Privacy Policy

Effective date: 23 August 2025

1) What we collect

We collect only what's needed to run and improve our service:

Email address (when you sign up, join the waitlist, or contact us)
Name and organisation details, if provided
Billing and payment data (processed by Stripe)
Support and email correspondence
Technical data such as IP (for security and fraud prevention), browser/OS, and request logs
Analytics events (see “Cookies & analytics” below)
Decision Readiness scorecard responses and score (if you choose to use the scorecard)

2) How we use it

To register interest and manage waitlist sign-ups
To deliver and support your OnePlan subscription
To fulfil billing, invoicing, and legal obligations
To respond to your queries
To improve service quality and site experience
To calculate and show your Decision Readiness score and next steps (if you complete the scorecard), and to follow up about OnePlan if appropriate

Scorecard note

If you complete the Decision Readiness scorecard, we store your answers and score to generate results, improve the framework, and contact you about OnePlan where relevant. You can request deletion at any time by emailing privacy@getclarity.win.

3) Legal bases (UK/EU GDPR)

Consent — for analytics cookies (Google Analytics 4) and any scorecard-related marketing follow-up you opt into
Contract — to provide our service and process payments
Legitimate interests — site security, abuse prevention, essential operations, and improving the framework and scorecard

4) Cookies & analytics

We show a consent banner on first visit. Analytics runs only if you choose “Accept”. Your choice is stored in your browser's localStorage (ga_consent).

Essential (no consent required)

Security, performance, and basic site operation
Authentication (if you sign in) — our identity provider may set strictly necessary cookies

Analytics (consent)

We use Google Analytics 4 (GA4) with ads features disabled. If you consent, GA may set cookies such as _ga and _ga_<container-id> to generate aggregate usage stats (e.g., pages viewed, referrers, device/region). We don't send GA any data that directly identifies you (like your name or email). IP addresses are used by Google for approximate geolocation and are not retained in GA reports.

You can change your choice anytime: Cookie settings. You can also use Google's opt-out add-on if you prefer a browser-level control.

Local storage

We store your analytics consent choice in localStorage under the key ga_consent. This is used only to remember your preference.

5) Processors & recipients

We use reputable providers with appropriate safeguards and data protection terms:

AWS (hosting, data storage, email)
Stripe (payments and invoicing)
Google Analytics (aggregate usage analytics, with consent)
Airtable (operational tracking)
Identity/auth provider (for sign-in, if applicable)

6) Storage & security

Data is encrypted in transit and at rest where supported. Access is restricted to the Clarity. team on a need-to-know basis.

7) Data retention

Waitlist/contact data: deleted after 12 months of inactivity or on request
Billing/transaction records: kept as required for accounting and legal obligations
Analytics data: retained by Google per your consent and our GA configuration
Scorecard responses and score: deleted after 12 months of inactivity or sooner on request

8) International transfers

We aim to use UK/EU regions where available. If personal data is transferred outside the UK/EU, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) and provider commitments.

9) Your rights

You can request to:

Access the data we hold about you
Correct inaccurate information
Delete your data (subject to legal requirements)
Restrict or object to certain processing
Withdraw consent for analytics at any time

To make a request, email privacy@getclarity.win.

10) Changes

We'll update this policy when needed and change the “Effective date” above. Material changes may be communicated on-site.

11) Contact

Clarity. Support Services Ltd
privacy@getclarity.win