Privacy Policy
Last updated: February 22, 2026
This policy explains how I handle personal data you share with me through this website’s contact form.
1. Who I Am
I am Stephen E. Mortellaro. This is my personal website, which I use to share my academic work and invite professional discussions.
2. What Data I Collect
If you use the contact form on this website’s Contact Me page, I will receive:
- Your name
- Your email address
- Your message
- Your IP address (automatically recorded by the website host and contact form plugin for security purposes)
Contacting me does not form an attorney-client relationship between you and me, and you should not use this website’s contact form to send me any privileged or confidential information. For more information, view this website’s Disclaimers.
3. Why I Collect It (Lawful Basis)
I process personal data collected through this website’s contact form as a legitimate interest (GDPR Article 6(1)(f)) so that I can respond to your inquiry and discuss related matters. I do not use your personal data for marketing or share it with advertisers.
4. How I Store and Secure Your Data
The personal data you send me using this website’s contact form is securely stored on the website’s hosting server, in my email account, or both.
- My website uses HTTPS encryption
- My email provider uses TLS encryption in transit
- Access to messages is limited to me, except as otherwise specified below in Section 6
5. How Long I Keep Your Data
EU, EEA, and UK residents: I keep personal data that you submit to me through this website’s contact form for up to 24 months after our last correspondence unless you are a student at any university that employs me, in which case I may keep the correspondence until 12 months after you end your enrollment in the university, if that time is later than 24 months after our last correspondence. I may also keep the personal data submitted to me through this website’s contact form for longer periods (1) with your consent, (2) as required by law or the policy of an employer I work for, or (3) in response to, or in reasonable anticipation of, litigation, an audit, or government action that necessitates that records be maintained for a longer period. Note that I may indefinitely maintain information you submit to me that is anonymous, has been anonymized, or otherwise cannot be used to directly or indirectly identify you.
6. Who I Share Your Data With
I do not sell or trade your personal data. I may share your personal data with trusted service providers who support the operation of this website and my email, such as hosting and email providers, under strict confidentiality agreements.
Sharing Academic-Related Information
Students enrolled in any university that employs me should not contact me through this website’s contact form; rather, students should contact me by sending an email from their university email address to my university email address. If you are a student and contact me with information related to your academic performance, student status, or other education-related matters at any university in the United States that employs me, please be aware that pursuant to the Family Educational Rights and Privacy Act (FERPA), I may share with this information, including associated personal data, with appropriate university officials who have a legitimate educational interest.
Sharing Information Related to University Programs
If you contact me with information or inquiries related to university programs at any university that employs me, I may share that information or inquiry with appropriate faculty members, staff, contractors, students, or affiliates responsible for or involved in those programs. This sharing helps ensure your message is directed to the right individuals who can assist you effectively.
Anonymous Sharing
I may share information you send me that is anonymous, has been anonymized, or otherwise cannot be used to directly or indirectly identify you.
Other Sharing
I may your share personal data as required by law, such as in response to a court order. I may share your personal data with appropriate authorities and individuals if it is threatening or related to a violation of law. I may share your personal data with your consent.
7. Use of Third-Party Services
Cloudflare
This website uses Cloudflare, a content delivery network (CDN) and security provider, to enhance website performance, provide web analytics, and protect against security threats. Cloudflare processes certain technical information, such as IP addresses and browser details, as part of its service. Cloudflare acts as a data processor on my behalf and is bound by strict confidentiality and data protection obligations. For more information about Cloudflare’s privacy practices, please visit https://www.cloudflare.com/privacypolicy/.
8. Your Rights
You have the right to:
- Request a copy of the personal data I hold about you
- Ask me to correct inaccuracies
- Ask me to delete your personal data (which I will respect unless I have a lawful reason to keep it)
- Object to my processing of your data
To exercise any of these rights, please contact me using the contact form here.