Privacy Policy

Last updated: October 2026

1. Our Philosophy

DARS advises organizations on protecting data. We hold ourselves to the same standard. This policy explains what information we collect, why, and how it is handled.

2. What We Collect

Contact form submissions: When you submit our contact form, we collect your name, email, phone number (optional), organization name, organization size, the situation you pick from the dropdown that best describes you, services of interest, and your message. This is stored in our secure database (Cloudflare D1) solely for the purpose of responding to your inquiry.

Compass download form (optional): Before downloading the DARS Compass workbook, you can choose to share your name, company and work email. It is optional, and the “Just download” button gives you the same file without sharing anything. If you share, we use your details to send you one follow-up email about the tool and to understand who finds it useful. We do not send a newsletter unless you ask for one. Only DARS reads these details. They are stored in our CRM and arrive by email at info@darsgrc.com. You can ask us to delete them at any time by emailing info@darsgrc.com. We also keep a plain daily count of how many people click “Just download.” That count has no name, email or other identifying information attached.

Tool results: We do not collect or store tool results. Our browser-based tools do not ask for your email. Results are generated in your browser, or on your own computer for the downloadable Compass workbook, and are not stored on our servers. The one exception is the optional Compass download form described above, which asks for your name, company and work email, and you can skip it.

Blog comments (optional): If you leave a comment on a blog post, we store your name, your email, your organization if the form asks for it, and your comment. Your email is never shown publicly, and comments appear only after we approve them.

Country: With every form submission we store the country your connection appears to come from, which Cloudflare provides. We do not save your IP address in our database.

3. What We Don't Collect

We do not use tracking cookies. We do not use Google Analytics or any third-party analytics that track individual users. We do not sell or rent your information, and we do not share it with other companies. Your details do pass through the services we use to run our systems, such as the hosting and database provider that stores them and the email service that delivers notifications to us. We do not serve advertisements. We do not build user profiles. We use Cloudflare Analytics, which provides aggregate traffic data without tracking individual visitors.

4. Free Tools

All DARS free tools run entirely in your browser, except the downloadable Compass workbook, which runs on your own computer in Excel. The data you enter into our tools is processed locally and is not transmitted to our servers. The DARS Compass workbook does not send your answers, scores or anything else to DARS. Your assessment data never leaves your device.

5. How We Use Your Information

Contact form data is used solely to respond to your inquiry and, if appropriate, to follow up about services you expressed interest in. We will never add you to a marketing list without your explicit consent.

6. Data Storage & Security

Data is stored in Cloudflare D1 (a serverless SQLite database) with encryption in transit via TLS 1.2+. Access to stored data is restricted to the DARS founder. We do not use shared hosting or third-party CRM platforms that could expose your data.

Bot protection: Our contact, blog comment and Compass forms use Cloudflare Turnstile to tell people from automated bots. When you use one of these forms, Cloudflare receives limited information about your browser and connection to make that decision, and Cloudflare’s Turnstile privacy notice applies. We do not store that information.

7. Data Retention

Contact form submissions are retained for 24 months and then deleted unless an active engagement exists. Details you share through the Compass download form are kept for 24 months after our last contact with you, then deleted unless an active engagement exists. You may request deletion of your data at any time by emailing info@darsgrc.com.

8. Your Rights

You have the right to request access to any data we hold about you, request correction of inaccurate data, request deletion of your data, and withdraw consent for any optional communications. To exercise any of these rights, email info@darsgrc.com.

9. Changes to This Policy

We will update this page if our practices change. Material changes will be noted with an updated date at the top of this page.

Questions about this policy? Email info@darsgrc.com