How I handle your information.

Information I collect

Website visits and the entry check

When you visit the website

Cloudflare hosts, delivers, and protects this website. Like other website infrastructure providers, Cloudflare may process network and security information such as your IP address, request headers, browser or device information, requested page, referring page, and the date and time of a request. Cloudflare's Privacy Policy explains its processing.

Ready for Discovery does not currently use Google Analytics, advertising pixels, or advertising cookies on this website.

Cloudflare may use cookies or similar technologies that are necessary to deliver and secure the site or operate Turnstile. Ready for Discovery does not use those technologies to advertise to you.

When you run the website entry check

The entry check receives:

• the public website address you enter;
• your confirmation that you own or manage the website, or have permission to check it;
• a Cloudflare Turnstile verification token; and
• technical request information needed to secure the service and apply rate limits.

The check contacts the public website you entered and a limited sample of same-site pages. The submitted address, returned page content, and result are processed long enough to perform the check and return the result in your browser. Ready for Discovery does not save the submitted address, page content, Turnstile token, or result in a database, browser storage, or a persistent application log. Entry-check API responses are marked not to be cached.

The entry-check request runs on Cloudflare Workers, so Cloudflare processes the submitted website address and related request data to perform the check. Separately, Turnstile processes security signals such as IP address, browser and connection characteristics, the Turnstile site key, and the page origin. Cloudflare says it uses those signals to distinguish people from automated traffic and to improve bot detection. Cloudflare also says Turnstile does not access, store, or transmit form entries or other page inputs. Cloudflare's Turnstile Privacy Addendum explains this processing.

The website being checked may record the checker's request in its own server logs. Ready for Discovery does not control that website's logging or privacy practices.

Inquiries and clients

Information you send or authorize

When you email or otherwise contact me

I may collect the information you choose to send, such as your name, email address, business name, website address, message, and any files or other information you include. I also record enough information to understand the request, confirm fit, respond, and document the source and status of the inquiry.

Email sent to gary@readyfordiscovery.com is handled through Zoho Mail. Zoho's Privacy Policy describes how Zoho processes service data.

When you become a client

To prepare an agreement, invoice the work, provide the service, and keep business records, I may collect or create:

• your legal or business name, trade name, mailing or billing address, email address, and the names and roles of authorized contacts;
• signed agreements, signature records, scope decisions, approvals, and correspondence;
• invoice details, payment status, transaction references, receipts, and refund or dispute records;
• the business information, website content, account information, reports, screenshots, and other materials you authorize me to review;
• delegated-access records, including the platform, role, grant date, verification result, and removal date; and
• audit evidence, internal working notes, findings, deliverables, correction requests, and delivery records.

I do not ask for your master passwords, mailbox access, banking credentials, payment-processor credentials, or Google Workspace super-administrator access. When account access is needed, I use the least-permissive delegated role reasonably available or work with you while you remain signed in.

SignWell handles electronic signatures. Mercury handles invoicing, and Stripe may process card payments made through a Mercury invoice. Those providers process information under their own policies:

• SignWell Privacy Policy
• Mercury Privacy Policy
• Stripe Privacy Policy

Ready for Discovery receives the business and transaction information needed to administer the engagement. I do not receive or store your complete card or bank-account credentials.

Sources and purposes

How I use information

Information from public and client-authorized sources

An audit examines public business information and, when included in the signed scope, information available through accounts you authorize. Sources may include your website, public domain and email authentication records, public business listings, Google Search Console, Google Analytics, Google Business Profile, your website platform, and other agreed systems.

I use that information only for the inquiry, engagement, support, security, recordkeeping, or other purpose you authorized. Client names, results, screenshots, and reports are not published as case studies or testimonials without separate permission.

Uses

I use information to:

• respond to inquiries and determine whether the requested work is a fit;
• prepare agreements, invoices, and engagement records;
• provide, document, verify, and support the agreed service;
• communicate about the inquiry, engagement, payment, access, findings, and delivery;
• protect the website and entry check from abuse, fraud, and security threats;
• maintain accounting, tax, contractual, and other required business records;
• investigate disputes or enforce an agreement; and
• comply with law or respond to valid legal process.

I do not sell personal information or provide it to data brokers. I do not use it to target ads based on your activity across unrelated websites. I also do not use the website entry check to build a prospecting list or identify websites for follow-up.

Disclosure and retention

Who may receive information and how long I keep it

When information may be disclosed

Information may be disclosed:

• to service providers that host, secure, communicate, sign, invoice, process payment, or otherwise support the work described in this policy;
• to platforms and advisers you authorize for the engagement;
• when reasonably necessary to protect a person, account, system, or legal right;
• when required by law, subpoena, court order, or other valid legal process; or
• as part of a merger, sale, financing, or transfer of all or part of the business, subject to appropriate confidentiality and legal requirements.

I limit disclosures to the information reasonably needed for the stated purpose. Third-party services have their own privacy practices and legal obligations.

Retention

The website entry check does not create a Ready for Discovery database or persistent application log of submitted addresses, page content, or results. Cloudflare may retain infrastructure, security, rate-limit, and service metrics under its own policies.

Inquiry records are kept while I respond, evaluate fit, and document the business relationship. Client records are kept for as long as reasonably needed to provide the service, support the client, document the work, maintain tax and accounting records, resolve disputes, enforce agreements, and meet legal obligations. Different records may require different retention periods.

When information is no longer reasonably needed, I delete it, de-identify it, or securely archive it when continued retention is required. Some records cannot be deleted immediately when they are needed for accounting, legal, security, backup, or dispute-resolution purposes.

Security and requests

How I protect information and how to contact me

Security and access

I use measures intended to limit unnecessary access and protect the information handled for Ready for Discovery. These include delegated access instead of shared master credentials, limited account roles, access records, and removal of audit-only access during closeout under the applicable client agreement.

No transmission or storage system can be guaranteed completely secure. Please do not send passwords, payment credentials, private access links, or other sensitive information by ordinary email unless we have agreed on an appropriate method.

Your choices and privacy requests

You may ask what personal information I hold about you, request a correction, or ask me to delete information that is no longer needed. Depending on where you live, applicable law may provide additional rights.

Send a privacy request to gary@readyfordiscovery.com with the subject line Privacy request. I may need to verify your identity and authority before acting on a request. I will respond within the time required by applicable law. A request may be limited when information must be retained to complete an engagement, keep required business records, protect security, establish or defend legal rights, or comply with law.

Children and policy changes

Additional information

Children

Ready for Discovery provides business services and is not directed to children under 13. I do not knowingly collect personal information directly from children under 13. If you believe a child has sent personal information to Ready for Discovery, email gary@readyfordiscovery.com so I can review and remove it when appropriate.

Changes to this policy

I may update this policy when the website, services, providers, or legal requirements change. The effective date at the top will show the current version. If a change materially affects information already collected, I will provide any additional notice or choice required by law or an applicable agreement.