Controller and contact
The entity responsible for operating ClearCalc is [COMPANY LEGAL NAME], [COMPANY ADDRESS], registration number [COMPANY REG. NUMBER]. These identifiers have not yet been supplied; this policy is a draft pending completion of controller and vendor details.
For privacy enquiries or rights requests, email info.ClearCalc@gmail.com. Include enough context to identify your request, but do not attach identity documents unless we explain a secure, proportionate verification process.
Calculator inputs and browser storage
Calculations run locally. Saved scenarios, calculator preferences, currency choice, health results and cookie choices can be retained in this browser. ClearCalc does not operate a server account or a database for these records. Data may be available to other people using the same browser profile.
Sharing a calculator link may put input values in the URL query string. That URL can be seen by recipients and may appear in hosting request logs or browser history. Health-score sharing uses a fragment containing category scores rather than quiz answers; recipients can still read those scores.
You can delete saved scenarios in My Money and clear other stored records through browser settings. A downloaded backup is a separate copy under your control.
Contact, newsletters and technical information
The Contact form opens a draft in your own email application; it does not submit a message to a ClearCalc server. When you send an email, your email address, message and any supplied name reach our Gmail mailbox. Newsletter forms currently do not enroll you in a mailing service.
Site delivery can involve IP address, request URL, time, device/browser information and security logs processed by the hosting provider. External Google Fonts requests disclose ordinary connection information such as IP address and browser data to Google. Financial input values are not deliberately sent to fonts services.
Purposes and legal bases
We use correspondence to answer enquiries and resolve corrections. Under GDPR and UK GDPR this may rely on legitimate interests in operating and improving the service, or steps requested before a contract where relevant. Security and reliable site delivery may also rely on legitimate interests, subject to a balancing assessment.
Non-essential advertising or analytics storage requires consent where applicable. A future newsletter requires an appropriate subscription basis and an unsubscribe option. Legal obligations may require retention or disclosure of particular records. Browser preferences requested by you are used to provide that function, not for behavioral advertising.
Vendors, recipients and international transfers
Current external services include the site hosting service [HOSTING PROVIDER AND PRIVACY POLICY], Google Fonts for typefaces, and Google/Gmail for messages sent to our public address. Confirm the hosting entity, applicable contracts and retention settings before publication. Google’s privacy policy is available at https://policies.google.com/privacy.
Google AdSense is planned, not currently active. If enabled, Google and its disclosed advertising technology providers may process cookie identifiers, IP addresses, ad interactions and device data to deliver, measure and, with appropriate choices, personalize ads. The live CMP must show the applicable vendor list before advertising storage is enabled. See https://policies.google.com/technologies/partner-sites.
Providers may process information outside your country. Where GDPR or UK GDPR applies, the operator must establish applicable adequacy decisions or contractual safeguards, including EU standard contractual clauses or the UK equivalent where required; none should be assumed without checking the actual provider arrangements.
Retention
Browser records remain until you remove them, the browser clears storage or a future incompatible format is discarded. Cookie choices have no automatic expiry in this placeholder; a replacement CMP must apply its own disclosed validity and renewal rules.
Proposed operational retention targets, pending confirmation: routine correspondence up to 12 months after resolution; technical logs up to 90 days unless needed for security; subscription data until unsubscribe, with a minimal suppression record if required. These are draft targets, not claims about current provider settings. Legal claims or statutory duties may justify longer retention, documented for the specific purpose.
GDPR and UK GDPR rights
Where applicable, you can request access, rectification, erasure, restriction, portability for qualifying processing, and object to processing based on legitimate interests. You can withdraw consent without affecting the lawfulness of earlier processing. Some rights have legal exceptions.
We aim to handle qualifying requests within one month, with extensions permitted by law for complex requests and an explanation where required. You may complain to your relevant EU supervisory authority or the UK Information Commissioner’s Office at https://ico.org.uk. We do not make legally significant automated decisions from calculator or health-score results.
California privacy rights
If the CCPA/CPRA applies to the operator, eligible California residents may request to know/access, delete or correct personal information, opt out of sale or sharing, limit qualifying use of sensitive information, and exercise rights without unlawful discrimination. An authorized agent may make a request subject to lawful verification.
We do not currently run advertising scripts or sell calculator records. Future cross-context behavioral advertising may constitute sharing under California law even without payment. Before enabling it, the operator must implement the required opt-out, applicable Global Privacy Control handling, notices and vendor terms; this placeholder alone does not satisfy those obligations.
Children, security and changes
ClearCalc is intended for general adult financial education and is not directed at children under 13. Do not submit a child’s personal data. If a concern is reported, we assess it and take appropriate action.
We seek proportionate safeguards but cannot guarantee absolute security. This policy is updated when actual processing changes; refer to the Last updated date and contact us for clarification.