Privacy Policy

How AdvoraHQ collects, uses, protects, and shares your information — and the rights you have over your data.

1. Introduction

AdvoraHQ (“we,” “us,” “the site,” accessible at https://advorahq.com) is operated by Daniel Hayes as an independent publication. This Privacy Policy explains what information is collected when you visit the site, how that information is used, who it is shared with, how long it is kept, and the rights you have under applicable law — including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other privacy frameworks.

By using this site, you agree to the practices described in this policy. If you do not agree, please do not use the site.

2. Data Controller and Contact

For the purposes of GDPR, UK GDPR, and similar privacy laws, the data controller is:

• Operator: Daniel Hayes, AdvoraHQ
• Email: Daniel.Hayes@advorahq.com
• Site: https://advorahq.com

All privacy-related questions, requests, and complaints should be sent to the email address above. There is no separate Data Protection Officer; the operator handles all privacy inquiries directly.

3. Information Collected Automatically

Like most websites, AdvoraHQ automatically collects certain technical data when you visit. This information is not used to identify you personally and includes:

• Internet Protocol (IP) address (truncated for analytics)
• Browser type, version, and language
• Operating system and device type
• Referring and exit URLs
• Date, time, and duration of your visit
• Pages viewed and clicks within the site
• General geographic location (country/region level only)

This data is used for site analytics, security, fraud prevention, and improving content.

4. Information You Provide Voluntarily

You may choose to share information with the site directly when you:

• Email the operator (your email address and the content of your message)
• Submit a comment, if comments are enabled (your name, email, and comment content)
• Sign up for a newsletter, if available (your email address only)
• Report a factual error or content correction

Voluntarily submitted information is used only for the purpose for which it was submitted. Email addresses are never sold, rented, shared, or used for unsolicited marketing.

5. Cookies and Tracking Technologies

This site uses cookies — small text files stored on your device — to enable core functionality, analyze traffic, and serve personalized advertising where consent is given. Cookies fall into the following categories:

5.1 Strictly Necessary Cookies

Required for the site to function. Cannot be disabled. Includes:

• wordpress_*, wp-settings-* — WordPress session and preferences (only set if you log in)
• cookie_consent or equivalent — remembers your cookie preferences

5.2 Analytics Cookies

Used to understand site usage, set only with your consent in regions that require it. Provided by Google Analytics 4 via Site Kit by Google:

• _ga — distinguishes unique users (retention: 2 years)
• _ga_<container-id> — session state (retention: 2 years)

5.3 Advertising Cookies

Used by Google AdSense and its partners to serve and measure ads:

• __gads, __gpi — ad serving and frequency capping
• IDE, NID, DSID — Google ad personalization
• DoubleClick DART cookie — interest-based ad measurement

You can opt out of personalized advertising at Google Ads Settings or Network Advertising Initiative.

5.4 Managing Cookies

You can control cookies through:

• The cookie consent banner shown on your first visit (EU/UK/EEA visitors)
• Your browser settings — most browsers allow you to refuse, delete, or restrict cookies
• Third-party opt-out tools linked above

Disabling cookies may affect site functionality.

6. Third-Party Services

AdvoraHQ uses the following third-party services. Each has its own privacy policy that governs how it processes your data:

AdvoraHQ has no access to or control over the cookies, scripts, or data processing of these third parties.

7. Lawful Bases for Processing (GDPR)

If you are in the European Economic Area, the United Kingdom, or another GDPR-aligned jurisdiction, the lawful bases under Article 6 GDPR for processing your data are:

• Consent (Art. 6(1)(a)) — for analytics cookies, advertising cookies, and any optional newsletter
• Legitimate interests (Art. 6(1)(f)) — for site security, fraud prevention, basic traffic logging, and responding to your direct inquiries
• Legal obligation (Art. 6(1)(c)) — where processing is required by law

You may withdraw consent at any time by adjusting your cookie preferences or by contacting Daniel.Hayes@advorahq.com.

8. How Information Is Used

• To operate, maintain, and secure the site
• To analyze traffic patterns and improve content
• To respond to your inquiries, corrections, and feedback
• To serve and measure advertising (via Google AdSense, where consent is given)
• To comply with legal obligations and protect against abuse

Your information is never used to build personal profiles for resale, never sold to data brokers, and never shared with marketers.

