Your information. Clearly handled.

D2 Emergency Management Consulting, LLC ("D2EMC," "we," "us" or "our") provides emergency-management assessment, training, exercise and advisory services. This policy explains how D2EMC handles personal information through d2emc.com, its public contact forms and related website communications.

This policy does not replace a client contract, statement of work, business associate agreement or separate notice that applies to a specific D2EMC service, portal, assessment or engagement. When another agreement or notice applies, it governs that activity.

We collect information in three main ways:

• Information you provide. This may include your name, business email, telephone number, job title, organization, service interest, scheduling preferences and the content of a message or inquiry.
• Information collected automatically. Squarespace and connected website services may process your IP address, browser, network, device, referring page, pages visited, clicks, scrolling, searches and timestamps.
• Information from services you choose to use. If you follow a scheduling, social-media, partner or other third-party link, that provider may send us limited information needed to complete your request or may handle information under its own privacy notice.

Squarespace processes and stores public form submissions through Squarespace Forms / Contacts and delivers them to D2EMC through its configured business email. If D2EMC adds another storage, customer-relationship, newsletter or automation destination, this policy will be updated as appropriate before that information is used for a new purpose.

You are not required to provide personal information simply to read the public pages of this site, although certain technical data is processed so the website can function.

D2EMC may use information collected through the website to:

• respond to questions, requests and service inquiries;
• schedule conversations and prepare for a potential engagement;
• provide requested information, communications or services;
• operate, troubleshoot, secure and improve the website;
• understand site traffic and whether content is useful;
• maintain appropriate business and professional records;
• protect D2EMC, website visitors and others from misuse, fraud or security threats; and
• comply with law, enforce agreements and respond to lawful requests.

If D2EMC later uses website information for a materially different purpose, this notice will be updated and additional permission will be requested when required.

This website is hosted by Squarespace. Squarespace uses necessary cookies and similar technologies to securely serve the site and make core features work. Squarespace Analytics and Activity Log may also use analytics or performance technologies to help D2EMC understand traffic, visits and site performance. The site also uses Google Analytics 4 and Meta Pixel. These tools can use cookies or similar identifiers and receive browser, network, device, IP-address, referring-page, page-view and interaction information.

Google Analytics helps D2EMC measure site traffic, audience patterns and content performance. Meta Pixel helps measure page visits and advertising performance and may support audience measurement or advertising features. Google and Meta process information under their own privacy terms, available through the Google Privacy Policy and Meta Privacy Policy.

This site displays a cookie banner with Accept, Decline and Manage controls. Non-essential cookies are restricted until the visitor makes the choice required in their location. You can also limit cookies through browser settings, although blocking necessary cookies may affect site features.

Because there is no uniform standard for browser “Do Not Track” signals, this site does not currently respond to them. To submit an applicable opt-out request about analytics, advertising, sale, sharing or targeted advertising, use the privacy-request method in Section 07. Third-party services may collect information over time or across websites under their own notices and controls.

D2EMC may disclose information only as reasonably needed for the purposes described in this policy, including:

• Service providers. Hosting, website, scheduling, email, analytics, security and other vendors that perform services for D2EMC.
• Measurement and advertising providers. Google receives website activity through Google Analytics, and Meta receives website activity through Meta Pixel, for the measurement and advertising purposes described in Section 04.
• Professional advisers. Attorneys, accountants, insurers or consultants when access is reasonably necessary and subject to appropriate duties.
• Legal and safety reasons. Courts, regulators, law enforcement or other parties when required by law or reasonably necessary to protect rights, safety, security or the integrity of the website.
• Business changes. A successor or transaction participant in connection with a merger, financing, reorganization, sale or transfer, subject to appropriate safeguards.
• At your direction. A person or organization you ask us to involve.

D2EMC does not exchange public contact-form information for money. Some privacy laws define “sale,” “sharing” or “targeted advertising” more broadly and may apply those terms to certain analytics or advertising disclosures. Where an applicable law gives you an opt-out right, submit a request using the method in Section 07.

D2EMC keeps personal information only as long as reasonably necessary for the purpose for which it was collected and for legitimate business, contractual, security, professional-recordkeeping, dispute-resolution and legal needs. Retention periods vary with the type of information and the context in which it was provided.

D2EMC uses administrative, technical and physical safeguards designed to protect information in light of its nature and the way it is handled. No website, email system, transmission method or storage system can be guaranteed completely secure. Please use the contact information below if you believe information sent to D2EMC may have been compromised.

You can choose not to submit a public contact form, adjust the site's cookie controls, use browser privacy settings, submit an applicable opt-out request and unsubscribe from promotional email through the link in the message. Administrative, security and requested service communications may still be necessary.

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of or deletion of certain personal information, or to receive information about how it is used and disclosed. D2EMC may need to verify your identity and authority before completing a request and may retain information when legally permitted or required.

To ask a privacy question or submit a request, email david@d2emc.com with the subject line “D2EMC Privacy Request.”

D2EMC does not request or intentionally collect patient information, protected health information (PHI), medical records, Social Security numbers, government-identification numbers, financial-account credentials or similar highly sensitive information through the public website. Do not place that information in a website form, scheduling field or ordinary email.

D2EMC's work with hospitals and health systems does not, by itself, make this public website a HIPAA-authorized submission channel. If a client engagement requires regulated or sensitive information, it must use the process, agreement and approved system established for that engagement.

If sensitive information is submitted despite this notice, D2EMC may restrict access, securely delete it or direct the sender to an approved channel, subject to applicable legal and contractual duties.

Children. This business website is directed to professionals and is not intended for children under 13. D2EMC does not knowingly collect personal information from children through the site. If you believe a child has submitted information, contact D2EMC so the situation can be reviewed.

Third-party links and services. The website may link to scheduling providers, social platforms, partners and other sites D2EMC does not control. Their privacy terms apply when you use their services. A link does not make D2EMC responsible for that provider's practices.

Processing locations. D2EMC is based in Massachusetts, United States. Information may be processed in the United States and in other locations where website service providers operate, subject to the safeguards and legal requirements applicable to those providers and activities.

D2EMC may update this policy to reflect changes in the website, services, providers or legal requirements. The revised policy will be posted on this page with a new “Last updated” date. Material changes will be communicated in another reasonable way when required.

Questions or requests may be sent to: