What this website collects: very little, and all of it is listed here.

Effective November 1, 2026.

This policy covers the website at bennerhouse.com, operated by Benner House LLC, 188 East Capitol Street, Suite 1350, Jackson, MS 39201 ("Benner House," "we," "us"). It describes what we collect when you visit the site, use the readiness scorecard, or write to us through the contact form or by email.

It does not cover data we process for clients under contract. That is explained in the last section.

• No cookies, no analytics, no advertising, no tracking pixels, and no third-party scripts or fonts.
• If you use the contact form, we receive what you type into it, delivered to our inbox as an email.
• The readiness scorecard runs entirely in your browser. We never receive your answers.
• The "Get directions" link on the contact page opens Google Maps in a new page; nothing from Google loads on our site.
• We don't sell personal information or share it for advertising.
• To ask what we hold about you, or to have it deleted, write to privacy@bennerhouse.com.

The site sets no cookies and uses no other technology to recognize you between visits, such as local-storage identifiers or device fingerprinting. We run no analytics service, no advertising or retargeting tags, no social media widgets, and no session recording.

Every page, script, stylesheet, font, and image is served from our own domain. The site's content security policy instructs your browser to refuse scripts and fonts from anywhere else, so a third party can't be added to a page by accident. The one exception is the optional map described below, which loads only when you ask for it.

The form asks for your name, your work email, your organization and website (both optional), a topic, and your message. Along with those fields, your browser sends the time the form was opened and a hidden field that people leave empty; we use both only to filter out automated spam.

When you press send, the form goes to a small program running on Cloudflare Workers under our domain. It checks the fields and passes the message to Cloudflare Email Routing, which delivers it as an email to our company inbox. The program does not write your message to a database, and it is designed not to log message contents. Our email provider then stores the message in our inbox like any other email.

We use what you send to reply, to scope the work you asked about, and to keep a record of our correspondence. We don't add you to a mailing list; we don't run one. If you email us directly instead of using the form, the same purposes and retention periods apply.

Please don't send records, health information, passwords, or other people's personal data through the form. If a project needs samples, we set up a secure route after an NDA is signed.

To stop automated abuse, the form limits how many messages can be sent in a short period. To do that, it computes a one-way SHA-256 hash of your IP address and, separately, of your email address, and uses Cloudflare's rate-limiting service to count submissions against those hashes over a one-minute window. We don't store the hashes or your IP address ourselves.

A hash is not the same as anonymous data, since an IP address can sometimes be matched to its hash by trial. That is why the counters are kept only for the length of the window and used for nothing else.

Cloudflare hosts and delivers this site. Like any web host, it processes the technical details of each request, including your IP address, browser and device type, the page requested, the referring page, and the time, in order to deliver pages and protect the site against attacks. Cloudflare may keep request logs for security and operations under its own privacy policy and retention schedule.

We don't use request data to identify, profile, or follow visitors. We look at it only to diagnose a fault or investigate abuse, such as a flood of form submissions.

The readiness scorecard runs entirely in your browser. Your answers and your score are calculated on your device and are never sent to us or to anyone else, and nothing is stored after you close the page.

If you choose to share your result, the share link carries your answers in the part of the web address after the # sign. Browsers don't send that part of an address to web servers, so we don't receive your answers even when someone opens the link. The answers are visible to anyone you give the link to, and they may be saved in your browser history like any other address.

The contact page has a "Get directions in Google Maps" link. Nothing from Google loads on our site. If you follow the link, you leave bennerhouse.com for Google's own site, which receives your request under Google's privacy policy.

• Cloudflare, which hosts the site, runs the contact form, delivers form messages by email, and operates the rate limiter.
• Our email provider, which stores the messages in our inbox.
• Google, only if you follow the directions link on the contact page.

We don't sell or rent personal information, and we don't share it for cross-context behavioral advertising. We would disclose information only if required by law, to protect the rights or safety of people or of Benner House, or to a successor in a merger or acquisition that agrees to honor this policy.

You can ask us to tell you what personal information we hold about you, give you a copy, correct it, or delete it. Write to privacy@bennerhouse.com. We'll confirm receipt within five business days and complete the request within 30 days, or tell you why we need longer. To protect you, we may ask you to confirm the request from the email address the information is associated with.

Some state laws give their residents specific privacy rights. We honor the requests above from anyone, wherever they live, and we won't treat you differently for making one. If we decline a request, you can reply and ask us to reconsider; a different person will review it.

Because we don't sell or share personal information for advertising and don't track visitors across sites, there is nothing for a Global Privacy Control or Do Not Track signal to switch off: the site already behaves as if both were on.

The site is served only over HTTPS. Access to our inboxes is limited to staff who need it and protected by multi-factor authentication. No system is perfectly secure, so we keep as little as we can, for as short a time as we can.

This site is for businesses and professionals and is not directed to children. We don't knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, write to privacy@bennerhouse.com and we will delete it.

Benner House operates from the United States, and messages you send us are stored in the United States. Cloudflare may process your request at a data center near you before it reaches us.

When we process records, datasets, recordings, or other data on behalf of a client, we act as the client's service provider, processor, or business associate. That data is governed by our agreement with the client, including any data processing agreement or business associate agreement, and not by this policy.

If your information appears in data a client has shared with us, please contact that organization; it decides how the data is used. We will help the client respond to your request.

If you join our expert network, we give you a separate notice covering employment records, background checks, and payroll.

If we change how the site handles personal information, we'll update this page and its effective date before the change takes effect. If a change is material, such as adding an analytics tool, we'll say so at the top of this page for at least 30 days.

Privacy questions and requests: privacy@bennerhouse.com

By mail: Benner House LLC, 188 East Capitol Street, Suite 1350, Jackson, MS 39201

By phone: (601) 954-9979, Monday to Friday, 8:00 a.m. to 5:30 p.m. Central Time