📅 Last updated: June 1, 2026 · Effective: June 1, 2026

Bottom line, before you read further: CyWella never sells your personal information. We never share your data with advertisers. We collect only what is necessary to provide our services and communicate with you, and we protect it with the same rigor we advise our clients to apply to their own data.

Overview

CyWella LLC (“CyWella,” “we,” “our,” or “us”) is an executive cybersecurity and AI governance advisory firm headquartered at 8700 Westpark Drive Suite 140, Houston, TX 77063. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our website at cywella.ai, submit a consultation request, download a resource, subscribe to our newsletter, or engage with our advisory services.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our website or submit personal information to us.

What We Collect

Information You Provide Directly

We collect information you provide when you:

• Complete a consultation request or contact form (name, email, company, title, phone, message)
• Download a lead magnet or resource (name, email, company, title)
• Subscribe to our newsletter (email address)
• Complete our discovery questionnaire as part of an engagement (organizational details, security posture information)
• Correspond with us via email, phone, or video conference

Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• IP address and general geographic location (country/city level)
• Browser type, version, and operating system
• Pages visited, time on page, and navigation path
• Referring website or source
• Device type (desktop, mobile, tablet)

This information is collected via cookies and similar tracking technologies. See our Cookie Policy for full details.

Information from Third Parties

We may receive information about you from LinkedIn, referral partners, or event organizers when you interact with our content on those platforms. We handle all such information in accordance with this policy.

Important: During advisory engagements, clients may share confidential organizational information with us. This information is governed by the confidentiality provisions in your engagement agreement and is treated with the highest level of protection. It is never used for any purpose other than delivering the services you engaged us for.

How We Use Your Information

We use the information we collect for the following purposes:

• Delivering our services — responding to consultation requests, conducting assessments, and providing advisory deliverables
• Communication — following up on inquiries, sending requested resources, and corresponding during engagements
• Newsletter and insights — sending cybersecurity and AI governance updates to subscribers who have opted in
• Website improvement — understanding how visitors use our site to improve content and user experience
• Legal compliance — meeting our legal obligations and enforcing our terms where required
• Fraud prevention — protecting our website and clients from security threats and fraudulent activity

We do not use your information for advertising purposes, behavioral profiling, or sale to data brokers.

Who We Share Your Information With

We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:

• Service providers — third parties who help us operate our business (email platform, CRM, scheduling tool, analytics). These providers are contractually bound to protect your data and use it only for the purpose we specify.
• Legal requirements — when required by law, court order, or governmental authority
• Business transfers — if CyWella is acquired, merged, or undergoes a restructuring, your information may be transferred to the successor entity under equivalent privacy protections
• With your consent — for any other purpose with your explicit permission

Our Current Service Providers

• Email marketing: Mailchimp or Kit (email delivery only)
• CRM: HubSpot (lead and client relationship management)
• Scheduling: Calendly (appointment booking)
• Analytics: Google Analytics 4 (website usage, anonymized)
• Hosting: Webflow or equivalent (website infrastructure)

Cookies

We use cookies and similar technologies to improve website functionality, analyze usage, and remember your preferences. For full details on the types of cookies we use and how to manage them, see our Cookie Policy.

You may disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

Data Retention

We retain your information for as long as necessary to provide our services and meet our legal obligations:

• Active clients and prospects: for the duration of the engagement plus 3 years
• Newsletter subscribers: until you unsubscribe
• Website analytics: 26 months (Google Analytics default)
• Engagement records and deliverables: 7 years to comply with professional and legal obligations

When retention periods expire, we securely delete or anonymize your data.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information (subject to legal retention obligations)
• Portability — request a copy of your data in a machine-readable format
• Objection — object to certain uses of your data, including direct marketing
• Opt-out — unsubscribe from our newsletter at any time via the unsubscribe link in any email

To exercise any of these rights, contact us at info@cywellaai.com. We will respond within 30 days.

Security

We protect your information using industry-standard security measures including:

• TLS/SSL encryption for all data transmitted to and from our website
• Access controls limiting who can view personal data within our team
• Encrypted storage for sensitive engagement information
• Regular security reviews of our own practices — we hold ourselves to the standards we recommend to clients

No transmission over the internet is 100% secure. If you believe your information has been compromised, contact us immediately at info@cywellaai.com.

Children’s Privacy

Our website and services are intended for business professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a child, we will delete it promptly.

Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email. Your continued use of our website or services after any changes indicates acceptance of the updated policy.

Contact Us

Questions about this policy or your data? Email info@cywella.ai or use the contact form.