Privacy Policy

1. Data Controller

This Privacy Policy applies to the website clutchroute.com and the ClutchRoute platform, operated by Exponential Vector s.r.o., registered in the Czech Republic (DIČ: CZ22302549). Contact: hello@clutchroute.com

2. What Data We Collect

We collect personal data only when you voluntarily submit it through our contact form. This includes:

• Full name
• Business email address
• Company name
• Job title or role
• Any information you include in your message

We do not collect any data through cookies beyond what is strictly necessary for the website to function. We do not use tracking pixels, advertising cookies, or analytics that identify individual users.

3. Why We Collect It

We process your personal data solely for the following purposes:

• To respond to your enquiry or request for information
• To assess whether a commercial or research engagement is appropriate
• To send you information about ClutchRoute that you have requested

We will never use your data for unsolicited marketing, and we will never sell or share your data with third parties for their own commercial purposes.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), our legal basis for processing your personal data is:

• Legitimate interests — responding to a business enquiry you have initiated
• Pre-contractual steps — where you are considering entering into an agreement with us

5. Third-Party Processors

We use the following third-party service to process form submissions on our behalf:

No other third parties receive your personal data as part of normal website use.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected — typically the duration of an active business conversation, plus a reasonable period afterwards.

If no engagement follows your initial enquiry, we will delete your data within 12 months of your last communication with us.

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit how we process your data
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All communications with this website are encrypted via HTTPS.

9. International Transfers

Formspree is a US-based service. Where your data is transferred outside the European Economic Area, Formspree relies on Standard Contractual Clauses approved by the European Commission as the legal transfer mechanism.

10. Complaints

If you believe your data has been handled improperly, you have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (UOOU) — Office for Personal Data Protection — www.uoou.cz

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.