Last updated: September 25, 2026
This is the IDD Exit Report privacy policy. It explains what information we collect when you visit iddexitreport.com, why we collect it, who we share it with, and the choices you have. We’ve written it in plain English, because most of our readers are business owners weighing a very private decision, like whether to sell an IDD business, and you deserve to know exactly where your information goes.
IDD Exit Report is an independent publication about mergers, acquisitions and valuations for providers serving people with intellectual and developmental disabilities. It’s published in partnership with Olympic M&A, a healthcare M&A advisory firm. That relationship matters for your privacy, so we explain it clearly below.
Privacy at a glance
- We collect what you choose to give us (like your name and email for the newsletter) and basic, automatic data about how the site is used.
- If you send us an enquiry or ask about a valuation, we share it with Olympic M&A’s IDD team so they can respond. We tell you that before you hit send.
- We don’t sell your personal information.
- You can unsubscribe, ask what we hold, or ask us to delete it at any time. We answer within 45 days.
- Please don’t send us health information or names of the people you support. We don’t need it, and we don’t want it.
IDD Exit Report is operated by Olympic M&A, (“we,” “us” or “our”). We decide how and why your personal information is used, which makes us the controller of that information. If you have a question about this privacy policy, email info@iddexitreport.com.
When we pass an enquiry to Olympic M&A, Olympic M&A handles it under its own privacy policy as well as the commitments in this one.
We collect two kinds of information: what you give us directly, and what’s collected automatically when you use the site. We only ask for what we need to send you the newsletter, answer your questions, and understand which articles are useful.
Information you give us
Information collected automatically
When you visit, our servers and analytics tools record standard technical information: your IP address, browser and device type, the pages you view, how long you stay, and the site that referred you. Some of this is collected through cookies, which we cover below.
Information we ask you not to send
Please don’t include the names, health details or any other information about the people your organization supports. We’re a publication and an M&A resource, not a care provider, and we have no need for protected health information. If it arrives anyway, we’ll delete it.
We use your information to run the newsletter, respond to enquiries, keep the site secure, and learn which content helps owners most. We don’t use it for anything unrelated to those purposes, and we don’t use it to make automated decisions that affect you.
| What we do | Information used | Legal basis (for UK and EU visitors) |
|---|---|---|
| Send the IDD Exit Report newsletter | Name, email | Your consent, which you can withdraw anytime |
| Respond to enquiries and valuation requests | Contact and business details, your message | Steps you ask us to take before a possible agreement |
| Share enquiries with Olympic M&A so they can reply | Contact and business details, your message | Your consent, given when you submit the form |
| Understand how the site is used and improve it | Usage and device data | Our legitimate interest in running a useful site |
| Keep the site secure and prevent abuse | IP address, usage data | Our legitimate interest in security |
| Meet legal obligations | Whatever the law requires | Legal obligation |
Only when you ask us to. If you submit an enquiry, request a valuation conversation, or ask to speak with an advisor, we pass your details and message to Olympic M&A’s IDD team so they can respond. Newsletter sign-ups aren’t handed to Olympic M&A for sales outreach unless you ask to be contacted.
We’re upfront about this relationship because it’s the one most readers wonder about. IDD Exit Report publishes independent research and commentary. Olympic M&A is the advisory firm we work with, and it’s the team that answers when an owner wants to talk about a sale. Every enquiry form on the site says so next to the submit button.
We share personal information only with the service providers who help us run the site, when the law requires it, or if the site itself changes hands. Every service provider is limited to using your information to do work for us.
No. We don’t sell your personal information, we don’t rent our email list, and we don’t share anything with data brokers. We haven’t done so in the past twelve months either. The only outside party that sees an enquiry is Olympic M&A, and only when you send one.
We use a small number of cookies. Some are strictly necessary for the site to work. Others help us measure which articles people read, so we know what to write next. You can control non-essential cookies through our cookie banner or your browser settings.
| Type of cookie | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary | Keeps the site working and secure, remembers your cookie choices | No, the site needs these |
| Analytics | Counts visits and shows which pages are read, using | Yes |
| Advertising | Shows our content to past visitors on other platforms | Yes |
Most browsers let you block or delete cookies. If you block them all, some parts of the site may not work as expected.
