The fine print
Website Privacy Notice
This notice describes how this website handles information collected from visitors to and prospects on ifdonerightprinciples.com, the promotional site for the book If Done Right.
1. Scope
This Website Privacy Notice describes how Chaos Holdings, LLC ("we," "us," "our") handles information collected from visitors to and prospects on this website at ifdonerightprinciples.com, the promotional site for the book If Done Right: The AI Governance Framework for Regulated Financial Firms by Brandon Veldman and Stefan Whitwell.
This is a website for a book. It is not an advisory, insurance, or client-servicing website, and it does not establish any client relationship. It governs general website usage only.
2. Information we collect from visitors
- Information you submit. If you use the launch-notification form, we collect what you enter: your email address, and optionally your name and the role you select. You provide this to be notified when the book is available.
- Analytics and usage data. We use Google Analytics (GA4) to understand how the site is used: pages viewed, referring pages, general interaction and event data, and approximate location, associated with an analytics identifier.
- Device and browser data. Standard technical data such as browser type, operating system, device type, and IP address, as processed by our analytics and hosting providers.
- Cookies and similar technologies. See the table in Section 4.
- Hosting and security data. The site is delivered through a third-party cloud hosting and content-delivery provider, which processes standard request information, such as IP address and browser user agent, to deliver and help secure the site.
3. How we use this information
- To operate, deliver, and secure the website.
- To send the launch notification you request, and to respond to inquiries you submit.
- To measure and understand how the site is used, so we can improve its content and performance.
- To maintain the security and integrity of the site.
4. Cookies and similar technologies
The cookies below may be set on the site. The functional cookie is set on our own domain. The analytics cookies are set for Google Analytics. Durations are set by the provider and are approximate; a session cookie expires when you close your browser.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
site-auth | This website (first-party) | A functional cookie that keeps you signed in during any password-protected access to the site. It is set only after you enter the access password, and is not set during ordinary public browsing. | 30 days | First-party |
_ga | Google (Google Analytics) | Distinguishes individual visitors (a Google Analytics client identifier). | 2 years | First-party |
_ga_C7C636182H | Google (Google Analytics) | Maintains Google Analytics property and session state for the If Done Right property. | 2 years | First-party |
The site does not currently use a cookie banner or on-site cookie preference center. The controls available to you are described in Section 7.
5. Service providers and other third parties
We use the following service providers to operate the site and respond to inquiries. Information may be processed by these providers in connection with the services they provide:
- Cloud hosting and content delivery. A third-party provider that hosts and delivers the website.
- Google (Google Analytics). Website analytics and measurement.
- Zapier. Routes what you submit through the launch-notification form to our email and automation tools.
- ActiveCampaign. General automation and email, including sending you the launch notification.
- Google (Gmail and Google Workspace). Email delivery and handling.
Email created in ActiveCampaign is delivered through Google’s mail servers, so Google appears above in more than one role. We do not sell personal information.
6. Retention
We keep the information described in this notice only as long as necessary for the purposes described, and then delete or de-identify it. Google Analytics data is subject to the data-retention period configured in our analytics settings. Information held by our service providers is also subject to those providers’ own retention practices.
7. Your choices and rights
- Cookie controls. You can manage or block cookies through your web browser settings. Because the site does not currently offer a cookie banner or preference center, browser settings and the tools below are the controls available today.
- Google Analytics opt-out. You can opt out of Google Analytics across websites by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
- Browser privacy signals. We honor browser-based privacy controls, such as Global Privacy Control, where required by applicable law.
- State privacy rights. Depending on where you live, you may have rights to access, correct, or delete your information, or to opt out of certain processing. To exercise any such right, contact us using the details below, and we will respond as applicable law requires.
- Contacting us. You can contact us about this notice or your information using the details in Section 8.
8. Contact and effective date
Chaos Holdings, LLC
15511 Hwy 71 West, Ste 110-526, Bee Cave, TX 78738-6862
stefan@chaos.holdings
Effective date: July 16, 2026.
This notice is provided for transparency about this website. It does not create any rights or obligations beyond those required by applicable law.