Privacy Policy

Last updated: 2026-11-04 (direct website advertising measurement, purpose version 2)

This policy covers the marketing website. Account, billing, and Xero reporting data are covered by the application privacy policy.

What we collect

• Contact details submitted through demo requests and the newsletter.
• Optional company, role, and message fields provided in forms.
• Optional analytics events, sanitised page paths, campaign attribution, and pseudonymous identifiers, only with your consent.
• Hashed IP addresses for spam prevention (no raw IP storage).

How we use data

• Respond to demo requests and support inquiries.
• Send newsletter updates when you opt in.
• Improve the site and understand content engagement.

Data sharing

We use trusted service providers for hosting, email delivery, and database storage. We do not sell personal data.

Optional analytics and advertising

With your analytics consent, PostHog (EU hosting) measures website and app usage. With separate advertising measurement consent, Google Ads receives click identifiers and confirmed trial, activation, and first-payment events. We exclude financial report contents, names, emails, form text, and authentication tokens. Session replay is disabled.

Google Analytics has its own optional choice, separate from PostHog and Google Ads. If you allow it, Google Analytics measures page visits and selected actions such as demo playback, trial-button clicks and the handoff to the app. We send sanitised page paths, a limited set of event labels, and pseudonymous browser identifiers. Arbitrary query strings and private identifiers are removed. We do not send form contents, names, email addresses, financial report data or authentication tokens. Automatic form and site-search measurement, Google signals and advertising personalisation are disabled.

A separate website-measurement choice allows Google Ads to measure website visits and trial-button clicks directly through the Google tag, as well as through Google Analytics sharing. This starts off and requires both the Google Analytics and advertising-measurement choices. Earlier advertising or version-1 sharing choices do not enable the new purpose. If you allow all three, we may include validated Google click identifiers (GCLID, GBRAID or WBRAID) from the current landing-page URL and let the Google tag use advertising-measurement cookies to associate a visit or trial-button click with an ad. Other URL parameters and fragments remain excluded. A trial-button click is an expression of interest, not a completed account or trial. The direct Ads event contains no form contents, names, emails, account identifiers or financial value. Advertising personalisation and remarketing remain disabled.

Google Analytics is not loaded before you give that specific consent. An earlier choice to allow PostHog does not allow Google Analytics. Its first-party analytics cookies are set for up to 180 days and may be renewed on consented visits. They may be shared between this website and app.clarityledger.uk so a consented visit can continue across the two services. Google also receives browser, device and network information needed to provide analytics and processes data under its privacy policy; processing may take place outside the UK or EEA.

Cookie preferences apply across this website and the app for 180 days. Attribution is retained for up to 90 days. Use Cookie preferences to change your choices. Withdrawal stops future capture and pending exports; contact us to request deletion of data already sent.

The website-measurement receipt is stored in the secure first-party cookie clarity_online_ads_consent for up to 180 days. It records purpose version 2, whether you allowed website Ads measurement, and the time of your current cookie choice; it contains no click identifier or account details. A version-1 receipt cannot grant this new permission. It applies only to that exact choice. Saving another choice in the app invalidates it, so you may be asked again on the website. Google Analytics does not start if you allow advertising alone. Withdrawing either required choice stops direct website Ads events and Analytics sharing and removes Google advertising-measurement cookies from this site. Existing confirmed-result advertising exports remain governed by their separate advertising choice.

Retention

We retain data only as long as needed for legitimate business purposes or to meet legal obligations.

Your choices

You can request access, correction, or deletion of your data by contacting us. Newsletter emails include an unsubscribe option.

Contact

For privacy questions, email us at no-reply@clarityledger.uk.