Skip to content

Privacy Policy

Last updated: October 28, 2026

Information Governance Strategies (“we,” “our,” or “us”) is a data and AI governance advisory firm, and we hold ourselves to the same standards we help our clients meet. This Privacy Policy explains what personal information we collect through ig-strategies.com, how we use it, who we share it with, and the choices and rights you have.

At a glance

  • We collect only what we need to respond to you, send what you asked for, and run this website.
  • We do not sell your personal information, share it for targeted advertising, or use advertising trackers.
  • Our website analytics use no cookies and do not identify you.
  • We honor the Global Privacy Control (GPC) signal automatically.
  • Every email we send includes a one-click unsubscribe link.

1. Information we collect

Information you give us

  • Contact form: your name, email address, company name (optional), the topic you select, and your message.
  • Weekly briefing and template signups: your email address and first name (optional), the list you joined, and the date, time and IP address of your signup and confirmation. We keep this as a record of your consent.
  • Consultation scheduling: when you book a consultation, our scheduling provider, Calendly, collects your name, email address and any details you choose to share. Calendly’s own privacy notice also applies.
  • Email and other correspondence: anything you choose to include when you write to us or work with us.

Information collected automatically

  • Server logs: like all websites, our hosting provider records technical information such as IP address, browser type, pages requested and the referring page, for security and to keep the site running.
  • Website analytics: we use Koko Analytics, a privacy-friendly tool that counts page views and referrers without cookies, without fingerprinting, and without building a profile of you. Analytics data stays on our own server and is not shared with any analytics company.
  • Email engagement: our newsletter system records whether an email was opened and which links were clicked. We use this only to understand which topics are useful and to stop emailing people who no longer read our emails.

We do not collect sensitive personal information (such as government ID numbers, financial account details or health information) through this website, and we ask that you not send it to us.

2. Cookies and your choices

We use only essential cookies by default. These include a cookie that remembers your cookie choices for 180 days, and login cookies for site administrators. Our website fonts are hosted on our own server, so loading a page does not send your information to a font provider.

If we ever add optional cookies, such as for analytics or embedded content, they will only be set with your permission through our cookie banner. You can accept or reject optional cookies and change your choice at any time using the cookie settings button on any page. See our Cookie Policy for the current list of cookies.

3. Global Privacy Control (GPC)

If your browser or a browser extension sends a Global Privacy Control signal, we treat it as a valid request to opt out of the sale or sharing of your personal information and of any optional cookies, for that browser. When we detect the signal, our site displays a confirmation that your opt-out request has been honored. You don’t need to do anything else. Because we do not sell or share personal information, the signal confirms a choice we already respect.

4. How we use your information

  • Respond to your inquiries and communicate with you
  • Schedule and hold consultations, and deliver engagements you request
  • Send the weekly briefing, the resources you request, and related follow-up you agreed to
  • Understand how our website and emails are used, so we can improve them
  • Keep our website secure and prevent spam and abuse
  • Comply with legal obligations and maintain business records

5. Legal basis for processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

  • Consent: for the weekly briefing and other emails you sign up for, and for any optional cookies. You can withdraw consent at any time.
  • Contract: to take steps you request before an engagement and to deliver our services.
  • Legitimate interests: to respond to inquiries, run and secure our website, and understand aggregate site usage, in ways that do not override your rights.
  • Legal obligation: where the law requires us to keep or disclose information.

6. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share personal information only with service providers that help us operate our business, under terms that limit their use of it to providing services to us:

  • GoDaddy: website hosting and business email (GoDaddy privacy policy)
  • Calendly: consultation scheduling (Calendly privacy notice)
  • MailPoet, a service of Automattic: sends the weekly briefing, requested resources and website notifications on our behalf (Automattic privacy policy)
  • Professional advisers: such as accountants or attorneys, where needed

We may also disclose information if required by law or legal process, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of our business, in which case this policy would continue to apply to your information.

7. How long we keep information

  • Email subscriptions: until you unsubscribe. Signups that are never confirmed are deleted after 30 days. If you haven’t opened our emails for 12 months, we stop sending to you.
  • Inquiries and correspondence: as long as needed to respond and to maintain ordinary business records.
  • Client engagement records: for the period our engagement terms and applicable law require.
  • Cookie choice: 180 days, after which we ask again.
  • Analytics: kept only as aggregate counts that do not identify you.

When information is no longer needed, we delete or anonymize it.

8. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your personal information, subject to legal exceptions
  • Receive a copy of your information in a portable format
  • Restrict or object to certain processing
  • Withdraw consent at any time, for example by using the unsubscribe link in any email
  • Opt out of the sale or sharing of personal information, targeted advertising and profiling. We do none of these, and we honor GPC signals automatically.

California and other U.S. state privacy rights

If you are a resident of California or another U.S. state with a comprehensive privacy law, you have the rights described above as they apply under your state’s law. In the past 12 months we have collected identifiers (such as name and email address), professional information (such as company name), internet activity on our site, and the content of your messages, from you and from your device, for the purposes described in Section 4. We have not sold or shared personal information, and we do not use or disclose sensitive personal information. We will not discriminate against you for exercising your rights.

To make a request, email privacy@ig-strategies.com. We will verify your request by confirming details we already hold, and you may use an authorized agent. We will respond within the time required by applicable law. If we decline your request and your state provides a right to appeal, you may appeal by replying to our decision, and we will respond to your appeal in writing.

9. Data security

We use reasonable administrative, technical and physical safeguards to protect personal information, including encrypted connections (HTTPS), access controls and two-factor authentication for site administration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International data transfers

We are based in the United States, and our service providers process information in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for these transfers.

11. Children’s privacy

Our website and services are intended for business professionals and are not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. We will post the updated policy on this page and change the “Last updated” date at the top. If we make a material change, we will provide additional notice where appropriate, such as in our weekly briefing.

13. Contact us

If you have questions about this policy or our privacy practices, or want to exercise your rights, please contact us:

Information Governance Strategies
456 Glenbrook Rd, #512, Stamford, CT 06906
Email: privacy@ig-strategies.com
Phone: +1-203-941-1235