Privacy Policy

Last updated: July 9, 2026

This policy explains what personal data Steve Ostermiller Advisory (“I,” “me,” or “the site”) collects when you visit ostermilleradvisory.com or contact me through it, why I collect it, and the choices and rights you have. I aim to collect as little as possible.

Who is responsible for your data

The data controller is Steve Ostermiller (Steve Ostermiller Advisory), based in Salt Lake City, Utah, USA. If you have any questions about this policy or your data, email me at steve@ostermilleradvisory.com.

What I collect

• Contact details you send me. If you use the contact form or email me, I receive the information you provide — typically your name, email address, company, and message.
• Basic technical logs. The site is hosted on GitHub Pages, which, like most web hosts, automatically records standard server information such as IP addresses and browser type for security and reliability. I do not control or have direct access to these logs.

I do not use cookies, analytics, advertising, or third-party trackers on this site, and the fonts are self-hosted, so simply viewing the site sends no data to third-party services.

Why I use it, and my lawful basis

I use the details you send solely to read and respond to your inquiry and, where relevant, to discuss and provide advisory services. Under the UK/EU GDPR my lawful bases are your consent (you choose to send the message) and my legitimate interest in responding to and following up on genuine business inquiries. I do not send marketing emails and I do not sell or share your data for marketing.

Who processes your data (sub-processors)

• Formspree — delivers contact-form submissions to my inbox. Your form data passes through Formspree’s systems. See Formspree’s privacy policy.
• GitHub Pages (GitHub, Inc.) — hosts the website. See GitHub’s privacy statement.
• Google Workspace (Google LLC) — provides my email. Once your message reaches my inbox, it is stored and processed by Google Workspace like any other correspondence. See Google’s privacy policy.

International transfers

I am based in the United States, and the services above are US-based. If you contact me from the UK, EEA, or elsewhere, your data will be transferred to and processed in the United States. I rely on these providers’ own safeguards for such transfers; you can review their policies via the links above.

How long I keep it

I keep your message and contact details for as long as needed to correspond with you and, if we work together, for as long as required for our business relationship and any legal or tax obligations. After that, I delete it. You can ask me to delete your data sooner at any time (see below).

Your rights

Depending on where you live, you may have the right to access the personal data I hold about you, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time. To exercise any of these, email steve@ostermilleradvisory.com and I will respond within a reasonable time. If you are in the UK or EEA and believe I have not handled your data properly, you also have the right to lodge a complaint with your local data protection authority.

Children

This site is intended for business professionals and is not directed at children. I do not knowingly collect data from anyone under 16.

Changes to this policy

If I change how the site handles data, I will update this page and the “Last updated” date above.

← Back to home