Privacy Policy
Effective date: October 16, 2026.
Website operator and contact
This website, wardenrisk.com, is operated by Marcelo P. Spinetti, sole proprietor, doing business as Warden Risk Advisory, a registered DBA, based in San Diego, California, USA.
For privacy questions or requests, email [email protected]. This notice covers website inquiries and related personal information. Client engagements may involve separate contractual and privacy arrangements.
Information we receive and why
The Request a Conversation form collects your full name, business email address, company and message. We also receive information you choose to provide through email or another contact channel.
We use this information to respond to requests, discuss services, understand an organization’s needs and maintain a record of the conversation. We also use information as needed to operate and protect the website and handle privacy requests. Please do not include passwords, sensitive personal information or confidential client records in an initial inquiry.
Technical service providers may process connection information, such as IP addresses, browser or device information and security events, to deliver and protect their services. Cloudflare Turnstile and performance measurement are described below.
Contact requests and marketing
Submitting a form or asking about services does not subscribe you to marketing. A request for contact is handled separately from permission for promotional communications.
Where appropriate permission is required for marketing, Warden must obtain it separately. The current contact form does not provide a marketing opt-in checkbox or automatically enroll contacts in campaigns. Any future marketing collection must explain the choice and how to withdraw it.
To request that Warden stop promotional communications, email [email protected] or reply to the promotional message. Such requests are handled manually. Replies to inquiries and other communications you request are distinct from promotional campaigns.
Storage, service providers and access
Form submissions are stored as private records in WordPress and sent to [email protected]. The website is hosted by HostGator, and email is processed through Google Workspace. These are separate copies: deleting a WordPress record does not automatically delete the corresponding email conversation.
Routine access to business messages and contacts is limited to Warden’s responsible operator. Hosting, email, security and other technical providers may have access needed to deliver, maintain, secure or support their services. Cloudflare provides the Turnstile verification service and the performance measurement script identified below.
Provider processing and storage depend on the service and its configuration. This notice does not promise that all processing takes place in a particular country.
Form security: Cloudflare Turnstile
The contact form uses Cloudflare Turnstile to help prevent automated abuse. Your browser communicates with Cloudflare, which processes technical and security signals, including IP address and browser or device information, to assess the request and issue a verification token.
Before accepting a new form submission, the website validates that token with Cloudflare’s server-side verification service. Warden’s verification request sends the token and the server’s authentication credential; it does not include your name, email address, company or message. The verification token is not saved in the private inquiry record.
Turnstile operates alongside the form’s existing anti-abuse protections. It serves a security purpose and does not constitute marketing permission. If verification cannot be completed, contact [email protected] by email. See Cloudflare’s Privacy Policy for information about its processing.
Cookies, preferences and performance measurement
The website uses CookieAdmin to present cookie choices and remember preferences in your browser. The Cookie Preferences button in the footer reopens the native preferences panel. Necessary functionality remains enabled; the panel provides separate choices for optional functional, analytical and advertising categories. A category shown in the panel does not mean the website necessarily uses a resource in that category.
You can reject optional categories or change and save your choices through that panel. Browser settings may also let you remove stored preferences; doing so can cause the site to ask again. Administrative sign-in uses technologies that are separate from an ordinary visitor’s consent preference.
The website also includes a Cloudflare Web Analytics / Real User Monitoring (RUM) script for page and performance measurement. Cloudflare describes this service as using a browser performance beacon and as not using cookies or localStorage to measure visitors. That description is specific to the service and is not a claim that every website technology is free of tracking.
The RUM script remains present after optional categories are rejected. Its blocking by CookieAdmin has not been established. Accordingly, this notice does not represent the CookieAdmin analytics choice as a verified on/off control for that script. Turnstile security verification and RUM performance measurement are distinct services.
External links, including links to LinkedIn, WhatsApp and article references, lead to independently operated services with their own privacy practices. Following an external link is different from a third-party script running within this website.
Retention and monthly manual review
Inquiries that do not result in a client engagement are subject to a 12-month retention period measured from the last meaningful inquiry-related interaction. WordPress records and corresponding Google Workspace conversations are reviewed manually each month.
Before deletion, the review checks whether the inquiry resulted in an engagement, remains active, is subject to a legal obligation or has a documented reason for additional retention. The reason for retaining an exception must be recorded. Reviews and deletions are documented minimally, including the review date, a limited record reference, the decision and, where relevant, the deletion date or reason for continued retention.
This is a manual process. There is no automatic deletion or scheduled deletion task, and records are not represented as disappearing exactly on the 12-month anniversary. Deleting one copy requires a separate review of the corresponding copy in the other system.
Client records follow arrangements appropriate to the engagement and applicable obligations. Marketing permission records, unsubscribe records, technical or security logs and backups follow separate retention considerations; the 12-month inquiry period does not automatically apply to those categories.
Deletion from live systems does not immediately remove a copy from an existing protected backup. Backup handling must account for prior deletion decisions and marketing withdrawals before restored records are returned to active use. This notice does not specify an unverified backup or provider-log expiry period.
Security
The website uses private submission records, restricted administrative access, server-side form validation and anti-abuse measures. Providers also maintain their own safeguards. No website, email system or storage service can guarantee absolute security.
Privacy requests
Email [email protected] to ask about your information, request access or correction, request deletion, or withdraw a marketing permission. We may ask for proportionate information to verify that a request concerns your records.
Requests are assessed under applicable law. Depending on the circumstances and jurisdiction, additional rights, exceptions or complaint routes may apply. We do not require an account to submit a privacy or unsubscribe request. A request to stop marketing is not treated as a new marketing lead.
Updates
This notice may be updated when the website or its information practices change. The published version will identify its effective date. Changes will be posted here; where applicable law requires additional notice or permission, those requirements must be addressed separately.
Privacy contact: [email protected]