Privacy Policy

1. Controller and contact

Calmwillowpath is the data controller for personal information collected through this website and during service engagements. Contact us at:

2. Data we collect

We collect information you provide directly, technical data from interactions with our website, and data necessary to deliver services. Examples include:

• Contact details such as name, email, phone, and company provided via forms or email.
• Communications and attachments related to service requests, proposals, and projects.
• Usage and technical data such as IP address, browser type, pages visited, and timestamps collected through cookies and analytics.
• Process telemetry and operational data provided by clients when engaged for process discovery or automation; this is processed under project agreements and kept confidential.

3. How we use personal data

We use personal data for limited purposes: to respond to inquiries, provide services, manage projects, and improve our website. Specific uses include:

• Responding to contact requests and scheduling consultations.
• Delivering contracted services, including discovery, automation pilots, and governance work.
• Billing and invoicing where applicable.
• Improving site functionality and user experience through aggregated analytics.
• Complying with legal obligations and protecting our rights.

4. Cookies and analytics

We use minimal cookies to support site performance and analytics. Non-essential cookies are shown in a consent banner and you may accept or reject them. Where analytics are used, they are aggregated and do not identify individuals. We may use third-party providers for analytics under strict data-processing terms. You may manage cookie preferences via the cookie banner in the site footer.

5. Sharing and disclosure

We do not sell personal data. We may share information with trusted service providers that process data on our behalf, such as analytics, hosting, or professional advisors. When we share operational or telemetry data for project work, we do so under confidentiality terms or a written agreement that protects client data. We may disclose information when required by law or to defend legal rights.

6. Data retention and security

We retain personal data as long as necessary for the purposes described and to meet legal obligations. Project-specific operational data retention is defined in project agreements. We implement reasonable technical and organizational safeguards to protect data, including access controls, encryption where appropriate, and vendor due diligence. No system is entirely risk free. If a security incident affects personal data, we will notify affected parties as required by law.

7. Your rights

Depending on your jurisdiction, you may have rights such as access, correction, deletion, objection to processing, and data portability. To exercise rights or ask questions, contact us at [email protected]. We will respond in a timely manner and verify identity where necessary to protect privacy.

8. Children

Our site and services are not intended for children under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will take steps to remove it.

9. International transfers

Calmwillowpath operates from the United States. Personal data may be processed or stored in other countries where our providers operate. We take steps to ensure appropriate safeguards are in place when data is transferred internationally, for example contractual commitments aligned with recognized frameworks.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in law, technology, or business practices. Material changes will be posted here with an updated effective date. For questions or concerns, contact us at [email protected] or by mail at the address above.