https://auditpartners.com/assets/PrivacyPolicy-gq_43oZr.js

1import{j as e,L as s}from"./vendor-react--ZBGOUuj.js";import{N as i,P as r,B as n,r as a,F as t}from"./index-BG-fxrWe.js";import"./vendor-motion-DvGP7z3z.js";function l(){return e.jsxs("div",{className:"min-h-screen bg-background text-foreground [body:has(&)]:overflow-x-clip!",children:[e.jsx(i,{}),e.jsxs("main",{id:"main-content",className:"scroll-mt-24",children:[e.jsx(r,{title:"Privacy Policy",description:"This notice explains the information handled through the AuditPartners website, inquiry forms and self-assessment tools, and the choices available to you."}),e.jsxs("div",{className:"container mx-auto max-w-6xl px-6 py-12 sm:py-16",children:[e.jsx("p",{className:"text-sm leading-relaxed text-muted-foreground mb-10","data-testid":"text-privacy-reviewed",children:"Reviewed against site behaviour in October 2026 (pending owner legal review)"}),e.jsxs("div",{className:"grid gap-12 xl:grid-cols-[18rem_minmax(0,1fr)] xl:gap-16",children:[e.jsxs("nav",{"aria-label":"Privacy sections",className:"min-w-0 self-start border-y border-border py-6 xl:sticky xl:top-28 xl:max-h-[calc(100svh-8rem)] xl:overflow-y-auto",children:[e.jsx("h2",{className:"text-lg font-sans font-semibold mb-4",children:"On this page"}),e.jsxs("ol",{className:"list-decimal pl-6 grid gap-x-8 gap-y-1 sm:grid-cols-2 xl:grid-cols-1 text-sm leading-relaxed text-muted-foreground [&_a]:block [&_a]:py-2 [&_a]:underline [&_a]:decoration-border [&_a]:underline-offset-4 [&_a:hover]:text-primary [&_a:focus-visible]:outline-2 [&_a:focus-visible]:outline-ring [&_a:focus-visible]:outline-offset-2",children:[e.jsx("li",{children:e.jsx("a",{href:"#privacy-collection",children:"Information you provide"})}),e.jsx("li",{children:e.jsx("a",{href:"#privacy-use",children:"How information is used"})}),e.jsx("li",{children:e.jsx("a",{href:"#privacy-providers",children:"Service providers and sharing"})}),e.jsx("li",{children:e.jsx("a",{href:"#privacy-cookies",children:"Cookies, browser storage and tracking"})}),e.jsx("li",{children:e.jsx("a",{href:"#privacy-security",children:"Security and retention"})}),e.jsx("li",{children:e.jsx("a",{href:"#privacy-rights",children:"Your choices and privacy requests"})}),e.jsx("li",{children:e.jsx("a",{href:"#privacy-children",children:"Children's privacy"})}),e.jsx("li",{children:e.jsx("a",{href:"#privacy-changes",children:"Changes and engagement-specific information"})})]})]}),e.jsxs("div",{className:"min-w-0 max-w-3xl space-y-12 text-base sm:text-lg text-foreground leading-8 break-words [&_section]:scroll-mt-28 [&_h2]:text-foreground [&_h2]:text-2xl [&_h2]:leading-tight [&_h2]:font-display [&_h2]:mb-5 [&_p]:mb-5 [&_ul]:list-disc [&_ul]:pl-6 [&_ul]:space-y-4 [&_a]:underline-offset-4 [&_code]:text-sm [&_code]:break-all",children:[e.jsxs("section",{id:"privacy-collection","aria-labelledby":"privacy-collection-heading",children:[e.jsx("h2",{id:"privacy-collection-heading","data-testid":"text-privacy-collection",children:"Information you provide"}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Contact and scope inquiries:"})," name, email, company where provided, service interest and your message. The scope inquiry includes the review trigger, desired timeline, optional referral source and the decision you need to make. Some contact forms also request a phone number and country; these are included in the notification email rather than the inquiry database record."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Consult inquiries:"})," first and last name, email, company, role, frameworks, your situation, how you found us and an optional newsletter choice. These details are used in email notifications and replies."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Newsletter and resource requests:"})," email and, where requested, name, company, country, phone, source and opt-in status. Some existing checklist-request routes also create a subscriber record when the requested resource is delivered. A resource request is not a professional engagement."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Earlier consultation intake (historical):"})," the website previously offered a bookable consultation. Intake details submitted for it (name, email, company, optional website and LinkedIn link, frameworks, needs, urgency, review context and newsletter choice) remain stored with the related inquiry record and are handled as inquiry data. No payment or card details are collected through the current website forms."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Gap self-assessment:"})," name, email, company, optional position and website, selected framework, session identifiers, your chat answers, AI replies and any generated score. If you provide a website, the tool may retrieve a public summary of it as context for the conversation. Session security and activity records can include an IP address."]})]}),e.jsx("p",{className:"mt-4",children:"Do not submit passwords, secrets, confidential customer evidence, protected health information or other sensitive personal data through public forms or self-assessment tools. Evidence for a professional engagement is handled under its separately agreed terms."})]}),e.jsxs("section",{id:"privacy-use","aria-labelledby":"privacy-use-heading",children:[e.jsx("h2",{id:"privacy-use-heading",children:"How information is used"}),e.jsx("p",{children:"We use information to respond to requests, discuss engagement scope, arrange consultations, deliver requested resources and service emails, operate self

