Privacy Policy

1. Who We Are

The Waldrep Company is a digital forensics consulting and training firm based in the United States. We provide expert witness services, investigative consulting, and professional training to law enforcement agencies, legal professionals, government entities, and corporate clients.

Contact: info@thewaldrepcompany.com  |  (251) 216-1164

2. Information We Collect

We collect information you provide directly to us, including:

• Contact inquiries: Name, email address, phone number, organization, and the content of your message when you submit our contact form.
• Training enrollment: Name, email address, agency or employer, and course interest when you reserve a seat or request training information.
• Syllabus downloads: Name and email address when you request a course syllabus PDF.
• Newsletter subscriptions: Name and email address when you subscribe to the Digital Forensics Today newsletter.

We also collect limited technical data automatically when you visit our website, including your IP address, browser type, pages visited, and time of visit, through Google Analytics, Google Ads, the Meta Pixel, the LinkedIn Insight Tag, and Ahrefs Web Analytics (see Section 5).

Separately, when you submit our contact form, a syllabus or checklist request, or a training enquiry, the email address you provide, and on the contact form the phone number, is hashed in your browser and sent to Google Ads so that the enquiry can be matched to a Google account. This happens at the moment you submit the form, not automatically as you browse. See Section 5.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide the services you request
• Send course information, training schedules, and pricing you asked about
• Deliver the Digital Forensics Today newsletter to subscribers
• Follow up on training enrollment requests and consulting inquiries
• Improve our website and understand how visitors use it
• Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. How We Share Your Information

We share your information only with service providers who help us operate our business, and only to the extent necessary:

• Formspree: Our contact and email capture forms are processed by Formspree (formspree.io). Submissions are transmitted to and stored by Formspree on our behalf. See Formspree's Privacy Policy.
• Google Analytics: Web analytics service from Google LLC. See Section 5 for details and opt-out options.
• Meta Pixel: Conversion measurement and audience tools from Meta Platforms, Inc. See Section 5 for details and opt-out options.
• Google Ads: Conversion measurement and remarketing from Google LLC, used to measure which advertising campaigns produce enquiries and enrollments. When you submit a form, a hashed version of your email address, and on the contact form your phone number, is also sent to Google Ads so the conversion can be matched. See Section 5 for details and opt-out options.
• LinkedIn Insight Tag: Conversion measurement and audience tools from LinkedIn Corporation and its affiliates, used to measure the performance of our advertising on LinkedIn. See Section 5 for details and LinkedIn's Privacy Policy.
• Ahrefs Web Analytics: Aggregate website traffic measurement from Ahrefs Pte. Ltd. (Singapore), used for search engine optimization. Data is transmitted to and stored by Ahrefs outside the European Economic Area. See Section 5 for details and Ahrefs' Privacy Policy.
• Stripe: Payment processing for course purchases. Card details are submitted directly to Stripe; we do not store full card numbers.
• Supabase: Authentication, course access, and progress storage for enrolled students.
• Netlify: Static-site hosting and serverless functions.
• Cloudflare: We use Cloudflare Turnstile (provided by Cloudflare, Inc.) on pages carrying a contact, syllabus, newsletter, or enrollment form, to tell real visitors apart from automated submissions. Turnstile loads with the page, before any consent choice, because it is a security control rather than analytics. It receives your IP address and browser and device characteristics and stores a short-lived token in your browser. See Cloudflare's Privacy Policy.
• Email providers: We use email service providers to send newsletters and follow-up communications.

We may also disclose information when required by law, legal process, or government request, or to protect the rights and safety of The Waldrep Company, our clients, or the public.

5. Analytics, Advertising Pixels, and Consent

Google Analytics (GA4). This website uses Google Analytics, a web analytics service provided by Google LLC, to understand how visitors use the site. Google Analytics uses cookies and similar technologies to collect data including IP address, browser type, pages visited, referring URL, and time spent on pages. This data is transmitted to and stored by Google on servers in the United States.

Meta Pixel. We use the Meta Pixel (provided by Meta Platforms, Inc.) on this website to measure the performance of our advertising on Facebook, Instagram, and other Meta properties, and to build audiences for future campaigns. The Pixel can record page views, button clicks, and purchase events, and it may pass cookies and a hashed identifier back to Meta.

Google Ads. We run search advertising through Google Ads (Google LLC) and use its conversion tag on this website to measure which campaigns lead to enquiries and course enrollments. It is delivered through the same Google tag as Google Analytics and is governed by the same Consent Mode settings described below. We also enable Google's Enhanced Conversions feature. When you submit our contact form, a syllabus or checklist request, or a training enquiry, the email address you entered, and on the contact form the phone number, is normalized and SHA-256 hashed in your browser by the Google tag and transmitted to Google Ads alongside the conversion, so Google can match the enquiry to a Google account. The raw address and number are not transmitted in plain text, and nothing is transmitted while advertising consent is denied.

