Privacy & Accessibility

Who I am

This is the personal website of Julian Mancia, a strategist, educator and advisor based in New York, New York. It lives at julianmancia.com and is operated by Julian Mancia Consulting LLC, New York, New York.

For privacy law purposes, Julian Mancia Consulting LLC is the controller of the personal information described here: it decides what gets collected and why. In this policy, “I”, “me” and “my” mean Julian Mancia Consulting LLC, acting through Julian.

Contact: the contact form on this site (choose “Other” and start your message with “Privacy”), or julian@julianmancia.com.

I have not appointed a data protection officer. This is a one-person site, so privacy questions come to me directly.

What I collect, and why

There are only two ways this website collects anything about you.

Information you send me

When you fill in the contact form, you give me:

What	Why I ask for it
Your name	So I know who I’m talking to
Your email address	So I can reply
The type of inquiry	So I know what you’re asking about: advisory, speaking, Agency, teaching, press or something else
Your message	Because that is the point of the form

The form is handled by Netlify, the company that hosts this site: it stores each submission and emails it to my inbox. I read it and reply. Nothing more happens to it automatically.

One request: please don’t put sensitive details in the message box. I don’t need your health information, government ID numbers, financial account details, or anything about your race, religion, politics, union membership or sexual orientation, and I would rather not receive them. If you send them anyway, I will hold them under the same terms as everything else in this policy and delete them when I no longer need the message.

You can also just email me. If you do, I hold your email the same way I hold a form submission.

Information collected automatically

Google Analytics. I use Google Analytics 4 to understand which parts of the site people visit and how they found it. It runs only for visitors outside the European Economic Area, the UK and Switzerland, and only if you haven’t switched it off (see “Your choices and your rights”). Where it runs, it sets cookies in your browser and collects:

• The parts of the site you open, how long you stay, and the links you follow
• The site or search that sent you here
• A randomly generated identifier for your browser or device
• Your device type, browser, operating system and screen size
• An approximate location — country, region and city — derived from your IP address
• The language your browser is set to

Google acts as my service provider for this. It handles the data on my instructions and is not permitted to use it for its own purposes. I have turned off the settings that would let Google use this data for advertising personalization, and I have turned off Google Signals. There are no advertising pixels, retargeting tags, or any tracker on this site beyond Google Analytics itself.

Hosting and security logs. Like every website, this one sits on a server that keeps short-lived technical logs — IP address, time of request, page requested, browser type. They exist so the site can be delivered to you and so problems and abuse can be spotted. I don’t use them for anything else.

Your browser’s own storage. The site keeps two small notes in your browser, which never leave it: whether the opening animation has already played in this visit (so it doesn’t replay), and your analytics choice, if you make one on this page.

Fonts. Most of the site’s typefaces are served from this website itself. One, used to set Agency’s name, comes from Adobe Fonts: when the home page loads, your browser fetches it from Adobe’s servers, which see your IP address the way any web server does. Adobe sets no cookie for it and counts which fonts are served, for licensing, and nothing more.

Links to other sites. Links to Substack, LinkedIn, Fast Company, Parsons, Agency and others take you to sites with their own privacy policies. This policy stops at the link.

The legal categories, for the record

Some privacy laws ask for this in their own vocabulary. In those terms, I collect:

• Identifiers — name, email address, IP address, cookie and device identifiers
• Customer records information — name and email address, again, as that category defines it
• Internet or network activity — how you move through this website
• Approximate geolocation — country, region and city, inferred from your IP address, never precise location
• Professional information — your company and role, if you mention them in your message

I don’t knowingly collect biometric data, precise geolocation, audio or visual recordings, education records, or financial account information. I don’t use sensitive personal information to work anything out about you, I build no profiles, and I make no automated decisions about you.

The sources are equally short: you, and your browser.