1-assessment sessions, and maintain site security. Newsletter choices are separate from the free scope inquiry; that inquiry has no marketing opt-in."}),e.jsx("p",{children:"The gap self-assessment stores contact details, chat answers and generated outputs in the site's database. It sends a session-resume email and an internal lead notification. Results appear in the tool; an email containing a resume link is not a separate professionally reviewed result or report. Do not share assessment session credentials or resume links."}),e.jsxs("p",{children:["The separate ",e.jsx(s,{href:"/resources/ai-governance-quickscan",className:"text-primary underline",children:"free AI Governance QuickScan"})," works differently: its questions are answered and its results are produced entirely in your browser by fixed rules, with no AI processing. Answers are kept in your browser's local storage on your device until you restart the QuickScan or clear site data; they are not sent to or stored by AuditPartners. Downloads and printing happen on your device. Nothing is transmitted unless you use the optional contact form on the results page, which stores your name, e-mail, company and message as an inquiry and e-mails them to us; a summary of your results (the level per area, flagged concerns and suggested actions — not individual answers) is included only if you tick that option, and the newsletter is a separate, unticked choice. With analytics consent, the ordinary page and engagement measurement described above applies to the QuickScan pages, and generic tool-use events (started, completed or downloaded, with a fixed tool identifier) may be recorded; we never record your answers, area levels, flagged concerns or any other result data."]})]}),e.jsxs("section",{id:"privacy-providers","aria-labelledby":"privacy-providers-heading",children:[e.jsx("h2",{id:"privacy-providers-heading","data-testid":"text-privacy-providers",children:"Service providers and sharing"}),e.jsx("p",{children:"The website uses service providers to carry out these functions:"}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Hosted database and hosting:"})," the application uses a PostgreSQL database for inquiries, subscriber records, assessment leads, messages and assessment activity logs. Hosting services also process requests to the site. This notice does not specify a storage country or promise a particular hosting location."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Resend:"})," processes email delivery, including submitted contact details and message content for inquiry notifications, consultation communications, resource delivery and assessment-resume messages."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Anthropic:"})," processes the gap self-assessment's intake context and conversation history to generate AI replies. The context can include the contact and company information you supplied and a public website summary. Provider handling is subject to the applicable provider terms; this notice does not promise a particular training exclusion or provider retention period."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Calendly:"})," supports consultation scheduling links when configured. If you follow a scheduling link, the information you provide there is handled by Calendly under its own notice."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Google Sheets, where configured:"})," an existing compliance-toolkit resource-request route can forward name, email, company, request source and timestamp through a configured webhook."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Google:"})," consent-gated measurement tags, as explained below. Their operation and third-party processing should be distinguished from information stored by our forms."]})]}),e.jsx("p",{className:"mt-4",children:"We do not sell, rent or trade your personal information. We may disclose information when required by law or legal process, or to protect rights, safety and security. Information may also be transferred in a merger, acquisition, reorganization or similar business transaction, subject to applicable law."}),e.jsx("p",{children:"Third-party websites and services have their own privacy policies. Review those policies when using a scheduling or other external service."