Privacy Policy.
Effective Date: September 9, 2026
This policy explains what information ClearPath Content LLC collects when you visit this site, buy a product, or work with us as a consulting client — and how we use, protect, and share it. We do not sell your data. We do not run advertising on this site. If you have questions, email us at Contact@clearpathcontent.net.
QUICK NAVIGATION
Privacy Policy
ClearPath Content
Effective date: September 09, 2026
This Privacy Policy describes how ClearPath Content LLC, a Texas limited liability company (“ClearPath,” “we,” “us”), collects, uses, and shares personal information when you visit https://www.clearpathcontent.net/ (the “Site”), purchase our downloadable digital products, such as guides, checklists, and document templates (the “Products”), or engage us for consulting services.
This notice describes our practices. It is not a contract, and it does not by itself constitute your consent to anything. Where the law requires your consent for a specific activity (for example, non-essential cookies or marketing emails), we ask for it through a separate, explicit mechanism such as the Site’s cookie banner or a signup form.
1. Who we are
ClearPath Content publishes downloadable digital guides, checklists, and document templates, and provides compliance and cybersecurity documentation consulting. It operates from Texas, United States.
For privacy questions or requests, contact us at Contact@clearpathcontent.net or by mail at 5900 Balcones Drive STE 100, Austin, TX 78731.
ClearPath is the “data controller” (the party deciding how and why personal information is used) for the data described in this Policy, including the order information relating to your purchase of our Products. Gumroad, the merchant of record for our Products (Section 4), processes buyer data on our behalf as our processor for the sale and delivery of the Products, and is an independent controller only for the data it collects for its own purposes, such as any Gumroad account you hold.
2. Information we collect
Information you give us directly:
· Contact and inquiry data. If you email us or submit a form on the Site, we receive your name, email address, company, the content of your message, and standard message metadata.
· Consulting engagement data. If you become a consulting client, we collect the business contact details needed to run the engagement (names, roles, business email addresses, billing details).
· Client project materials. Consulting clients send us corporate documents (for example, policies, procedures, and questionnaires) for our review and drafting work. Our engagements are scoped to corporate documentation, and we ask clients not to send personal data about their employees or customers beyond ordinary business-contact information. Section 8 explains how we handle personal data that appears in client materials.
Information collected automatically:
· Site analytics. The Site is hosted on Squarespace, whose analytics collect information about visits through cookies and similar technologies, which may include, depending on the features enabled: IP address and the approximate location derived from it, browser, device, and network information, the pages you visit and how you found them (referral source), clicks and internal links, scrolling activity, on-site searches, and timestamps. We use this in aggregate to understand how the Site is used. Section 10 describes cookies and your choices.
Information related to purchases:
· Order and payment data. Product purchases are made on Gumroad, not on the Site, as described in Section 4; we do not operate a checkout or customer accounts on the Site. We receive from Gumroad the order information needed to provide support and enforce our license (typically your email address, your name if Gumroad collected it, your country, what you bought, the price paid, and the transaction status and reference), and we never receive or store your payment card details, which are handled by Gumroad for Product sales and by Stripe for consulting invoices.
We do not intentionally request sensitive categories of personal information (such as health data, government identifiers, or precise geolocation), and the Site is not directed at children under 16. If you believe a child has provided us with personal information, contact us, and we will delete it.
3. How we use information
We use personal information to:
· respond to inquiries and provide quotes;
· support purchasers of our Products and enforce our license terms;
· perform consulting engagements and manage client relationships;
· invoice and collect payment for consulting engagements, and keep accounting and tax records;
· secure and improve the Site;
· comply with legal obligations, including export control and sanctions screening (see Section 6); and
· establish or defend legal claims if a dispute arises.
We do not use your personal information for automated decision-making that produces legal effects; we do not sell it, and we do not run advertising pixels, retargeting tags, or third-party ad networks on the Site.
If we later add a newsletter or marketing emails, we will only send them to people who sign up, every message will include an unsubscribe link, and we will update this Policy first.
4. Product purchases and the merchant of record
Downloadable Products are sold through Gumroad, Inc. (“Gumroad”), a third-party platform that acts as merchant of record. When you click a purchase link on the Site, you leave the Site and complete the purchase on Gumroad’s website. Gumroad is the legal seller of the Products for the sales transaction: it processes your payment, handles applicable sales tax, VAT, or GST, delivers the files, and handles refunds and chargebacks. Under Gumroad’s privacy policy, Gumroad acts as our processor for the personal information it handles in connection with the sale and delivery of our Products, and ClearPath is the controller of that information; Gumroad is an independent controller for the data it collects for its own purposes, including any Gumroad account you hold. Gumroad’s privacy policy is at https://gumroad.com/privacy.
