Last updated 25 July 2026.
This policy explains what personal data Clearwell Digital collects through this website, why we collect it, who we share it with and what rights you have. We have written it in plain language and kept it specific to the tools this site actually uses.
Who is responsible
Clearwell Digital operates this website. You can reach us at or on +1 (240) 801 6367. We work from Frederick, Maryland, from Washington, DC, and from Stuttgart, Germany.
If you are in the European Union or the United Kingdom, we act as the controller for the data described here.
What we collect and why
When you contact us
Our contact form asks for your name, email address, company and message. We use that information only to answer you and to follow up on the enquiry. The legal basis is our legitimate interest in responding to a request you made, and where a contract follows, the performance of that contract.
Form submissions reach us by email and may also be stored in our customer relationship system. We keep enquiry records for as long as the business relationship is live, and for up to three years afterwards so we can answer follow up questions.
When you subscribe to updates
If you sign up for a newsletter or download, we store your email address and the fact that you subscribed. You can unsubscribe from any message we send. The legal basis is your consent, which you can withdraw at any time.
When you simply visit
Our hosting and security layer records standard server information such as your IP address, browser type, the page requested and the time of the request. This is used to keep the site available and to block abuse. The legal basis is our legitimate interest in operating a secure website.
Cookies and analytics
This site uses cookies. Strictly necessary cookies keep the site working and cannot be switched off. Analytics and marketing cookies are only set after you agree through the cookie banner, and you can change your choice at any time.
The services that may set cookies or process usage data are:
- Google Analytics and Google Tag Manager, delivered through Google Site Kit, to understand which pages are useful and where visitors come from.
- HubSpot, for forms, live chat and contact management.
- Cloudflare, as a content delivery and security layer.
- Wordfence, for security monitoring and blocking malicious traffic.
- LiteSpeed Cache, for page caching. This does not track you.
Some of these providers are based in the United States. Where personal data is transferred out of the European Economic Area, the transfer is covered by the European Commission adequacy decision for the EU US Data Privacy Framework or by standard contractual clauses.
Who we share data with
We do not sell personal data and we do not share it for advertising. We share it only with the service providers named above, all of whom process it on our instructions, and with authorities where the law requires it.
How long we keep it
Enquiries: for the duration of the relationship plus three years. Newsletter subscriptions: until you unsubscribe. Server and security logs: normally thirty days. Analytics data: according to the retention period set in the analytics account.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing based on legitimate interest, and ask for your data in a portable format. Where processing is based on consent, you can withdraw that consent at any time.
Write to and we will respond within one month. If you are in the EU or the UK and you are not satisfied with our answer, you can complain to your national data protection authority. In Germany that is the authority for the state in which you live.
If you are a California resident, you also have the right to know what personal information we collect, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act.
Security
The site is served over an encrypted connection. Access to systems that hold personal data is limited to people who need it, and protected by multi factor authentication.
Changes
If we change this policy we will update the date at the top of the page. Material changes will be announced on the website.
This policy describes our actual practice and the tools in use on this website. It is not legal advice. We recommend a review by a qualified lawyer before relying on it, particularly regarding the German entity and any sector specific obligations.