Privacy Policy

Overview

This Privacy Policy describes how carlbjohnson.com (the “Site”) collects, uses, and protects information about visitors. The Site is operated by Carl B. Johnson in his professional capacity as a regulatory compliance and privacy keynote speaker. Inquiries submitted through this Site are handled in coordination with Cleared Systems.

By using this Site, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you submit the contact form on this Site, we collect:

• Your name
• Your email address
• Your organization
• The content of your message

Information Collected Automatically

When you visit the Site, certain information is collected automatically, including:

• IP address (used for security, rate limiting, and aggregate analytics)
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent on each page
• Date and time of visit

How We Use Information

Information collected through this Site is used to:

• Respond to speaking inquiries and other communications
• Operate, maintain, and improve the Site
• Detect and prevent abuse, fraud, or unauthorized activity
• Comply with legal obligations

We do not sell, rent, or trade personal information to third parties.

Information Sharing

We share information only with service providers who help operate this Site, and only to the extent necessary for them to perform their functions. These providers are described in the Third-Party Services section below.

We may also disclose information when required by law, to enforce our terms, or to protect the rights, property, or safety of others.

Cookies and Analytics

This Site uses cookies and similar technologies for the following purposes:

• Analytics: Google Analytics 4 is used to understand how visitors use the Site. Google Analytics may set cookies (such as _ga) and collect data including IP address (anonymized), browser, device, and pages visited.
• Security and performance: Cloudflare provides content delivery and security services, which may set cookies for fraud prevention and performance optimization.
• Embedded video: When you play an embedded YouTube video, YouTube may set cookies on your device.

You can disable cookies through your browser settings, though some Site features may not function properly as a result.

Third-Party Services

This Site uses the following third-party services. Each has its own privacy policy:

• Cloudflare — content delivery, security, and DDoS protection
• Google Analytics — visitor analytics
• Postmark — transactional email delivery for contact form submissions
• YouTube — embedded video content

We recommend reviewing the privacy policies of these services to understand how they handle data.

Data Retention

Contact form submissions are retained as long as needed to respond to your inquiry and maintain a record of communications. Aggregate analytics data is retained according to the default retention settings of the analytics provider.

You may request deletion of your information at any time using the contact form on the Site.

Security

We take reasonable measures to protect information collected through this Site, including HTTPS encryption for all traffic, secure handling of credentials, and access controls on systems that store inquiries. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have rights regarding your personal information, including:

• The right to access information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your information
• The right to object to or restrict processing
• The right to data portability
• The right to withdraw consent

To exercise these rights, please use the contact form on the Site.

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

European Residents (GDPR)

Residents of the European Economic Area have rights under the General Data Protection Regulation. The legal basis for processing personal information through this Site is legitimate interest in operating a professional services website and responding to inquiries.

Children's Privacy

This Site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects when the policy was most recently revised. We encourage you to review this policy periodically.

Contact

For questions about this Privacy Policy or to exercise your rights, please use the contact form on the Site or write to us at: