Privacy Policy | Northbridge
Northbridge AI, Cyber, GRC & Risk Advisory
Services Engagement tiers Industries Insights About Contact
Free Risk Snapshot
Legal

Privacy policy

Last updated October 14, 2026

Northbridge AI, Cyber, GRC & Risk Advisory LLC (“Northbridge,” “I”) collects very little information through northbridgecyber.com. This page explains what that is and what I do with it.

1. What I collect

What you send me: your name, email, phone, company, and message when you use the contact form, email, call, or text.
Basic server logs: my hosting provider automatically records IP address, browser type, pages visited, and time of visit to run and secure the site.

2. How I use it

Only to respond to you, schedule and deliver a Risk Snapshot, scope an engagement, and keep the site secure. I will not add you to a mailing list unless you ask.

3. No selling, no tracking

I never sell, rent, or trade your information. The site uses no advertising cookies, tracking pixels, or third-party analytics.

4. Who else handles it

Only the services that run my business: Netlify (website hosting), my business email provider, and Google Fonts (which receives your IP address to display the site’s fonts). I may also disclose information if required by law. Information is stored in the United States in accounts protected by multi-factor authentication.

5. How long I keep it

Inquiries that don’t become engagements are deleted within 24 months of last contact. Client records are kept as required by contract and tax law. Information shared during a paid engagement is governed by that engagement agreement.

6. Your rights and contact

Wherever you live, you can ask me to see, correct, or delete your information, or to stop contacting you. Email contact@northbridgecyber.com with the subject “Privacy request” or call 610.200.1976. I respond within 30 days. If this policy changes, I’ll update the date above.

Northbridge AI, Cyber, GRC & Risk Advisory LLC
contact@northbridgecyber.com · 610.200.1976

Laws this policy follows

This policy is designed to meet the following laws. Some apply only above certain size thresholds or to residents of certain places; I follow these practices for everyone.

California Online Privacy Protection Act (CalOPPA)Cal. Bus. & Prof. Code §22575–22579
California Consumer Privacy Act, as amended by CPRACal. Civ. Code §1798.100 et seq.
EU and UK General Data Protection Regulation (GDPR)Regulation (EU) 2016/679; UK GDPR
Virginia, Colorado, and Connecticut consumer privacy lawsVa. Code §59.1-575; C.R.S. §6-1-1301; Conn. Gen. Stat. §42-515
Pennsylvania Breach of Personal Information Notification Act73 P.S. §2301 et seq.
FTC Act, Section 5 (truthful privacy statements)15 U.S.C. §45
CAN-SPAM Act15 U.S.C. §7701 et seq.
Children’s Online Privacy Protection Act (COPPA)15 U.S.C. §6501–6506
Northbridge
AI, Cyber, GRC & Risk Advisory LLC
Fractional security leadership for healthcare, finance, government, and high-growth companies.
All engagements are customized to client scope. Tier placement is indicative — hybrid and custom arrangements available on request. Privacy policy© 2026 Northbridge AI, Cyber, GRC & Risk Advisory LLC