This policy outlines the structural logic of how Strategic Clarity Collective processes, protects, and purges personal data. It is designed for clarity, not obscurity.
In our consulting practice, ambiguity is the enemy. The same principle applies to data. We do not collect data for collection's sake; every field in a form or cookie in a browser serves a specific operational purpose—either to deliver a diagnostic, schedule a strategy sprint, or secure a learning path.
Our infrastructure is built on the premise of Data Minimization. We request the minimum viable information required to execute the service you requested. If we ask for a company name, it is to contextualize your inquiry; if we request a phone number, it is strictly for high-priority coordination regarding your brief.
Strategic Clarity Collective operates as a France-based entity. All data processing adheres to GDPR (General Data Protection Regulation) standards regarding user rights, consent, and cross-border transfers.
A breakdown of what we capture and the specific rationale behind it.
When you complete a diagnostic quiz or submit a contact request, we capture Name, Email, Company, and Message. The specific purpose is to generate a custom strategy brief or schedule a discovery call. We do not add these details to "marketing lists" without explicit opt-in.
We process anonymized log data: IP rough-geolocation (country/region), browser type, and session duration. This is strictly for Security Hardening (detecting brute-force patterns) and Structural Optimization (ensuring our diagnostic tool renders correctly on all devices).
If you engage in a cohort course or strategy sprint, we retain project artifacts and communication logs. These are stored on encrypted servers (AES-256) and archived for a statutory retention period of 7 years for tax and liability verification, then securely purged.
Under GDPR, you possess specific rights regarding your digital footprint. We have architected our response protocols to respect these immediately.
Request a complete export of all personal data we hold regarding your interaction with the platform.
Update incorrect information (e.g., email typos) via direct request to our compliance lead.
Invoke the "Right to be Forgotten." We will purge non-essential data within 30 days.
Receive your data in a machine-readable format (JSON/CSV) for transfer to another service.
To exercise these rights, please contact our Data Protection Officer.
Contact DPOWe do not sell your data. Period. However, to deliver services, we rely on specialized infrastructure providers. Each is vetted for GDPR compliance and data sovereignty.
For questions regarding this policy, data retention, or security practices, please reach out directly to our compliance team.