Privacy Policy

Information We Collect

We collect information you provide directly (e.g., contact forms, newsletter signups), usage data via Google Analytics 4 (GA4), and cookies for site functionality and analytics. We do not sell your personal information.

How We Use Information

We use your information to operate the site, respond to inquiries, send newsletters (with your consent), improve our content and services, and comply with legal obligations.

Third-Party Services

We use the following third-party services:

• Google Analytics — site analytics
• Microsoft Clarity — heatmaps and session recordings
• Beehiiv — newsletter signup and delivery
• Resend — transactional email (e.g., contact form)
• Vercel — hosting and infrastructure

Each service has its own privacy policy. We recommend reviewing them for details on how they handle your data.

Cookies

We use cookies for analytics (GA4) and essential site functionality. You can manage cookie preferences in your browser settings.

Your Rights

Under GDPR (EU) and CCPA (California), you may request access, correction, deletion, or portability of your data. You may also opt out of marketing communications or withdraw consent. Contact us at hello@businessofgrc.com to exercise these rights.

Data Retention

We retain your data only as long as necessary to fulfill the purposes described in this policy or as required by law. Analytics data is typically retained for up to 26 months.

Contact

For privacy-related questions or requests, contact us at hello@businessofgrc.com.