Why I’m allowed to do this

If you are in the UK or the EU, the law asks for a legal basis for each thing I do. Mine are:

• Replying to your inquiry — my legitimate interest in answering people who get in touch. If your message is a first step toward working together, I also rely on your request that I take steps before entering a contract.
• Analytics — it doesn’t run for visitors in the UK, the EEA or Switzerland. If you switch it on yourself on this page, that is your consent, and you can withdraw it the same way.
• Keeping the site running and secure — my legitimate interest in operating a website that works and isn’t being abused.
• Meeting legal and tax obligations — compliance with laws that apply to me.

Giving me your information is entirely voluntary. The only consequence of not filling in the form is that I can’t write back.

Who else sees it

A short list, because it is a short list.

• Netlify, Inc., which hosts the site, keeps the technical logs described above, and receives and stores contact form submissions before emailing them to me.
• Google LLC, as my analytics provider, where analytics runs. Website usage data only, processed on my instructions.
• Adobe Inc., as a font provider. Your browser fetches one typeface from its servers; Adobe sees that request, and nothing else.
• My email provider, which hosts the inbox your message lands in. It stores it; it doesn’t use it.
• My professional advisers — lawyers, accountants — if a specific matter ever requires it.
• Law enforcement or a regulator, if I am legally required to hand something over. I would tell you unless I was legally barred from doing so.

Each of these is bound by a contract or by law to protect what it holds and to use it only for the purpose given.

What I do not do

• I don’t sell your personal information, I haven’t in the last twelve months, and I have no plans to.
• I don’t share your personal information for cross-context behavioral or targeted advertising.
• I don’t use your information for profiling that produces legal or similarly significant effects.
• I don’t run advertising pixels or retargeting tags.
• I don’t add you to a mailing list because you used the contact form. My newsletter, Productively Contrarian, lives on Substack, and you join it there only if you choose to.
• I don’t use your inquiry to train AI models.

How long I keep it

I keep information for as long as it is useful for the purpose I collected it, and then I get rid of it. In practice, that means while a conversation is live or could reasonably restart, while I have a legal or tax reason to keep it, and no longer.

What	How long I aim to keep it
Contact form submissions and emails that don’t lead anywhere	Around 24 months after I last hear from you
Correspondence about speaking, advisory or other engagements	While the engagement is live, then around 7 years — the period needed for tax, contract and legal record-keeping
Google Analytics user and event data	14 months. This one is automatic: Google deletes it on that schedule
Aggregated analytics reports — visit counts, page popularity, with no individual identifiers	Indefinitely, because they are no longer about any particular person
Server and security logs	A short period set by the hosting provider, typically days to a few weeks

A word about these numbers. They are the criteria I work to and the schedule I review against, not a guarantee about any particular email. A message occasionally sits in an archived folder past the point I meant to clear it; when I find it, I delete it. I would rather describe how I actually work than promise a precision I can’t audit.

What you can count on: if you ask me to delete something, I will, within the time limits below, unless a law requires me to keep it.

Where your information goes

I am based in the United States, and so are the services this site uses. If you contact me from outside the US, your information will be transferred here and stored here.

For visitors in the UK and EU, that transfer needs a legal safeguard. My providers rely on the EU-U.S. Data Privacy Framework and its UK Extension, or on the European Commission’s Standard Contractual Clauses where the framework doesn’t cover a transfer. If you want copies of the safeguards relied on, ask and I will send them.

Your choices and your rights

Things you can do right now, without asking me

• Turn analytics off on this site with the switch below. Your choice is remembered in this browser.
• Turn off Google Analytics everywhere with Google’s opt-out add-on at tools.google.com/dlpage/gaoptout.
• Clear or block cookies in your browser settings. Blocking them won’t break anything on this site.
• Send a Global Privacy Control or Do Not Track signal. If your browser does, Google Analytics never loads on this site, wherever you are.
• Stop emailing me. I only have what you send me.

