Weller Advisors Back to the brief

Privacy

We sell verification discipline. It would be strange to describe our own data practices vaguely, so this page says exactly what we hold, where it came from, and how to make us stop.

Effective August 19, 2026 · Weller Advisors

The short version

This website collects nothing. No cookies, no analytics, no tracking scripts, no forms. Every link on it opens your own mail program.

Separately from the website, we build a list of business contacts at companies we want to write for, using public sources, and we send them work email. If you are on that list and would rather not be, reply to any message from us with the word stop and you will be removed for good, along with everyone else at your company.

01What this website collects

Nothing. There is no analytics package, no advertising pixel, no cookie of any kind, no embedded video, no comment system, and no form to fill in. The page you are reading is a static file. The only outbound request it makes is to Google Fonts, which loads the typefaces and, in doing so, sees the IP address your browser presents. We do not receive that information and cannot connect it to you.

Our hosting and DNS provider keeps standard server logs, as every host does, containing IP addresses and request times. We use them for nothing. We do not review them and we do not connect them to anyone.

02Where we get business contact information

This is the part worth reading closely, because it is the part that most likely brought you here.

Weller Advisors writes research briefs for individual companies. To offer that work to a company, we need to know who at that company owns the decisions the research bears on. We assemble that from public sources only:

What we hold is limited to work identity: name, job title, employer, work email address, and our own notes on which business decisions the person appears to own. We do not collect or want home addresses, personal email accounts, phone numbers, dates of birth, government identifiers, financial account details, health information, or anything about anyone's private life. We do not buy contact lists, we do not scrape social platforms for personal detail, and we do not enrich our records through third-party data brokers.

We hold this information because we have a legitimate business interest in offering a professional service to the companies it is built for, and because a research brief written for one company is worth nothing to the wrong person. Deciding who should receive it is the work.

03What our email does not do

Plainly

Our email carries no tracking of any kind. We cannot tell whether you opened it. We have decided not to find out.

Commercial email usually carries an invisible image that reports back when the message is opened, and rewrites every link so clicks are logged against your name. Ours carries neither. There is no open pixel, no click redirect, no read receipt, and no web beacon. A message from us contains text, and one citation to a published paper.

What we record is what we did: which company we wrote to, in which month, which paper the item cited, and the exact bytes of the message that went out. If someone replies, we record that a reply came and on what date. That is the whole record.

04Information clients share with us

Once a company engages us, it may share material that is not public: internal figures, plans, questions in view, and the decisions a brief should address. We treat all of it as confidential. We do not publish it, sell it, share it with other clients, or use it as an example in our own marketing without written permission. Where we show sample work publicly, the company is described generically and never named.

Confidentiality obligations, and how long they last, are set by the signed engagement agreement rather than by this page. Where the two differ, the agreement governs.

05Who else touches it

We keep the number of third parties deliberately small. As of the effective date above, business contact records and client material are handled by:

Each acts on our instructions and none is permitted to use the information for its own purposes. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not disclose it to anyone else except where the law requires it. If that last case ever arises and we are permitted to say so, we will tell the person affected.

One more case, stated because it is the one people forget to disclose: if Weller Advisors is ever sold, merged, or transfers substantially all of its business, the information described on this page would transfer with it, and the buyer would be bound by this policy until it gives you notice of a different one. Nothing else moves. We do not sell information as a product, and a business sale is the only circumstance in which it would change hands.

06How long we keep it

Business contact records are kept while a company remains a plausible fit for the work, and are reviewed at least once a year. Records of what we sent, and to which company, are kept for six years, because the law that governs commercial email requires us to be able to show what we sent and how we handled removal requests.

Removal requests are kept permanently and on purpose. A record that you asked us to stop is the only thing that reliably prevents a later, well-meaning session from writing to you again. It contains your address and the date you asked, and nothing else.

Client material is kept for the term of the engagement and for 90 days afterward, then deleted, unless the client asks for it sooner. A client may ask for deletion at any time, including during the engagement.

07How we protect it

We keep the attack surface small, which for a firm this size is worth more than a list of certifications we do not hold. What we hold is limited to work identity and client documents; there is no customer database, no payment data, no login system on this website, and nothing for an attacker to take that would be worth taking.

What we do: accounts holding client material require multi-factor authentication; the research repository is private rather than public; devices are encrypted at rest; credentials are never committed to that repository, and an automated check refuses any commit that looks like it contains one. Access is limited to people who need it, which today is one person.

What we will not claim: no system is secure against every attack, and we would rather say that plainly than imply a guarantee. If we ever learn that information about you has been exposed, we will tell you promptly and directly, and we will tell you what we know rather than waiting until the picture is complete.

08Your choices

Stop hearing from us

Reply to any message from us with stop, or write to [email protected]. No explanation is needed and none will be asked for. We act within 10 business days, which is the legal maximum, and in practice the same day we read it.

Removal covers your whole company, not only your address. If you tell us to stop, we do not write to a colleague of yours next month instead. That is a deliberate choice and it is stricter than the law requires.

See it, correct it, or have it deleted

Write to [email protected] and we will tell you everything we hold about you, where it came from, and who has handled it. You can have it corrected or erased. There is no charge and we will not ask you to create an account to make the request. We answer within 30 days.

We will never treat you differently for making one of these requests, which is easy for us to promise because we have nothing to withhold.

09Where this applies

Weller Advisors is based in the United States and works with U.S. companies. If you are in the United Kingdom, the European Economic Area, or another region whose law gives you additional rights over your information, those rights apply to you and the addresses above are how to use them, including the right to complain to your local supervisory authority. Tell us you are covered and we will handle your request under that standard.

10Children

This is a business-to-business service. Nothing here is directed at children and we do not knowingly hold information about anyone under 18.

11Changes, and how to reach a person

If this page changes, the effective date at the top changes with it, and we keep the previous version available on request. We will not quietly broaden what we collect and date it retroactively.

A person reads [email protected].