Otey
Email: David@Davidotey.com
Telephone: 303-351-1610