Privacy policy
In short: Awedesk, Inc. uses the information needed to answer enquiries, process orders, run customer accounts, perform audits, deliver reports, and keep the service secure. We do not sell personal data or use it for behavioural advertising.
1. Who is responsible for your data
Awedesk, Inc. is the controller for personal data processed through EAA Clarity.
Awedesk, Inc.651 N Broad St, Suite 206
Middletown, Delaware 19709
United States
For privacy questions or requests, use our contact form.
2. What we collect
- Enquiries: name, email address, organisation, message, and related correspondence.
- Accounts and commerce: customer profile, WordPress user ID, company, billing address, tax details, orders, subscriptions, invoices, refunds, account access records, and checkout agreement logs.
- Payments: payment status, transaction and provider identifiers, and limited payment method details such as brand and last four digits. Full card details are handled by the payment provider and are not stored by EAA Clarity.
- Audit delivery: the website address and scope you submit, crawl settings, publicly available page URLs and content needed for the scan, technical findings, report files, and delivery history.
- Technical and security data: IP address, browser and device information, timestamps, logs, and essential cookies or local storage needed for administration, security, cart, checkout, login, and account functions.
The EAA scope quiz runs in your browser. Quiz answers are not sent to us or stored by the website.
3. Why we use personal data
- Contract and pre-contract steps: to quote, take payment, perform the selected service, deliver reports, manage subscriptions, and provide support.
- Legal obligations: to maintain accounting, tax, invoice, consumer-rights, and compliance records.
- Legitimate interests: to secure the service, prevent misuse and fraud, diagnose faults, improve operations, and establish or defend legal claims. We balance these interests against individual rights.
- Consent: where we ask for optional communications or non-essential cookies. Consent can be withdrawn at any time.
4. Who receives personal data
We share personal data only when needed with providers that support hosting, website operations, email delivery, payment processing, accounting, security, and professional advice. Payment providers process payment information under their own notices. We may also disclose information when required by law, to protect legal rights, or in connection with a corporate transaction subject to appropriate safeguards.
We do not sell personal data.
5. International transfers
Awedesk, Inc. is based in the United States, so personal data may be processed in the United States or another country outside the European Economic Area. Where transfer rules require safeguards, we use an applicable transfer mechanism, such as European Commission Standard Contractual Clauses, and supplementary measures where appropriate. Contact us for information about the safeguard relevant to your data.
6. How long we keep data
We keep personal data only for the period needed for the purpose described above. The period depends on the relationship and record type:
- enquiry records are kept while the enquiry or resulting business relationship remains relevant;
- account, subscription, audit, and report records are kept while needed to deliver the service, provide account history, handle support, or resolve a dispute;
- orders, invoices, transactions, refunds, and agreement logs are kept for applicable accounting, tax, anti-fraud, chargeback, and legal periods;
- technical and security logs are kept for the shortest period reasonably needed to protect and operate the service.
When retention is no longer justified, data is deleted, anonymised, or isolated from normal use.
7. Your rights
Depending on the law and circumstances, you may ask for access, correction, deletion, restriction, or portability of personal data, or object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. You may also complain to the data protection authority in the EU or EEA country where you live, work, or believe an infringement occurred.
To make a request, use our contact form. We may need to verify your identity. Some records cannot be deleted immediately where retention is required by law or needed to protect legal claims.
8. Cookies and analytics
The current site does not intentionally use advertising or behavioural analytics cookies. WordPress and commerce functions may use essential storage for administration, security, cart, checkout, login, and customer account operation. See our Cookie policy for the current storage inventory. If non-essential cookies are introduced, we will request consent where required and update both policies.
9. Automated decisions
We do not use personal data to make solely automated decisions that produce legal or similarly significant effects. Automated accessibility scans produce technical findings about websites, and every report is reviewed by a person before delivery.
10. Changes to this policy
We may update this policy when the service, providers, or legal requirements change. The date at the top shows the latest revision.