This Privacy Policy explains how information is collected, used, and handled when you visit paulworsham.com. This is a personal website operated by Paul F. Worsham, an individual based in Springfield, Virginia, USA. Paul F. Worsham is the data controller for any personal data collected through this Site.
This Site does not use contact forms, email sign-up fields, newsletter subscriptions, or account registration. No purchase transactions take place on this Site. However, certain information may be collected automatically or through third-party services embedded in the Site:
This Site does not knowingly collect personal data from children under 13, or under 16 where applicable.
Any data incidentally collected through this Site is used only to:
No personal data collected through this Site is sold, rented, or shared with third parties for advertising or marketing purposes. This is a personal informational website. It does not generate revenue through advertising and does not engage in behavioral tracking.
I do not use your information to build profiles for purposes unrelated to responding to your inquiry, and I do not make automated decisions that produce legal or similarly significant effects about you.
The following third-party services are embedded in this Site and may independently collect data when you visit:
AI Chatbot Disclosure. The live chat feature on this Site is powered by artificial intelligence. Users are informed they are interacting with an AI assistant — not a human — at the initiation of each chat session. This disclosure is made in accordance with the EU AI Act (Article 50), applicable U.S. state AI transparency requirements, and FTC guidance on deceptive practices. The AI assistant does not make binding commitments, provide legal or financial advice, or take autonomous actions on behalf of this Site. Conversations may be reviewed by the site operator to improve response quality.
These third parties operate under their own privacy policies and are solely responsible for their data practices. I do not control and am not responsible for the content or privacy practices of these external services.
This Site does not set first-party cookies. The Charla live chat widget may set one or more functional cookies necessary to operate the chat session (for example, to maintain chat continuity if you navigate between pages). These are session-functional cookies and are not used for advertising or cross-site tracking.
You may disable cookies in your browser settings. Doing so may affect the functionality of the live chat feature but will not affect your ability to view any content on this Site.
Google Fonts does not set cookies in connection with font delivery requests.
Chat conversation records submitted through the Charla widget are retained within Charla's platform according to their data retention policies. Hosting server logs are retained according to my web host's standard practices, typically 30–90 days.
If you request deletion of any personal data submitted through this Site, I will make reasonable efforts to honor that request within 30 days, except where retention is required by law or for legitimate record-keeping purposes. Requests should be submitted as described in Section 15.
Depending on your location, you may have the following rights regarding personal information collected through this Site:
To exercise any of these rights, contact me using the information in Section 15. I will respond within 30 days, or within the timeframe required by applicable law.
If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you with the following rights:
Note: This Site does not sell personal data, does not use personal data for targeted advertising, and does not engage in profiling that produces legal or similarly significant effects. Nevertheless, these rights apply to you and I will honor them.
To exercise your rights, submit a request as described in Section 15. I will respond within 45 days. If I deny a request, you have the right to appeal by contacting me at the same address. If you are not satisfied with the outcome of an appeal, you may contact the Virginia Attorney General at oag.state.va.us ↗.
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) provides you with additional rights. This Site does not sell personal information and has not done so in the preceding 12 months. This Site does not share personal information for cross-context behavioral advertising.
You have the right to know what personal information is collected, to request its deletion, to correct inaccurate information, and to not be discriminated against for exercising your rights.
Categories of personal information collected: Identifiers (IP address, browser type) via server logs and third-party services; any information voluntarily submitted via the live chat widget.
To submit a request, contact me as described in Section 15.
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the following provisions apply under the General Data Protection Regulation (GDPR) and the UK GDPR.
Data Controller: Paul F. Worsham, an individual operating paulworsham.com. Contact details are in Section 15.
Legal Basis for Processing:
International Data Transfers: Third-party services (Charla, Google) may transfer and process your data in the United States or other countries. These transfers are subject to those services' own GDPR compliance mechanisms, including standard contractual clauses where applicable. Refer to their respective privacy policies for details.
Additional Rights Under GDPR: In addition to the rights in Section 6, you have the right to withdraw consent at any time (without affecting prior lawful processing), and the right to lodge a complaint with your local supervisory authority. EU residents may find their supervisory authority at edpb.europa.eu ↗. UK residents may contact the ICO at ico.org.uk ↗.
Personal information collected through this Site is not sold. Personal information is not shared for cross-context behavioral advertising. Because these activities do not occur, no opt-out mechanism is required. If practices change in the future, this policy will be updated to reflect those changes and to provide any required opt-out.
This Site respects browser-based privacy signals. If your browser transmits a Global Privacy Control (GPC) signal or similar universal opt-out mechanism, it will be treated as a valid opt-out request for the sale or sharing of personal information to the extent applicable under law. Since this Site does not sell or share personal data, no further action is required on your part.
This Site is intended for a general adult audience and is not directed at children under 13 (or under 16 in the EEA/UK). No personal information is knowingly collected from children under these ages. If you believe a child has submitted personal information through this Site, please contact me immediately using the information in Section 15 so that it can be deleted.
Reasonable administrative and technical measures are employed to protect information from unauthorized access, alteration, disclosure, or destruction, including use of reputable third-party service providers with their own security practices. However, no method of electronic transmission or storage is 100% secure, and absolute security cannot be guaranteed. In the unlikely event of a data breach affecting your personal information, I will notify you as required by applicable law.
This Privacy Policy may be updated periodically to reflect changes in practices, services, or legal requirements. Material changes will be posted on this page with an updated effective date. Continued use of this Site after changes are posted constitutes acceptance of the updated policy. I encourage you to review this page periodically.
To exercise your data rights, ask a question about this Privacy Policy, or submit a deletion or access request, contact me by email. To protect against automated harvesting, the address is displayed below in a non-linked format — please type it into your email client:
Email: askpaul @paulworsham.com
LinkedIn: linkedin.com/in/paulworsham ↗
Location: Springfield, Virginia, USA
I will respond to rights requests within 30 days, or within the timeframe required by applicable law. Virginia residents: if you are not satisfied with the outcome of a rights request or appeal, you may file a complaint with the Virginia Attorney General at oag.state.va.us ↗. EU/UK residents may contact their local data protection authority as described in Section 9.