Privacy notice

Who is responsible

Lewis Matlock operates CyberWiz, a consulting practice based in Yucaipa, California, United States. For the website and inquiries described here, Lewis Matlock is responsible for deciding how personal information is used (the controller where that term applies). Contact lewis@cyberwiz.io with privacy questions or requests. This notice covers cyberwiz.io and its contact and booking paths, not a client’s systems or an independently operated linked service.

Information and purposes

When you browse, Cloudflare, our hosting and security provider, processes technical information such as IP address, browser and device information, requested URL, timestamps, and security events to deliver the website, prevent abuse, and maintain reliability. This website has no accounts, checkout, advertising pixels, or AI chatbot. Fonts and images are hosted with the site.

Inquiries and notice at collection

The contact form uses your name, email address, optional organization, selected topic, and message to prepare an email draft on your device. The form itself does not transmit these entries to CyberWiz or save them in browser storage. If you open your email app or copy the draft, that app or your device clipboard receives the text. Only if you send the email do we receive its contents, sender details, attachments, and associated email metadata. We use that information to respond, discuss requested services, and maintain relevant business correspondence. Providing it is voluntary; without a return address we may be unable to reply. Do not send credentials, sensitive personal information, or confidential client records in an initial inquiry.

Booking and external services

Booking links open Google Calendar only when you follow them; the calendar is not embedded. Booking details you submit are handled by Google and are made available to the organizer to arrange your call. Email communications are handled through an email service provider. Other links take you to independent services whose notices apply there. See Google’s privacy policy and Cloudflare’s privacy policy.

Cookies, tracking, and privacy signals

We use optional Cloudflare Web Analytics, Google Analytics, and Microsoft Clarity, with your permission, to understand visits, page performance, and clicks on contact links. The analytics script loads only after you select Accept analytics. We do not sell personal information or run advertising campaigns on this website. Our analytics integration disables advertising storage, advertising personalization, and Google signals. Global Privacy Control (GPC) and Do Not Track signals override a saved analytics acceptance on page load. Security processing remains active. Use Cookies & privacy choices to review or withdraw your choice.

Optional analytics information

After acceptance, Cloudflare receives visit and performance measurements, which can include the page URL, referrer, browser or device category, loading timings, and Web Vitals. The network request also exposes connection information to the provider. We use these Cloudflare reports to understand usage and improve performance. We rely on your consent for this optional measurement. Do not put personal or confidential information in page URLs. See Cloudflare data collection documentation. Analytics records are subject to provider retention; withdrawing consent does not delete past reports.

Microsoft Clarity

After you accept analytics, Microsoft Clarity records page interactions such as clicks, scrolling, and navigation to produce heatmaps and session replays that help us improve usability. Microsoft receives technical connection, device, and page information. Clarity can use cookies such as _clck and _clsk to connect visits. We send advertising storage consent as denied. We do not load Clarity on the inquiry page, interactive worksheet pages, or page loads with query strings or fragments. Strict text masking is enabled for the Clarity project. Input content and worksheet summaries are also marked for masking. These exclusions reduce the risk of recording private entries; do not place personal information in URLs. Microsoft processes data according to its privacy statement. See Clarity data collection and retention documentation. Reject analytics to withdraw; reloading unloads the scripts but does not delete earlier recordings.

Worksheet notes

The worksheets run in your browser and do not send your notes to CyberWiz. Interactive worksheet pages are excluded from Clarity recordings. Downloads and printed copies are stored under your control. Page reloads and closing the page clear the in-page notes.

Recipients and disclosures

Cloudflare receives technical visit information; Google and Microsoft receive optional analytics information after acceptance. Email and scheduling providers process information you choose to send or book. Information relevant to an inquiry may also be disclosed to professional advisers when needed to obtain advice, or to authorities when legally required. We may disclose information where necessary to protect rights or address fraud or security threats. This notice does not authorize third parties to use inquiry information for their own advertising. Client work, if agreed, may require separate privacy and data-processing terms.

