This notice explains how Global Digital Forensics (GDF) handles personal information connected with this website and initial inquiries. It does not replace a signed engagement agreement or a matter-specific privacy notice.
Who controls the information
Global Digital Forensics is the controller or business responsible for the website information described here. Privacy questions and rights requests may be submitted through the privacy request form, sent to privacy@evestigate.com, made by calling 1-800-868-8189, or sent through an authorized agent where applicable.
Notice at collection
The site has no user accounts, comments or purchases. Its contact and privacy-rights forms collect only the fields shown in each form. At or before collection, GDF provides the following summary of the categories, purposes and retention criteria relevant to this website:
Scroll horizontally to view all table columns.
| Category | Examples and source | Purpose and legal basis | Retention |
|---|---|---|---|
| Internet or electronic activity | IP address, browser and device information, requested URL, date and time, and security events, received automatically by hosting and network systems. | Deliver the site, prevent abuse, maintain reliability and analyze security events. GDF relies on legitimate interests and, where applicable, legal obligations. | Kept by hosting and security providers only for their documented operational, security and legal periods; event records may be retained longer when needed to analyze or establish a claim. |
| Consent-based site analytics | Page path, referring site, country, device type, browser, operating system, navigation type and page-performance measurements sent by the visitor's browser only after Analytics is allowed. | Measure aggregate site use, diagnose page performance and improve the website. Where consent is required, the legal basis is consent, which may be withdrawn at any time. | Cloudflare documents seven days of unsampled beacon data before aggregation and makes Web Analytics reporting available for the previous six months. |
| Contact-form information | Name, email address, optional telephone number and organization, selected topic, and a brief summary supplied by you. | Route and respond to an inquiry, perform intake and conflict checks, and take requested steps before a possible engagement. Bases may include requested pre-contract steps, legitimate interests and legal obligations. | Sent to the designated lead mailbox and kept under GDF's approved business email retention schedule. Information moved into a client or business record follows the retention period for that record. A legal hold or other duty may require longer retention. |
| Privacy-request information | Name, email address, request type, optional region and relationship, and any short locating details supplied by you. | Receive, verify, evaluate and respond to a privacy-rights request, keep an accountability record, protect against fraudulent requests and comply with law. Bases may include legal obligations and legitimate interests. | Sent to the designated privacy mailbox and kept while the request is verified, evaluated and answered, then under GDF's approved legal email retention schedule. A legal hold or other duty may require longer retention. |
| Form-security validation | Cloudflare Turnstile response token and associated browser and security signals generated when a visitor uses a contact or privacy-rights form. | Help prevent automated, abusive and fraudulent form submissions. GDF relies on legitimate interests in system security and fraud prevention. | The form endpoint verifies the token for a single security check. Cloudflare retains related service data under its documented operational, security and legal retention criteria. |
| Privacy preferences | A device-local record of optional technology choices, consent date, policy version and Global Privacy Control status. | Honor, document and remember privacy choices. This storage is strictly necessary for the privacy service requested by the visitor. | No more than 180 days before the site asks again, unless the visitor clears it sooner or a material change requires a new choice. |
The forms do not accept attachments. Do not enter evidence, passwords, privileged material, government identifiers or sensitive personal information. GDF can arrange an appropriate transfer method after initial contact when needed.
Cookies and similar storage
The site uses one strictly necessary local-storage record to remember privacy choices. Contact and privacy-rights forms use Cloudflare Turnstile as a strictly necessary security check. It processes a form-security response token and may process browser and security information to help distinguish automated submissions. It is not used for optional analytics, advertising or cross-context tracking, and it does not depend on Analytics consent. Cloudflare Web Analytics is available as an optional, consent-based measurement tool and does not load until Analytics is allowed. It does not use cookies, local storage or browser fingerprinting to collect usage metrics. Advertising and cross-context tracking are not installed. Details are in the Cookie Notice. Choices can be changed at any time with the control.
Recipients, disclosures and transfers
Website and form information is processed through Cloudflare hosting, network security, Turnstile form-security validation, consent-based Web Analytics and email delivery services acting for GDF. The forms do not write submissions to a website database. Contact requests are emailed to the designated lead mailbox, and privacy requests are emailed to the designated privacy mailbox. Inquiry information may later be handled by telecommunications and professional service providers when needed to respond. It may also be disclosed when required by law or reasonably necessary to protect rights, safety or system security. GDF does not sell website personal information and does not share it for cross-context behavioral advertising.
GDF is based in the United States, and Cloudflare may process information in the United States and other locations where it operates. Transfer requirements and safeguards depend on the location and applicable law.
European and UK privacy rights
Where the GDPR or UK GDPR applies, you may have rights to be informed, access information, correct inaccurate information, erase information, restrict processing, receive portable information, object to processing based on legitimate interests, and withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal. You may also complain to the data-protection authority where you live, work or believe an infringement occurred.
GDF does not use the website forms to make decisions based solely on automated processing that produce legal or similarly significant effects. Requests may require reasonable identity verification, and lawful exceptions may apply.
California privacy rights
Where the California Consumer Privacy Act applies, California residents may request to know or access personal information, delete it, correct inaccurate information, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service without retaliation for exercising a right. An authorized agent may submit a request as permitted by law.
During the preceding 12 months, the website categories described in the notice-at-collection table may have been collected. Internet or electronic activity and consent-based analytics may have been disclosed for operational business purposes to Cloudflare; identifiers, contact details and professional information may have been disclosed for operational business purposes to communications and professional service providers. Privacy preferences remain on the visitor's device. GDF has not sold or shared any of these website categories for cross-context behavioral advertising.
For this website, GDF does not sell or share personal information, does not use or disclose sensitive personal information for purposes that trigger the right to limit, and offers no financial incentive for personal information. A Global Privacy Control signal is nevertheless recognized for the browser or device, and advertising or cross-context sharing remains off. Use , submit the privacy request form, email privacy@evestigate.com, or call 1-800-868-8189.
How a rights request is handled
The form returns a reference number only after Cloudflare accepts the message for delivery to GDF's designated privacy mailbox. The reference does not confirm inbox delivery, review, identity, eligibility or completion. An authorized reviewer must follow GDF's approved privacy-request procedure, examine records in the systems relevant to the request, record the decision in the authorized system of record and remove personal information where required and permitted. The reference number does not contain the requester's name or email address.
Children and security
This website is directed to professional audiences and not to children under 16. GDF uses administrative, technical and organizational measures appropriate to the information and the service, but no transmission or storage system can be guaranteed completely secure.
Questions and updates
GDF may update this notice when its practices or applicable requirements change. A material change affecting consent will invalidate the saved preference and require a new choice.
Last updated: September 5, 2026.