9. Data Sharing and Disclosure

AdvoraHQ does not sell your personal data. Information may be shared only in these limited situations:

• Service providers who help operate the site (Google Analytics, Google AdSense, hosting provider) under their own privacy commitments
• Legal requirements — if required to comply with a valid court order, subpoena, or applicable law
• Protection of rights — to investigate, prevent, or address suspected fraud, security issues, or violations of the site’s Terms of Service

10. International Data Transfers

AdvoraHQ is operated globally and uses service providers (including Google) that may process data in the United States and other countries. Where data is transferred outside the European Economic Area or the United Kingdom, transfers rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The EU-U.S. Data Privacy Framework (where applicable)
• Adequacy decisions issued by the European Commission

By using the site, you acknowledge that your data may be processed outside your country of residence.

11. Data Retention

Data is kept only for as long as needed to fulfill the purpose for which it was collected:

• Email correspondence: retained for up to 24 months, then deleted unless the conversation remains active or legally required
• Analytics data: retained for up to 14 months in Google Analytics 4 (default)
• Comment data (if comments enabled): retained as long as the comment remains visible on the site
• Server logs: rotated and deleted within 30 days

You may request earlier deletion at any time — see Section 12.

12. Your Rights Under GDPR (EU/UK Users)

If you are in the EU, EEA, or UK, you have the following rights under GDPR / UK GDPR:

• Right of access — request a copy of personal data held about you
• Right to rectification — request correction of inaccurate data
• Right to erasure (“right to be forgotten”) — request deletion of your data
• Right to restrict processing — pause processing while disputes are resolved
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent — at any time, without affecting processing already done
• Right to lodge a complaint — with your local data protection authority

To exercise any of these rights, email Daniel.Hayes@advorahq.com. Requests are responded to within 30 days. There is no charge for reasonable requests.

13. Your Rights Under CCPA / CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you these rights:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information collected from you
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information
• The right to limit use of sensitive personal information
• The right to non-discrimination for exercising your privacy rights

AdvoraHQ does not sell personal information as defined under CCPA. To exercise any CCPA right, email Daniel.Hayes@advorahq.com.

14. “Do Not Track” Signals

Some browsers transmit “Do Not Track” (DNT) signals. Because there is no industry consensus on how to interpret DNT, this site does not currently respond to DNT signals. However, you can manage tracking through the cookie consent banner and through the third-party opt-outs listed in Section 5.

15. Children’s Privacy

AdvoraHQ is not directed at children. The site does not knowingly collect personal information from children under the age of 16 (or 13 in jurisdictions where that lower threshold applies under COPPA).

If you believe a child has provided personal information through this site, contact Daniel.Hayes@advorahq.com immediately and the information will be removed.

16. Data Security

Reasonable administrative, technical, and physical measures are in place to protect the information collected through this site, including:

• HTTPS encryption for all site traffic
• Limited administrative access to site data
• Regular security updates to the WordPress core, themes, and plugins
• Routine review of third-party service permissions

However, no method of internet transmission or electronic storage is 100% secure. Absolute security cannot be guaranteed.

17. Links to External Sites

This site contains links to external websites — IRS publications, legislative databases, court opinions, academic papers, news outlets, and partner services. These links are provided for reference and convenience.

AdvoraHQ has no control over the privacy practices of external sites and is not responsible for their content, cookies, or data handling. You should review the privacy policy of any external site you visit.

18. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in practice, technology, legal requirements, or site functionality. When material changes are made:

• The “Last Updated” date at the top of this page is revised
• Significant changes will be highlighted at the top of this page for at least 30 days
• If changes affect previously collected data, affected users will be notified by email where possible

Continued use of the site after changes are posted constitutes acceptance of the updated policy.

19. Contact

For questions about this Privacy Policy, to exercise any of your rights, or to file a complaint:

Daniel Hayes
Founder and Operator, AdvoraHQ
📧 Daniel.Hayes@advorahq.com

General inquiries can also be sent through the Contact page.