Privacy Policy (paulgresham.com)
Last updated: [14 Feb 2026]
Who we are
Paul Gresham Advisory LLC (“we”, “us”, “our”) operates this website.
Website: https://paulgresham.com
Contact: paul@paulgresham.com
What personal data we collect and why
Contact forms / email enquiries
If you contact us (via a form or email), we collect the information you provide (such as name, email address, and message content) to respond to your enquiry and keep basic records of communications.
Mailing list
If you subscribe to our mailing list, we collect your email address (and any other fields you provide) to send updates and content. You can unsubscribe at any time using the link in our emails or by contacting us at paul@paulgresham.com.
If we use a third-party email provider (e.g., ConvertKit/Mailchimp), your data will be processed by that provider under their privacy terms.
Comments (if enabled)
When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media uploads (admins/authors)
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors may be able to download and extract any location data from images on the website.
Cookies
We use cookies for site functionality and, if enabled, analytics.
- If you leave a comment, you may opt in to saving your name, email address and website in cookies for convenience. These cookies last for one year.
- If you visit our login page, we set a temporary cookie to determine if your browser accepts cookies (discarded when you close your browser).
- When you log in, we set cookies to save your login information and screen display choices. Login cookies last two days; screen options cookies last one year. If you select “Remember Me”, your login persists for two weeks. If you log out, login cookies are removed.
- If you edit or publish an article, an additional cookie is saved in your browser. It includes no personal data and expires after 1 day.
You can control cookies via your browser settings.
Analytics (if enabled)
If we enable analytics, we may collect information about how you use the site (pages visited, approximate location, device/browser info). This helps us improve the site and content. [Google Analytics]
Security and logs
We may collect IP addresses and related technical data to protect the website, prevent abuse, and maintain security (e.g., login attempt logs, firewall logs).
Embedded content from other websites
Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves in the same way as if you visited the other website directly.
These websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with embedded content, including if you have an account and are logged in to that service.
Who we share your data with
We do not sell your personal data.
We may share data with service providers that help us operate the site (e.g., website hosting, spam detection, email/newsletter providers, analytics providers), but only as necessary for them to provide their services.
If you request a password reset (for site accounts, if any), your IP address will be included in the reset email.
How long we retain your data
- Comments: If you leave a comment, the comment and its metadata may be retained indefinitely to recognize and approve follow-up comments.
- User accounts (if any): We store the personal information provided in the user profile. Users can see, edit, or delete their personal information at any time (except the username). Site administrators can also see and edit that information.
- Enquiries: We retain contact emails/messages for as long as needed to respond and for reasonable record-keeping, unless you request deletion and we have no legal or legitimate reason to retain it.
What rights you have over your data
- If you have an account on this site or have left comments, you can request:
an exported file of the personal data we hold about you; and/or - deletion of your personal data.
This does not include data we must keep for administrative, legal, or security purposes.
To make a request, email paul@paulgresham.com.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.
International visitors
If you access the site from outside the United States, your information may be processed in the United States or other countries where our service providers operate.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when changes were made.