CTHY Advisory · CTHY Inc.

Website privacy.

Updated November 6, 2026

This notice covers visits to the CTHY Advisory website and enquiries sent to CTHY Inc. Project-specific data handling is agreed separately as part of the relevant engagement.

Visiting this website

This website does not use advertising trackers or user accounts. Its images and fonts are served with the website. Our hosting provider, Namecheap, may process technical information such as IP addresses, requested pages, request times and browser information to deliver the website, maintain logs and protect the service.

Website analytics

We use Cloudflare Web Analytics to understand aggregate visits, page views, referring websites, visitor countries, device types and page-loading performance. It does not use analytics cookies or track individual visitors across websites. Technical information is sent to Cloudflare to produce these reports. We do not send contact-form names, email addresses or message contents to the analytics service. See Cloudflare’s privacy policy for more information.

Sending an enquiry

Our contact form collects your name, reply email address, optional company, enquiry topic and message. We use these details to respond to your enquiry and discuss the work you have contacted us about. Messages pass through our hosting provider’s mail service to our Microsoft 365 mailbox. The form does not keep a separate database of enquiry messages.

Please share only what is needed for an initial conversation. Leave out passwords, sensitive documents and confidential project material. We can agree an appropriate way to exchange those later.

Spam protection and cookies

The contact page uses Cloudflare Turnstile to help distinguish people from automated submissions. Cloudflare processes technical information about your device, browser and network for this security check. See Cloudflare’s privacy policy for details.

The form sets a secure session cookie to validate submissions and show a confirmation. It is a session cookie, although browsers that restore sessions may retain it. We also maintain temporary submission counters using a keyed hash of the submitting IP address. These counters do not contain names, email addresses or message content; they expire after their rate-limit window, up to one hour, and expired entries are removed when further submissions are processed. Hosting security logs are separate from these counters.

Service providers and retention

Hosting, security and email providers process information as part of delivering their services, which can involve systems outside Canada. We retain enquiry correspondence as needed to respond, maintain relevant business records and meet applicable obligations. Information handling for a client project depends on the agreed tools, providers and scope.

Questions and requests

For questions about information you have shared, or to request access, correction or deletion, use our contact form and select the privacy topic. We will review your request in the context of the information held and any applicable obligations.