Privacy
A short, plain statement of what we collect, what we do not, and where the data lives. The technical position matters more than the legal language.
What this site collects
Nothing, in the analytics sense. We do not run third-party analytics. We do not embed tracking pixels. We do not load fonts, scripts, or stylesheets from external CDNs at runtime. The page you are reading does not call any host other than this one.
Standard server-side request logs are retained on the host serving the site for operational purposes (debugging, abuse handling). Logs include source IP, user-agent, requested path, and response code, and are rotated out within thirty days unless held longer for an active investigation.
What our contact form collects
The contact form does not transmit anything to us until you click "compose email" — at which point the form opens your local mail client with a pre-populated message. We do not host a form-collection backend; nothing is stored on this server unless you finish composing the email and send it.
Email you send to security@internationalmoneyflow.com is received into a hosted mailbox. Subject and body content are processed for the purposes of responding to your inquiry.
What our advisory feed collects
Subscribing to /feed.xml is anonymous. We do not place tracking parameters on outbound links in the feed, and we do not log who subscribes.
Cookies
This site sets no cookies. The browser may cache assets per the
HTTP Cache-Control headers we send, but no
identifying information is stored.
Data we hold on retainer or engagement clients
Engagement scope, contracts, and any artefacts you provide are held under the data-handling terms of the relevant statement of work. Standard practice: encrypted at rest, encrypted in transit, access limited to the named engineers on the engagement, retained for the period required by the regulator the client answers to, deleted at the client's written request after that period.
Sharing
We do not sell, rent, or disclose engagement data. We will respond to a properly served legal process by notifying the affected client (where lawful) and complying with the order to the minimum extent necessary.
Contact
For questions about this statement, or to request the deletion of any data we hold about you, email security@internationalmoneyflow.com. We respond within fifteen working days.
Last reviewed
2026-04-29.