ClearPath receives from Gumroad the order information listed in Section 2, which we use for support, accounting, and enforcing our license terms. To exercise privacy rights over that information, contact us (Section 9) rather than Gumroad.
Consulting engagements are invoiced directly by ClearPath and paid through Stripe, our payment processor. Stripe processes your payment data under its own privacy policy; ClearPath does not store card numbers.
6. International transfers and sanctions screening
ClearPath operates from the United States, and our service providers store data primarily in the United States. If you contact us or buy from us from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.
Our consulting services are directed at business customers, and our Products are intended for business and professional use, although individuals may buy them. Where the EU or UK General Data Protection Regulation applies to a specific interaction, our legal bases are: performance of a contract (licensing Products, providing post-sale support, and performing consulting engagements), legitimate interests (responding to inquiries, securing the Site, defending claims), consent (non-essential cookies and marketing if we introduce it), and legal obligation (tax, accounting, and sanctions compliance). For transfers from the EU or UK to the United States, we rely on the safeguards implemented by the relevant service provider for that transfer, such as EU Standard Contractual Clauses, the EU-U.S. Data Privacy Framework (for providers with an active certification covering the data), the UK Extension to that Framework, or the UK International Data Transfer Agreement or Addendum. Contact us for information about the safeguard that applies to a specific transfer.
United States sanctions law restricts us from doing business with certain countries, regions, and listed parties. Gumroad screens transactions at checkout, and we may review orders and engagement requests against sanctions lists and cancel, with a refund where lawful, transactions that we cannot lawfully fulfill. This processing is a legal obligation.
7. Retention
We keep personal information only as long as needed for the purposes above:
· Inquiries that do not become engagements: up to 24 months, so we can respond to follow-ups.
· Order records, invoices, and tax records: generally 7 years under our records-retention schedule, or longer where required for a specific legal, tax, accounting, or dispute purpose.
· Consulting client materials: at the close of an engagement, client source materials are securely destroyed (or returned, at the client’s choice) with written confirmation. We retain the final deliverables, the engagement contract, invoices, and records we must keep by law. Residual copies in routine system backups are deleted in the ordinary course of backup rotation.
Marketing data (if a newsletter launches): until you unsubscribe.
8. Client materials and our role as a consultant
Our consulting work is scoped to corporate documentation: policies, procedures, control descriptions, and questionnaire responses. We ask clients not to include personal data about their employees or customers in materials sent to us, beyond ordinary business-contact information (such as names, roles, and work email addresses appearing in documents), for which this Policy applies.
Legal roles depend on how data is actually processed, not on labels. If an engagement requires us to process personal data on a client’s documented instructions, we act as a processor for that data and will sign a data processing agreement with the client before receiving it; that agreement, not this Policy, governs such data. If we receive unexpected personal or sensitive data, we notify the client and, at the client’s choice, securely delete or return it.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to complain to a supervisory authority. We honor the rights that the law of your jurisdiction grants you, including, where they apply, rights under EU or UK data protection law and under U.S. state privacy laws.
To exercise any right, email Contact@clearpathcontent.net. We will verify your request (normally by confirming control of the email address on file) and respond within the time the applicable law requires. We will not discriminate against you for exercising your rights. If we decline a request, you may appeal by replying to our response within 60 days; we will answer in writing with our reasons, and, where applicable law provides, you may then contact your state attorney general or data protection authority.
Note for consulting clients’ personnel: if your personal data appears in materials your employer sent us, your request should go to your employer, who controls that data; we will assist them.
10. Cookies
The Site uses cookies set by Squarespace in two categories:
· Strictly necessary cookies, required for site functionality and security. These do not require consent.
· Analytics and performance cookies, which identify unique visitors and measure how the Site is used, with lifetimes of up to two years.
Where the law requires consent for non-essential cookies (for example, for visitors from the EU or UK), analytics cookies are only set after you accept them through the Site’s cookie banner, where you can also reject or manage them. You can additionally control cookies through your browser settings; blocking strictly necessary cookies may affect Site functionality. A current list of the specific cookies Squarespace sets, with names, purposes, and durations, is maintained at: https://support.squarespace.com/hc/en-us/articles/360001264507.
We do not use advertising cookies. If that changes, we will update this Policy and the consent banner first.
11. Security
We take reasonable technical and organizational measures appropriate to the data we handle, including access controls on business accounts, encryption in transit, and the use of reputable hosted services. No method of transmission or storage is completely secure; if a breach affecting your personal information occurs, we will notify you and the relevant authorities as the law requires.
12. Changes to this Policy
We may update this Policy as the business and its tools evolve. The effective date at the top will change, and material changes will be highlighted on the Site. The current version always governs.
13. Contact
ClearPath Content LLC
5900 Balcones Drive STE 100 Austin, TX 78731, US