We keep information only as long as we need it. Newsletter data stays until you unsubscribe. Enquiries are kept for up to three years after our last contact, so we have context if you get back in touch, unless the law requires longer. Analytics data is kept for up to 14 months.
After those periods, we delete the information or make it anonymous so it can no longer identify you.
We use reasonable technical and organizational safeguards: encrypted connections (HTTPS) across the site, access limited to the people who need it, and service providers with their own security programs. No website can promise perfect security, but we take it seriously, especially given how confidential a possible business sale is.
If we become aware of a breach that puts your personal information at risk, we’ll notify you and any regulators as the law requires.
You can ask to see the personal information we hold about you, correct it, delete it, or get a copy to take elsewhere. You can also opt out of targeted advertising and unsubscribe from emails at any time. We extend these rights to every reader, wherever you live, and respond within 45 days.
In detail, you can ask us to:
These rights reflect laws like the Kentucky Consumer Data Protection Act, which took effect on January 1, 2026, along with similar laws in other states and the GDPR in the UK and EU. We won’t treat you differently for using any of them.
Email info@iddexitreport.com with the subject line “Privacy request” and tell us what you’d like us to do. We may ask you to confirm your identity before acting, so we don’t hand your information to someone else. You can also use an authorized agent, who’ll need your written permission.
We’ll respond within 45 days. If we need more time, we can extend that once by another 45 days, and we’ll tell you why.
If we decline your request, we’ll explain why and tell you how to appeal. Reply to our decision with the subject line “Privacy appeal” and we’ll answer in writing within 60 days. If you’re a Kentucky resident and still aren’t satisfied, you can contact the Kentucky Attorney General’s Office of Consumer Protection. UK and EU residents can complain to their local data protection authority.
Click the unsubscribe link at the bottom of any IDD Exit Report email. It takes effect right away, and we’ll process it within 10 business days at the latest, as the CAN-SPAM Act requires. You can also email info@iddexitreport.com. Unsubscribing from the newsletter doesn’t delete any enquiry you’ve sent. Ask us if you’d like that removed too.
IDD Exit Report is written for business owners and professionals. It isn’t directed at children, and we don’t knowingly collect personal information from anyone under 18. If you believe a child has sent us information, let us know and we’ll delete it.
We’re based in the United States, and our service providers may store information in the US or other countries. If you visit from outside the US, your information may be processed in a country with different data protection laws than yours. Where the law requires it, we use appropriate safeguards for those transfers.
Our articles link to sources such as government sites, research firms and trade publications, and to Olympic M&A. Once you leave iddexitreport.com, the other site’s privacy policy applies, not ours. We’re not responsible for how those sites handle your information.
Is my enquiry to IDD Exit Report kept confidential?
Yes. Enquiries go only to our team and to Olympic M&A’s IDD team, who need them to respond. We don’t publish them, sell them or share them with buyers. If a conversation moves toward a possible sale, Olympic M&A will typically sign a formal confidentiality agreement with you before any detailed information is exchanged.
Will my staff or other providers find out I contacted you?
Not from us. We never disclose who has contacted us, and Olympic M&A approaches buyers on a no-names basis until they sign a confidentiality agreement. For extra privacy, you’re welcome to use a personal email address rather than your company account when you first get in touch.
Does IDD Exit Report sell my email address?
No. We don’t sell or rent personal information to anyone, including your email address. We use it to send the newsletter you asked for, and our email platform processes it only on our behalf. You can unsubscribe with one click from any email, and we’ll stop sending immediately.
How do I delete my information from IDD Exit Report?
Email info@iddexitreport.com with the subject line “Privacy request” and ask us to delete your information. We’ll confirm who you are, delete it from our systems and ask our service providers to do the same, then let you know it’s done, within 45 days at the latest.
We’ll update this policy when our practices or the law change. When we do, we’ll change the “last updated” date at the top, and if a change is significant, we’ll tell newsletter subscribers by email before it takes effect.
Questions about this privacy policy, or about how we handle your information, are welcome.
You can also read our Terms and Conditions, which cover how you may use the site and its content.