Legal grounds where European or UK law applies

We use information to take steps at your request before entering a contract, or to perform a contract where applicable. Our legitimate interests include answering business inquiries, administering correspondence, and protecting the website against abuse, subject to your interests and rights. Processing required by law relies on the applicable legal obligation. Where a separate activity requires consent, we will request it before that activity; visiting this website is not consent to marketing or optional tracking. You may withdraw consent for a consent-based activity without affecting processing that was lawful before withdrawal.

Retention

The website does not maintain a database of form submissions. Inquiry and booking records are kept according to the purpose of the conversation, whether it leads to an engagement, and applicable recordkeeping, dispute, and legal requirements. Relevant correspondence may need to be retained for an ongoing engagement or legal claim; unnecessary information should not be included in your inquiry. Hosting and security records are subject to the provider’s service settings and retention practices. Contact us for information about retention of a particular record or to request deletion. A deletion request may be subject to a legal retention requirement; we will explain any applicable exception.

International processing

CyberWiz operates in the United States. Cloudflare, Google, Microsoft, and communication providers may process information in the United States and other countries, where legal protections may differ from those where you live. The provider notices linked above describe their international processing. The specific contractual safeguards and transfer mechanisms applicable to our provider accounts have not been independently verified in this website notice. Contact us before an engagement involving protected international data so the applicable requirements and safeguards can be established, and to request information or copies of applicable safeguards. This notice does not treat your use of the site as consent to an international transfer.

Your privacy rights

Depending on your location and the law applicable to the processing, you may have rights to know about and access personal information, obtain a portable copy, correct inaccuracies, request deletion, restrict processing, object to processing (including direct marketing), and withdraw consent. California residents may have rights under the California Consumer Privacy Act, as amended, including rights to opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal treatment for exercising rights. The availability of statutory rights depends on the law’s scope and exceptions. We do not request sensitive personal information through this site or use it to infer characteristics about you.

Google Analytics

After acceptance, Google Analytics receives page views and engagement measurements, including scrolling, downloads, and fixed labels for booking-link, email-link, and resource download clicks. A click is not proof that you booked a call or sent a message. Google receives connection and device information and uses first-party cookies such as _ga and _ga_9YBW7DSW8B to distinguish visits. We configure those cookies with a maximum lifetime of 180 days, refreshed on visits. We send page addresses without query strings or fragments and limit referrers to their origin. We do not send inquiry form contents, email drafts, or search terms through our custom events. Advertising storage, advertising personalization, and Google signals are disabled in our site configuration. Google processes analytics data under its own privacy policy; see its data safeguards. Rejecting analytics stops future loading but does not erase existing cookies or reports; clear site cookies through your browser to remove them. Earlier analytics acceptance does not authorize newly added providers: the site asks for a new choice when the notice version changes.

How to make a request

Email lewis@cyberwiz.io with the subject “Privacy request.” Describe your request and the relationship or interaction that will help locate the record. Do not send identity documents or passwords unless a secure and necessary verification process has first been agreed. We may need proportionate information to verify identity or an authorized agent’s authority before disclosing or changing records. We will respond within the time required by applicable law, explain any refusal or extension, and will not discriminate for exercising applicable rights. To appeal a decision where that right applies, reply with “Privacy appeal” and your reasons. You may also raise concerns with your local data protection authority, following its complaint procedure. See EEA supervisory authorities, the UK Information Commissioner, or the California Privacy Protection Agency.

Children and automated decisions

This site presents professional consulting and training for adults; it is not directed to children under 13. We do not knowingly seek their personal information. If you believe a child has sent personal information, contact us so we can review and address it. The website does not make decisions with legal or similarly significant effects about you through automated processing or profiling.

Security and changes

No website or email system can guarantee absolute security. Use an agreed secure channel for sensitive engagement materials. We may update this notice to reflect changes in the website or applicable requirements. The updated version and effective date will appear here; material changes will be highlighted on this page, and additional notice or consent will be provided where required. Effective October 24, 2026. This update adds optional Microsoft Clarity heatmaps and session recordings with a fresh consent choice, strict text masking, and exclusions for inquiry and interactive worksheet pages. Google Analytics and consent-based Cloudflare Web Analytics remain available. Cloudflare performance analytics previously ran automatically, was temporarily disabled on October 24, 2026, and was restored with visitor consent controls on the same date. These changes do not erase provider-held historical data. Contact us about information relating to earlier visits.