Privacy Policy

Information you provide directly:

• Your name, company email, brand name, website URL, and an estimate of your monthly site visitors, when you request a free audit or risk check.
• Any information you share with us during a consultation, audit, or ongoing engagement.
• Information you send us by email or other direct communication.

Information collected automatically:

• Standard technical data such as IP address, browser type, device information, and pages visited, collected through our hosting and infrastructure providers.

We use cookies and similar technologies on the Site for analytics and advertising measurement, including tools such as:

• Google Analytics, to understand traffic and how visitors use the Site.
• Meta Pixel, to measure and improve the performance of our advertising.
• Hotjar, to understand user behavior through session recordings and heatmaps.

These tools may collect information such as pages visited, time on Site, referring pages, and general location, and may set cookies or similar identifiers on your device. You can control or disable cookies through your browser settings; some parts of the Site may not function as intended if you do.

• To respond to your inquiry and provide the free audit or risk check you requested.
• To deliver the compliance audit, fix, and monitoring services you’ve engaged us for.
• To communicate with you about your account or engagement.
• To maintain, secure, and improve the Site and our services.
• To comply with legal obligations.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes. We may share information with:

• Service providers who host the Site or support our operations (for example, our hosting provider), under obligations to protect your information.
• Analytics and advertising partners (such as Google Analytics, Meta, and Hotjar), who receive standard usage data to help us understand and improve the Site.
• Authorities, if required by law, subpoena, or legal process.
• A successor entity, in the event of a merger, acquisition, or sale of assets.

We delete audit data 24 months after your engagement ends. We delete inquiry data 24 months after it’s submitted. You can request deletion at any time by emailing info@smoothsail.co.

If we experience a data breach affecting your personal information, we will notify affected individuals without unreasonable delay and in compliance with applicable state data breach notification laws.

Regardless of where you’re located, you can ask us to access, correct, or delete the personal information we hold about you, or to stop contacting you, by emailing info@smoothsail.co.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent UK law, including the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Lodge a complaint with your local data protection authority.

Where we process your personal data based on your consent (for example, when you submit the audit request form), the legal basis for that processing is your consent, which you can withdraw at any time. Where we process data to provide services you’ve engaged us for, the legal basis is performance of that engagement. Personal data may be transferred to and processed in the United States; by using the Site or submitting information to us, you understand your data may be processed outside your home country.

If you are a California resident, or your personal information is processed as part of an audit or engagement, you have the following rights under the California Consumer Privacy Act:

• Right to know — you can request what personal information we collect, use, and share about you.
• Right to delete — you can request that we delete the personal information we hold about you, subject to limited exceptions.
• Right to opt-out — you can opt out of any sale or sharing of your personal information. We do not sell or share personal information for cross-context behavioral advertising.
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, email info@smoothsail.co with your request. We will respond within 45 days. We do not sell personal information as defined by the CCPA.

The Site is not directed at children, and we do not knowingly collect personal information from anyone under 18.

We store audit data securely and restrict access to authorized SmoothSail personnel. We take reasonable technical and organizational measures to protect the information we hold, but no method of transmission or storage is completely secure, and we can’t guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date above.

If you have questions about this Privacy Policy or how we handle your information, contact us at info@smoothsail.co.