Last updated: October 1, 2026
This policy explains what personal information drewcary.com collects, why, who it is shared with, and the choices and rights you have. This is a personal website run by Andrew Cary. It does not sell products, run ads, or sell visitor data.
Who runs this site
drewcary.com is operated by Andrew Cary. For any privacy question or request, email acary2009@gmail.com.
Contact form
The contact form is optional. If you use it, here is exactly what happens with the information you send.
What is collected
- Your first name
- Your email address
- The message you write, including anything you choose to put in it
The form does not ask for a phone number or any other details.
Why it is collected
Your information is used only to read your message and respond to you. It is not used for marketing, not added to a mailing list, not used for targeted advertising, and not used for profiling or automated decision-making.
Where it goes
When you send the form, your message is delivered by email to my personal Gmail inbox through Google’s email servers. It is not stored on this website, in its database, or in any spreadsheet, form tool, or automation service. The email itself is held by Google as part of my inbox, under Google’s privacy policy.
Spam protection
The form uses a hidden field to block automated spam. It does not use any third-party spam filtering or CAPTCHA service.
How long it is kept
Messages are kept only as long as needed to respond and follow up, and are deleted within 24 months of our last contact. You can ask me to delete your message sooner at any time.
Please do not send sensitive information
Please do not include sensitive personal information in a message, such as health information, financial account numbers, government ID numbers, or precise location. I do not need it, and any that is sent by mistake will be deleted.
Information collected automatically
- Server logs. The hosting provider records basic technical information when pages are requested, such as IP address, browser type, and the page visited. These logs are used for security and to keep the site running.
- Fonts. The site loads fonts from Google Fonts. When your browser requests them, Google receives your IP address. See Google’s privacy policy.
- Analytics and ads. The site does not use analytics, advertising, or cross-site tracking tools. If that changes, this policy will be updated first.
Cookies
The site uses a cookie consent banner. It stores a small cookie that remembers your choice so the banner does not appear on every visit. Site administrators who log in also receive standard WordPress login cookies. Visitors do not need an account, and comments are turned off.
Categories of personal data, purposes, and sharing
In summary, and in the terms used by the Maryland Online Data Privacy Act:
- Categories collected: identifiers (first name, email address, IP address in server logs), the contents of messages you send, and basic device and browser information.
- Purposes: responding to your messages, operating and securing the website, and remembering your cookie choice.
- Categories of third parties that receive it: service providers acting on my behalf, namely the website host and Google, which delivers and stores contact form emails and serves the site’s fonts.
- Sale and targeted advertising: personal data is not sold, is not shared for targeted advertising, and is not used for profiling in furtherance of decisions that produce legal or similarly significant effects.
- Sensitive data: sensitive data is not intentionally collected or processed.
- Children: this site is not directed to children, and I do not knowingly collect personal data from anyone under 18.
Your privacy rights
Wherever you live, and including the rights given to Maryland residents under the Maryland Online Data Privacy Act, you can ask to:
- Confirm whether I process your personal data and access it
- Correct inaccurate personal data
- Delete personal data you provided or that I hold about you
- Get a copy of your personal data in a portable, readily usable format
- Get a list of the categories of third parties your personal data was shared with
- Opt out of the sale of personal data, targeted advertising, and profiling (none of these happen on this site, but you may still make the request)
To make a request, email acary2009@gmail.com with the subject line “Privacy request.” I may ask for information needed to confirm the request came from you. I will respond within 45 days. If more time is reasonably needed, I will let you know within that period, and the total will not exceed 90 days. Requests are free of charge. You will not be treated differently for exercising any of these rights.
Appeals
If I decline your request, you can appeal by replying to my decision or emailing acary2009@gmail.com with the subject line “Privacy appeal.” I will respond in writing within 60 days and explain the result. If you are a Maryland resident and your appeal is denied, you can contact the Office of the Attorney General of Maryland, Consumer Protection Division, at marylandattorneygeneral.gov.
Security
Reasonable technical and administrative measures are used to protect personal information, including encrypted connections (HTTPS), encrypted email delivery, limited administrator access, and server-side checks on everything submitted through the contact form. No method of transmission or storage is completely secure. If a data breach affecting your personal information occurs, you will be notified as required by the Maryland Personal Information Protection Act and other applicable law.
Links to other sites
This site links to other websites, including LinkedIn and Blue Ridge Digital Partners. Those sites have their own privacy practices, which this policy does not cover.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new “last updated” date. Material changes will be made before any new type of data collection begins.