Privacy Policy

Last Updated: May 23, 2026

This Privacy Policy explains how clearPath Automations Co. ("we," "our," or "us") collects, uses, and protects your information when you visit our website www.clearpathautomations.tech (the "Website").

We are committed to data privacy and protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

For the purpose of the GDPR, the Data Controller for this website is:

• Name/Company: clearPath Automations Co.
• Contact Email: admin@clearpathautomations.tech

2. The Data We Collect & Why We Collect It

Because our website is built using optimized open-source technologies (Svelte) and static deployment methods, we do not run tracking scripts, analytics databases, or native tracking cookies. We minimize data collection to only what is technically necessary to serve the site and communicate with you.

A. Technical & Infrastructure Data (Log Files)

When you visit the website, certain technical traffic data and client-side signals are processed automatically to securely deliver the site's assets to your browser and defend against automated attacks.

• Data Processed: Internet Protocol (IP) addresses, system configuration information, browser type, time/date of access, and non-identifying client-side security signals (such as TLS fingerprints, User-Agent headers, and sitekey origins.)
• Purpose &Legal Basis (GDPR Art. 6(1)(f)): Legitimate Interest. This processing is strictly necessary to maintain network security, mitigate DDoS attacks, optimize performance, and distinguish human users from malicious automated bot traffic.
• Service Provider: Cloudflare(including the Cloudflare Turnstile challenge platform)..

B. Communication Data (Contact Forms & Email)

If you actively choose to contact us via our on-site forms or sign up for updates, we collect the information you explicitly provide.

• Data Processed: Name, email address, and the contents of your message.
• Legal Basis (GDPR Art. 6(1)(b) & Art. 6(1)(f)): Performance of a contract (to answer your explicit request) or Legitimate Interest (to manage incoming business communication).
• Service Providers: FormSubmit (for current form processing) and Resend.io (for upcoming email delivery automation).

3. Third-Party Data Processors (Sub-processors)

We do not sell, rent, or trade your personal data. To run our infrastructure, we rely on trusted, compliant third-party services that act as Data Processors under strict Data Processing Addendums (DPAs). Our sub-processors and their functions are detailed below:

4. Cookies and Tracking Technologies

Our core frontend framework (Svelte) does not deploy cookies.

• No Tracking Cookies: We do not use marketing, profiling, or cross-site advertising tracking cookies (such as Google Analytics or Meta Pixels).
• Functional Cookies: Cloudflare may occasionally deploy necessary security cookies (such as identifying trusted web traffic or managing rate limiting). These do not contain personal identifiers and are exempt from standard cookie consent banners under GDPR as they are strictly necessary for security functionality.

5. Data Retention

We only keep your personal data for as long as necessary to fulfill the purposes we collected it for:

• Traffic Logs: Cloudflare handles and flushes routing logs according to their structural data retention schedules (typically cached or cleared within short intervals).
• Form Submissions & Correspondence: Emails and form messages are retained as long as necessary to resolve your inquiry or maintain our active professional relationship, unless you request deletion.

6. International Data Transfers

Our service providers (like Cloudflare and Resend) may process data in data centers located outside the European Economic Area (EEA), primarily in the United States. Where data is transferred globally, we ensure it is protected via valid legal frameworks, including the EU-U.S. Data Privacy Framework and standard contractual clauses (SCCs) embedded in our provider agreements.

7. Your GDPR Rights

If you are located within the European Union/EEA, you hold the following rights regarding your personal data:

• Right of Access: You can ask for a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data (e.g., your form submission history).
• Right to Restrict or Object to Processing: You can object to us processing your data under certain conditions.
• Right to Data Portability: You can request that we transfer your data to another organization or directly to you.

To exercise any of these rights, please contact us directly at admin@clearpathautomations.tech. We will respond to your request within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect modifications to our stack (such as the full integration of Resend.io) or changing legal standards. Any updates will be posted directly to this page with an updated "Last Updated" timestamp.