1. Introduction

We respect your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you engage with our services or visit our website.

2. Who We Are

We are an independent consultancy providing compliance, information security, and technical advisory services. For all data protection matters, we act as the Data Controller. If you have questions about this Privacy Policy, please contact us at:
Email: info@clearpathcomply.com

3. Information We Collect

We collect only the information necessary to deliver our services, which may include:

• Name and contact details (email, phone number)

• Business information

• Documents or data you voluntarily provide

• Technical information (IP address, browser type) for website analytics

We do not collect sensitive personal information unless explicitly required and agreed upon.

4. How We Use Your Information

Your information is used strictly for:

• Providing and managing our services

• Communicating with you about your project or inquiry

• Maintaining internal business records

• Meeting legal or regulatory obligations

We do not use your data for marketing unless you explicitly opt in.

5. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

• Performance of a contract

• Legitimate interests

• Consent

• Legal obligation

6. Data Storage & Protection

We use industry-standard security measures, including:

• Encrypted storage environments

• Access controls and authentication

• Secure file transfer and communication practices

Data is retained only as long as necessary and securely deleted when no longer needed.

7. Sharing Your Information

We never sell, trade, or rent your personal information. Data may be shared only:

• With service providers supporting our work (e.g., secure cloud storage)

• When required by law or regulation

All third-party providers are vetted for compliance with relevant privacy standards.

8. International Data Transfers

If information is transferred outside the UK, EU, or US, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions

• Verified privacy frameworks

9. Your Rights

Depending on your location, you may have rights to:

• Access your personal data

• Correct inaccurate information

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time

To exercise these rights, contact us at the email above.

10. Cookies & Website Analytics

Our website may use cookies or analytics tools to improve user experience. You can adjust your browser settings to block cookies if you prefer.

11. Data Retention

Personal information is kept only for:

• The duration of our engagement

• Compliance with legal, regulatory, or accounting obligations

Afterward, data is securely destroyed.

12. Updates to This Policy

We may update this Privacy Policy periodically. The “Last updated” date will always show the latest revision.