Rights you can exercise by writing to me

Depending on where you live, privacy law gives you some or all of the following. Rather than make you work out which apply, I offer all of them to everyone who asks. You can ask me to:

• Tell you what I hold — the categories of personal information I’ve collected about you, where it came from, why, who I’ve disclosed it to, and the specific pieces themselves.
• Give you a copy in a portable, machine-readable format.
• Correct anything wrong.
• Delete it.
• Restrict what I do with it while we work out a disagreement.
• Object to my use of it where I rely on legitimate interests.
• Withdraw consent you have given, at any time. That doesn’t undo what happened before.
• Opt out of any sale, sharing, targeted advertising or profiling. I don’t do these, but the right is yours regardless.

And I will never treat you differently because you exercised any of these rights.

How to make a request

Use the contact form (choose “Other” and start your message with “Privacy”), or email julian@julianmancia.com with “Privacy” in the subject line. Tell me what you want and give me enough detail to find you — usually the email address you used when you contacted me. I may ask a question or two to confirm you are who you say you are; I use anything you send for verification only, and then delete it.

Someone acting for you. An authorized agent can make a request on your behalf. I will ask for written permission signed by you, and may ask you to confirm it directly.

How long I take. I aim to reply within 45 days, and may take up to another 45 for a complicated request, telling you why before the first 45 are up. For requests under UK or EU law, I reply within one month, extendable by two months for complex requests.

Free of charge, unless a request is clearly excessive or repetitive — in which case I will tell you the cost first, and you can withdraw.

If I say no

I will tell you why in writing. In the US, you can appeal by replying to my decision; I will respond within 45 days with my conclusion and reasoning, and if the answer is still no, point you to your state attorney general. In the UK or EU, you can complain to your data protection authority — in the UK, the Information Commissioner’s Office at ico.org.uk; in the EU, the authority where you live or work.

Children

This website is for professional audiences. It is not directed at children, and I don’t knowingly collect personal information from anyone under 16. If you believe a child has sent me something, get in touch and I will delete it.

How I protect it

Access to the inbox is limited to me, the accounts that hold your information use multi-factor authentication, and the providers this site uses encrypt data in transit and at rest. No system is perfect and I won’t claim otherwise; if a breach ever affected your information, I would notify you and the relevant regulators as the law requires.

Changes to this policy

I review this page at least once a year and update it whenever the site’s practices change — before any new tool starts collecting anything. The date at the top tells you which version you’re reading. If a change materially affects information I already hold about you, I will post a notice on this page and email you where I reasonably can.

Governing law

This policy is governed by the laws of the State of New York, without regard to its conflict of laws rules. Nothing here limits any right you have under the privacy law of the place where you live; where that law gives you more, that law wins.

Accessibility

I want everyone to be able to read this site and reach me, including people who use a keyboard instead of a mouse, a screen reader, magnification or other assistive technology.

The standard I work to

I aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at Level AA, the standard published by the World Wide Web Consortium.

What is built in

• Keyboard. Every link, button and form field can be reached with the Tab key and shows a visible outline when it has focus. Enter or Space opens a section; Escape closes it. A “Skip to content” link comes first on every page.
• Screen readers. Pages are organized with headings and landmarks, opening or closing a section is announced, and the contact form’s fields are labeled.
• Zoom. Browser zoom enlarges the text to 200% and beyond, and the page rearranges into a single column. On phones and tablets, pinch to zoom.
• Motion. If your device is set to reduce motion, the opening animation is skipped and sections open without animating.
• Light and dark. The site follows your device’s light or dark setting, with text contrast that meets the standard in both.

How I check

I test with automated checkers and by hand: with a keyboard alone, at browser zoom, with a screen reader, and with reduced motion, in current versions of Chrome and Safari. I last reviewed the site in October 2026.

Tell me about a barrier

While I aim to make this site accessible for all, it may not be fully accessible for everyone. If something gets in your way, please use the contact form (choose “Other”) or email julian@julianmancia.com with “Accessibility Suggestion” in the subject line. I will try to reply in a reasonable amount of time, and I’ll keep reviewing the site and fixing what I find.

This statement was last updated October 8, 2026.