})]}),e.jsxs("section",{id:"privacy-cookies","aria-labelledby":"privacy-cookies-heading",children:[e.jsx("h2",{id:"privacy-cookies-heading","data-testid":"text-privacy-cookies",children:"Cookies, browser storage and tracking"}),e.jsxs("p",{children:["The cookie banner offers Accept and Decline and saves that choice in this browser's local storage under ",e.jsx("code",{children:"ap_cookie_consent"}),". Google measurement tags (Google Ads conversion tracking and, where configured, Google Analytics) load ",e.jsx("strong",{children:"only after you choose Accept"}),". If you decline or make no choice, no Google script is loaded and no page-view or conversion data is sent to Google from this browser. No LinkedIn tag is installed. Essential cookies and storage that make the forms, assessments and the admin area work are not affected by this choice."]}),e.jsx("p",{children:"You can change your choice at any time: the button below forgets the stored decision and shows the banner again. Scripts already loaded in this tab stop sending events once you decline and are not loaded on later visits."}),e.jsx("p",{children:e.jsx(n,{type:"button",variant:"outline",onClick:()=>a(),className:"rounded-none font-sans font-medium text-xs h-9 px-5 border-foreground

1/20","data-testid":"button-change-cookie-choice",children:"Change my cookie choice"})}),e.jsx("p",{children:"The application also records site-usage events such as page visits, downloads and form submissions for internal reporting. Technical request information and assessment IP addresses may be processed for security and abuse prevention. You can use browser controls to restrict cookies and external scripts, and clear local storage to reset the banner choice. Those controls may affect some third-party functions."})]}),e.jsxs("section",{id:"privacy-security","aria-labelledby":"privacy-security-heading",children:[e.jsx("h2",{id:"privacy-security-heading",children:"Security and retention"}),e.jsx("p",{children:"The site uses server-side validation, assessment session-token checks, rate limits and security headers. No method of internet transmission or electronic storage is completely secure. Keep your session access details private."}),e.jsx("p",{children:"We retain information for service delivery, support and applicable legal or contractual needs. The reviewed code does not establish a fixed deletion schedule for inquiries, subscriber records or assessment conversations. We therefore do not promise a specific retention period for those records."}),e.jsx("p",{children:"A cleanup routine is configured to remove assessment audit-log records older than twelve months. The reviewed gap tool does not provide a verified document-upload journey or automatic document-deletion process. This notice does not promise deletion of uploaded files after ninety days."})]}),e.jsxs("section",{id:"privacy-rights","aria-labelledby":"privacy-rights-heading",children:[e.jsx("h2",{id:"privacy-rights-heading",children:"Your choices and privacy requests"}),e.jsx("p",{children:"Depending on your jurisdiction, you may have rights to access, correct, delete or receive a copy of your information, or to object to certain processing. Contact us to request assistance or to stop newsletter communications. We will respond in accordance with applicable law; submitting a request does not itself automatically delete a database record."}),e.jsxs("p",{children:["Send privacy questions and requests to ",e.jsx("a",{href:"mailto:[email protected]",className:"text-primary underline","data-testid":"link-privacy-email",children:"[email protected]"}),", the contact address used by the site's email service, or ",e.jsx(s,{href:"/contact",className:"text-primary underline","data-testid":"link-privacy-contact",children:"use the contact form"}),". Avoid including sensitive evidence in the initial request."]})]}),e.jsxs("section",{id:"privacy-children","aria-labelledby":"privacy-children-heading",children:[e.jsx("h2",{id:"privacy-children-heading",children:"Children's privacy"}),e.jsx("p",{children:"The site and services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided information, contact us so we can review the request and take appropriate steps."})]}),e.jsxs("section",{id:"privacy-changes","aria-labelledby":"privacy-changes-heading",children:[e.jsx("h2",{id:"privacy-changes-heading",children:"Changes and engagement-specific information"}),e.jsx("p",{children:"We may update this notice when website behaviour or data arrangements change. Review the note above and this page for updates. Professional engagement information is also subject to the applicable engagement agreement and confidentiality arrangements."}),e.jsxs("p",{children:["See the ",e.jsx(s,{href:"/terms",className:"text-primary underline",children:"Website & Tool Terms"})," for the distinction between public informational tools and a separately agreed professional assessment."]})]}),e.jsx("a",{href:"#main-content",className:"inline-block py-3 text-sm text-primary underline underline-offset-4 focus-visible:outline-2 focus-visible:outline-ring focus-visible:outline-offset-2",children:"Back to top"})]})]})]})]}),e.jsx(t,{})]})}export{l as default};