Privacy Policy

ClearPath GRC ("ClearPath," "we," "us") respects your privacy. This policy explains what information we collect through our website at clearpathgrc.app and how we use it.

When you submit our contact form, we collect the following information:

• Full name
• Work email address
• Company name
• Phone number (optional)
• Framework interest
• Message content (optional)

We use the information you provide solely to respond to your inquiry and to communicate with you about our compliance services. We do not use your information for automated decision-making or profiling.

Our contact form is processed by Formspree, a third-party form handling service. When you submit the form, your data is transmitted securely to Formspree, which delivers it to us via email. You can review Formspree's privacy practices at formspree.io/legal/privacy-policy.

We use minimal cookies necessary to operate this website. These include session cookies required for form submission and basic analytics. We do not use advertising cookies or cross-site tracking cookies.

You can control cookie settings through your browser preferences. Disabling cookies may affect certain website functionality. We do not use cookie consent banners because we only use essential cookies that do not require consent under applicable law.

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your information is only shared with Formspree as described above for the purpose of delivering your form submission to us.

We retain your contact information only as long as necessary to respond to your inquiry and maintain our business relationship. We retain contact form submissions for a maximum of 12 months, after which they are deleted from our form processor. You may request deletion of your data at any time by contacting us.

You have the right to:

• Request access to the personal data we hold about you
• Request correction or deletion of your data
• Withdraw consent for future communications

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know — You have the right to request disclosure of the personal information we collect, use, and share about you.
• Right to Delete — You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out — We do not sell personal information. You therefore have no need to opt out of the sale of personal information.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, submit a request through our contact form and indicate the nature of your request in the message. We will respond to verified requests within 45 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) or applicable local law:

• Right of Access — You may request a copy of the personal data we hold about you.
• Right to Rectification — You may request correction of inaccurate personal data.
• Right to Erasure — You may request deletion of your personal data where we have no legitimate basis for retaining it.
• Right to Restriction — You may request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability — You may request a copy of your personal data in a structured, machine-readable format.
• Right to Object — You may object to processing of your personal data where we rely on legitimate interests as our legal basis.

Our legal basis for processing personal data submitted through our contact form is your consent, given when you submit the form. You may withdraw consent at any time by submitting a request through our contact form.

To exercise any of these rights, submit a request through our contact form and indicate the nature of your request. We will respond within 30 days. If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.

For any privacy-related questions, requests, or complaints, please use our contact form. All privacy requests are received and reviewed by our Privacy Officer.