Last Updated: September 2026

Steven M. Pepa (“Steven Pepa”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information provided through or collected in connection with StevenPepa.com (the “Website”).

This Privacy Policy explains how personal information may be collected, used and protected when you visit or interact with the Website.

1. Data Controller

The entity or individual responsible for the processing of personal information collected through the Website is: Steven M. Pepa

Where the Website or any particular service is operated by another entity, the applicable entity may act as the data controller or processor, as appropriate.

2. Information We May Collect

Depending on how you interact with the Website, we may collect information such as:

  • your name;
  • email address and other contact information you voluntarily provide;
  • the content of communications you send to us;
  • technical information relating to your visit, such as IP address, browser type, device information and operating system;
  • information concerning how you use and navigate the Website; and
  • information collected through cookies or similar technologies, where applicable.

We do not seek to collect sensitive personal information through the Website unless this is specifically necessary and appropriate for a particular purpose.

3. How We Use Personal Information

Personal information may be used to:

  • respond to enquiries and communications;
  • operate, maintain and improve the Website;
  • understand how visitors use the Website;
  • maintain Website security and prevent misuse;
  • comply with applicable legal and regulatory obligations; and
  • protect our legitimate business and legal interests.

We will not use personal information for purposes that are incompatible with the purposes for which it was collected.

Where applicable, personal information will be processed on the basis of one or more lawful grounds under applicable data protection legislation, including:

  • your consent;
  • the performance of a contract or steps taken at your request;
  • compliance with a legal obligation; or
  • our legitimate interests, where those interests are not overridden by your rights and freedoms.

Where processing is based on consent, you may withdraw that consent at any time.

5. Cookies and Similar Technologies

The Website may use cookies and similar technologies to enable functionality, improve performance, understand Website usage and, where applicable, support analytics.

Where required by applicable law, non-essential cookies will only be used with your consent.

You may also be able to control or disable cookies through your browser settings.

6. Third-Party Services

The Website may use third-party service providers for functions such as website hosting, security, analytics, communications or other technical services.

Where third parties process personal information on our behalf, appropriate contractual and organisational measures will be used as required by applicable law.

The Website may also contain links to external websites. We are not responsible for the privacy practices or content of those websites.

7. International Transfers

Where personal information is transferred outside the European Economic Area, appropriate safeguards will be implemented where required by applicable data protection legislation.

8. Retention

Personal information will generally be retained only for as long as reasonably necessary for the purposes for which it was collected, or for as long as required by applicable legal, regulatory or accounting obligations.

9. Your Rights

Subject to applicable law, you may have rights including:

  • access to your personal information;
  • correction of inaccurate or incomplete information;
  • deletion of personal information;
  • restriction of processing;
  • objection to certain processing;
  • portability of certain information; and
  • withdrawal of consent where processing is based on consent.

You may exercise applicable rights by contacting us using the details above.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

10. Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

11. Children

The Website is intended for a general professional and adult audience and is not directed specifically at children.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Website, applicable law or our data-processing practices.

The updated version will be published on this page with the revised “Last Updated” date.

13. Contact

Questions concerning this Privacy Policy or the processing of personal information may be directed to: Steven M. Pepa