1. Who is responsible for your data
Data controller: Clarity & Structure, a professional consulting practice operated by Yanis Budreika.
No separate data protection officer has been appointed. Privacy contact and data subject requests: hello@clarity-structure.com.
2. Data we collect
When you submit a form on the website, we receive the information you provide: name, work email, company or product, message content, and any other information you choose to include.
If you arrive through an advertising or analytics link, the form may include attribution parameters with your request, such as utm_source, utm_medium, utm_campaign, utm_term, utm_content, or gclid.
Hosting, email, and security providers may automatically process technical data such as IP address, request date and time, page URL, user agent, browser, and device information. This data is used to operate the website, maintain security, and diagnose errors.
We do not ask you to submit payment data, passwords, government identifiers, health information, or other sensitive information through the forms. Please do not include that information in your message.
3. How we use data
We use form data to respond to your request, understand your business context, assess whether the service is a fit, prepare a proposal or next step, and maintain business correspondence.
Technical and attribution data is used for security, abuse prevention, website maintenance, error diagnostics, and analysis of page and advertising performance.
We do not sell personal data and we do not use it for bulk marketing unless there is a separate lawful basis or your consent where consent is required by applicable law.
4. Legal bases
Where GDPR, UK GDPR, or similar rules apply, we generally rely on the following legal bases: taking steps before entering into a contract, our legitimate interest in responding to business enquiries and developing our services, compliance with legal obligations, and consent where required for optional analytics, advertising, or marketing communications.
You may withdraw consent where processing is based on consent. This does not affect processing that happened before withdrawal.
5. Who may receive data
We may share data with providers that help the website and communications operate, including hosting, email delivery, analytics, advertising tools, security systems, and technical support.
At the time of publication, the website uses Vercel for hosting and Resend for email delivery from forms. If Google Analytics, Google Ads, or similar tools are enabled, they may process technical and attribution data under their own terms and configuration.
We may also disclose data to professional advisers or public authorities where necessary to protect rights, comply with law, or resolve a dispute.
6. International transfers
Because the website and service providers may operate internationally, personal data may be processed outside your country. In those cases, we aim to use providers with contractual and technical safeguards appropriate for applicable requirements.
7. Retention
Form requests and business correspondence are usually kept for up to 24 months after the last interaction, unless a longer period is needed for a contract, accounting, legal obligations, rights protection, or dispute handling.
Technical logs and security data are retained for limited periods according to the settings and policies of the relevant providers.
8. Your rights
Depending on your jurisdiction, you may have the right to request access, correction, deletion, restriction of processing, data portability, objection to processing, or withdrawal of consent.
To exercise your rights, email hello@clarity-structure.com. We may ask for information needed to verify your identity and process the request.
If you believe your data has been handled incorrectly, you may also contact the competent data protection authority in your country.
9. Security
We use HTTPS, limit access to submitted requests, and select providers that offer baseline infrastructure safeguards. No method of transmission or storage is absolutely secure, but we take reasonable steps to reduce the risk of unauthorized access.
10. Changes to this policy
We may update this policy when the website, services, advertising tools, or legal requirements change. The updated version will be published on this page with a new date.