Privacy Policy

Who We Are

RGC Consulting LLC (“RGC,” “we,” “us,” or “our”) provides IT risk, cybersecurity, compliance, network, and helpdesk advisory services to small law firms, CPA practices, and other professional services firms, primarily in California, Washington, Oregon, Nevada, Arizona, and Colorado.

This policy explains how we collect, use, disclose, retain, and protect personal information associated with our public website and pre-engagement business communications. Questions or privacy requests may be directed to robcook@rgcconsultingllc.com.

Scope of This Policy

This policy applies to visitors to the RGC Consulting LLC website, individuals who contact us through an email link on the website, and prospective clients and webinar participants who communicate with us before entering into a formal engagement.

This policy does not govern information RGC processes on behalf of a client during a consulting, network, helpdesk, or compliance engagement. That information is governed by the applicable services agreement, confidentiality commitments, and client instructions.

What Information We Collect

Information You Provide

This website does not currently operate a server-side contact form or maintain a database of contact-form submissions. If you contact us through an email link, we may receive information you choose to provide, including your name, firm or organization, job title, email address or phone number, the services you’re interested in, and the contents of your message and any follow-up correspondence.

A Note on Sensitive Information

Please do not send passwords, taxpayer information, privileged client materials, financial records, government identification numbers, or other sensitive information through ordinary email before RGC establishes an engagement and provides an approved secure transmission method. Sending information to RGC before an engagement is established does not, by itself, create a confidential, fiduciary, or professional relationship.

Information Collected Automatically

This site is hosted on WordPress.com, operated by Automattic Inc., and uses Jetpack Stats and related hosting, security, and performance functionality. Depending on your browser and device, Automattic or Jetpack may automatically process information such as IP address, browser and device type, operating system, approximate location derived from IP address, pages viewed, referring URLs, and date and time of a visit.

RGC generally receives aggregate website statistics rather than information identifying specific visitors. Automattic processes the underlying technical information as part of providing its hosting, analytics, and security services. Additional information is available in Automattic’s Privacy Notice for Visitors to Users’ Sites.

Cookies and Online Tracking

WordPress.com and Jetpack may use cookies and similar technologies to operate and secure the website, maintain preferences and sessions, detect abuse, measure aggregate traffic, and diagnose technical problems.

At the effective date of this policy, RGC does not use WordAds, Google Analytics, Meta Pixel, or similar technologies for behavioral advertising or cross-context tracking. This website does not currently alter its data collection based on browser Do Not Track (DNT) signals. You may manage or delete cookies through your browser settings; disabling certain cookies may affect website functionality.

RGC does not sell personal information or share personal information for cross-context behavioral advertising. Where applicable law recognizes an opt-out preference signal, such as Global Privacy Control, RGC will process the signal as required by law — though because RGC does not engage in covered selling or sharing, such a signal does not presently change our practices.

How We Use Information

• Respond to inquiries and consultation requests
• Schedule and conduct scoping calls and administer webinars
• Prepare proposals or statements of work
• Maintain records of prospective and current client communications
• Operate, secure, troubleshoot, and improve the website
• Detect fraud, abuse, or cybersecurity threats, and protect our rights and systems
• Comply with applicable legal, regulatory, tax, and recordkeeping obligations

We do not use website analytics to identify individual visitors for marketing purposes.

How We Disclose Information

We may disclose personal information, when reasonably necessary, to: website and technology providers (including Automattic and Jetpack); business communication providers such as email, scheduling, and webinar platforms; security and IT providers who help protect our systems; professional advisers such as attorneys and accountants; government authorities when required by law, subpoena, or court order; and parties involved in a merger, acquisition, or sale of business assets.

Service providers receive information only as reasonably necessary to perform services for RGC. We do not sell personal information, and we do not disclose it to third parties for their own independent marketing purposes.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, or as required by applicable legal, tax, contractual, or dispute-resolution obligations. When information is no longer needed for these purposes, we take reasonable steps to delete, destroy, de-identify, or securely archive it.

In practice: inquiries that do not result in an engagement are kept only as long as relevant to that inquiry and our correspondence with you; records associated with a client engagement are retained consistent with the applicable engagement agreement and ordinary professional recordkeeping practice; and contracts, invoices, and legally significant business records are kept as long as required by law or sound business practice. We have not adopted fixed retention periods beyond these criteria, because a solo consulting practice is not well positioned to guarantee a specific numeric schedule — we commit instead to the criteria above.

Separately, per Automattic’s published privacy notice, Jetpack Stats and website server logs containing IP addresses are generally retained by Automattic for approximately 30 days, after which that data is no longer associated with an individual visit.

Information Security

This site is served over HTTPS/TLS and hosted on WordPress.com’s managed infrastructure, which includes automated backups, malware scanning, and DNSSEC. RGC uses administrative and technical safeguards reasonably designed for the nature of the information we maintain, including multi-factor authentication and vendor oversight. No method of electronic transmission or storage can be guaranteed completely secure. As an IT risk and compliance advisory firm, we hold this site to the same standard of care we recommend to our clients.

Your Privacy Rights

Depending on where you reside and whether applicable law applies to RGC, you may have the right to request information about the personal information we hold about you, request its correction or deletion, and request portability of information you provided. RGC does not presently sell personal information, share it for cross-context behavioral advertising, or use it for automated decision-making with legal or similarly significant effects.

To submit a request, email robcook@rgcconsultingllc.com with the subject line “Privacy Request.” We may ask for information reasonably necessary to verify your identity before responding, and will respond within the period required by applicable law.

California Residents

The California Consumer Privacy Act (CCPA) applies only to businesses meeting specified statutory thresholds. RGC will provide California residents with the rights and disclosures required by the CCPA if and when the law applies to RGC or to a particular processing activity. Regardless of CCPA coverage, RGC does not sell personal information or share it for cross-context behavioral advertising.

Nevada Residents

Nevada residents may submit a verified request directing RGC not to make a covered sale of personal information by emailing robcook@rgcconsultingllc.com with the subject line “Nevada Privacy Request.” RGC does not presently engage in covered sales of personal information.

Children’s Information

This website and RGC’s services are intended for businesses and professionals. They are not directed to children under 13, and RGC does not knowingly collect personal information directly from children under 13 through this website. If we learn that such information has been collected, we will take reasonable steps to delete it.

External Websites

This website may contain links to websites or services operated by third parties. RGC is not responsible for the privacy or content practices of an external website. You should review the privacy policy of any external service you visit.

Changes to This Policy

We may update this policy as our services, website technologies, vendors, or legal obligations change. The “Last updated” date at the top of this page reflects the most recent revision. If a change materially affects how we use or disclose personal information, we will provide reasonably prominent notice on the website.

Contact Us

Questions, concerns, or privacy requests may be sent to RGC Consulting LLC at robcook@rgcconsultingllc.com (suggested subject line: “Privacy Request”).