LinkedIn Insight Tag. We use the LinkedIn Insight Tag (provided by LinkedIn Corporation and its affiliates) to measure the performance of our advertising on LinkedIn and to build audiences for future campaigns. It can record page views and conversion events, and it sets cookies in the linkedin.com and licdn.com domains that allow LinkedIn to match website activity to a LinkedIn member account. Unlike the other tags on this site, its remote script is not loaded at all until you give consent.

Ahrefs Web Analytics. We use Ahrefs Web Analytics (provided by Ahrefs Pte. Ltd., Singapore) to measure page traffic and referring sources for search engine optimization. It records page views, referring URL, and coarse technical data such as country, browser, and device type. This data is transmitted to and stored by Ahrefs outside the European Economic Area. Ahrefs states that this service does not use cookies and does not collect personally identifiable information. It is not used on pages that carry account, payment, or certificate identifiers.

Consent and Google Consent Mode v2. These services do not all default the same way, so we set them out separately rather than give you one blanket statement.

• Google Analytics and Google Ads use Google Consent Mode v2, and their defaults depend on where you are. In the European Economic Area, the United Kingdom, and Switzerland, Google analytics and advertising storage default to denied, so no Google Analytics or Google Ads cookies are set until you choose "Accept All" on the cookie banner. Everywhere else, including the United States and Canada, those categories default to granted, and choosing "Reject Non-Essential" turns them off. While consent is denied, Consent Mode may still send aggregate, cookieless pings for basic measurement, in line with Google's published behavior; we enable ads data redaction so advertising identifiers are stripped from those pings.
• The Meta Pixel initializes in a revoked state on every page it appears on, worldwide, and does not record a page view until you accept.
• The LinkedIn Insight Tag is the most restricted of the four: its remote script is never loaded, anywhere in the world, until you accept.
• Ahrefs Web Analytics is not gated by the banner, because Ahrefs states that it sets no cookies and collects no personally identifiable information.

Essential cookies (authentication, security, and your consent choice itself) are always on. If you browse with JavaScript disabled, the Meta and LinkedIn no-script fallback images may still load, because the consent script cannot run to suppress them.

Changing your choice. You can change your consent at any time by clicking the Cookie Preferences link in the site footer, by installing the Google Analytics Opt-out Browser Add-on, or by managing cookies through your browser settings. You can also opt out of Meta's interest-based advertising at facebook.com/about/ads, opt out of Google's personalized advertising at adssettings.google.com, and opt out of LinkedIn's advertising and analytics in the Advertising Data section of your LinkedIn account settings.

6. Cookies and Local Storage

Our website uses three categories of client-side storage:

• Strictly necessary. Authentication tokens for logged-in students, a session identifier on the payment success page to deduplicate conversion events, a small local-storage entry recording your consent choice (key: wc_consent_v1), and a short-lived Cloudflare Turnstile token on pages carrying a form. These are required for the site to work securely and are not subject to the consent banner.
• Analytics. Google Analytics cookies (e.g. _ga, _ga_*) that identify a returning browser for traffic measurement. In the EEA, the UK, and Switzerland these are disabled until you accept; elsewhere they are on by default and "Reject Non-Essential" disables them. Ahrefs Web Analytics sets no cookies.
• Advertising / measurement. Meta Pixel cookies (e.g. _fbp, fr) used to match website activity to your Meta account; Google Ads conversion and remarketing cookies (e.g. _gcl_*) used to attribute enquiries and enrollments to a campaign; and LinkedIn Insight Tag cookies set in the linkedin.com and licdn.com domains (e.g. bcookie, lidc, UserMatchHistory) used to match website activity to a LinkedIn member account. All are for ad measurement and retargeting. Meta and LinkedIn cookies are not set until you accept, anywhere in the world. Google Ads cookies follow the regional rule above: disabled until you accept in the EEA, the UK, and Switzerland, and on by default elsewhere unless you choose "Reject Non-Essential".

You can clear or block any of these through your browser settings. Disabling strictly necessary cookies will prevent you from logging in or completing a purchase.

7. Data Retention

We retain contact form submissions and inquiry information for as long as necessary to respond to your request and maintain business records, typically no longer than three years unless you become a client, in which case records are retained per applicable professional and legal standards. Newsletter subscriber data is retained until you unsubscribe.

8. Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or delete your data. To exercise any of these rights, contact us at info@thewaldrepcompany.com. We will respond within 30 days.

Newsletter subscribers may unsubscribe at any time using the unsubscribe link in any newsletter email.

9. Children's Privacy

Our website and services are directed to professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. External Links

Our website may contain links to third-party websites, including LinkedIn and course partner sites. This privacy policy applies only to thewaldrepcompany.com. We are not responsible for the privacy practices of external sites.

11. Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy or how we handle your data, contact us at: