We collect as little as a website can.

Who we are

This website, stealthworker.com, is operated by Stealth Worker (“we”, “us”). We are the controller of the personal data described in this notice. You can reach us about anything in it at [email protected].

Stealth Worker Inc. is based in Menlo Park California.

What this website does not do

• It sets no cookies and uses no local storage.
• It uses no analytics, advertising or tracking tools.
• It loads no third-party content: fonts, styles and images are all served from our own domain.
• It has no forms, accounts or newsletter sign-up.

What we do process

Server logs. Like any website, the server that delivers these pages records technical details of each request: IP address, date and time, the page requested, and the browser’s user-agent string. Our hosting provider keeps these logs on our behalf for a limited period so that the site can be kept secure and running. We do not use them to identify or profile visitors. Under the GDPR we rely on our legitimate interest in operating a secure website.

Email you send us. If you write to us, we receive your email address, your name if you give it, and whatever you include in the message. We use this to reply and, if you ask about our services, to discuss and prepare a possible engagement. Under the GDPR we rely on our legitimate interest in answering enquiries, or on taking steps at your request before entering into a contract. We keep correspondence for as long as it is needed for that purpose and for our ordinary business records, and then delete it.

Client engagements

Personal data we handle while working for clients, for example as a Data Protection Officer, EU Representative or fractional CISO, is governed by our contract with that client and is outside this notice. If your question is about data held by one of our clients, we will pass it to them or tell you how to reach them.

Who we share data with

We use service providers to host this website and to run our email. They process data only on our instructions. We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not pass it to anyone else unless the law requires it.

International transfers

We and our service providers may process personal data in countries other than your own, including outside the European Economic Area and the United Kingdom. Where we do, we rely on an adequacy decision or on appropriate safeguards such as the European Commission’s standard contractual clauses.

Your rights

Depending on where you live, you may have the right to:

• know what personal data we hold about you and receive a copy;
• have it corrected or deleted;
• object to our use of it, or ask us to restrict that use;
• receive it in a portable format;
• complain to a data protection authority. In the EU, this is the authority in the country where you live or work.

California residents have the rights given by the CCPA as amended by the CPRA, including the rights to know, delete and correct, and the right not to be discriminated against for using them. We do not sell or share personal information as those terms are defined in that law.

To use any of these rights, email [email protected]. We may need to confirm your identity before acting, and we will respond within the time the law allows.

Changes to this notice

If we change how this site handles personal data, we will update this page and the effective date at the top.