Privacy policy

1. Who we are

ClearLane Cyber LLC ("ClearLane Cyber," "we," "us" or "our") provides cybersecurity leadership and advisory services to companies in the freight and logistics industry. This policy explains how we handle personal information collected through clearlanecyber.com (the "Site"), our email communications, and our marketing and business development activities.

2. Information we collect

Information you give us

• Contact requests: whatever you include when you email or call us, such as your name, title, email address, phone number, company, company size and what prompted you to reach out.
• Guide downloads and newsletter sign-ups: your name, work email, company and type of business.
• Conversations and meetings: information you share with us by email, phone or video call.

Information collected automatically

When you visit the Site, we and our service providers collect basic technical information such as your IP address, browser type, device type, pages viewed, the page that referred you and the date and time of your visit.

Information from other sources

We may receive business contact information from referral partners, industry events and professional networking sites such as LinkedIn.

3. How we use it

• To respond to your questions and schedule conversations
• To send the guides, briefings and other materials you request
• To prepare proposals and deliver the services you engage us for
• To operate, secure and improve the Site
• To meet legal, tax and accounting obligations and protect our rights

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4. How we share it

We share personal information only as follows:

• Service providers that host the Site, send email, schedule meetings and store files, under contracts that limit their use of the information to serving us.
• Engagement partners such as incident response or testing firms, only when you ask us to involve them and only what they need.
• Professional advisers such as our lawyers, accountants and insurers.
• Legal requirements: when required by law, subpoena or court order, or to protect the rights and safety of our clients, our team or others.
• Business transfers: as part of a merger, acquisition or sale of assets, subject to this policy.

5. Client engagement information

Information our clients share with us during an engagement, including system details, assessment findings, policies and incident information, is governed by the client's written agreement with us and our Confidentiality and Data-Handling Policy, not by this website policy. In short: it is used only for that client's engagement, kept separate from other clients' information, never used to train public AI tools without the client's written approval, and returned or destroyed when the engagement ends.

6. Cookies and analytics

The Site does not use analytics, advertising or retargeting cookies. Our hosting provider keeps standard server logs, such as IP address, browser type and pages requested, for security and troubleshooting. If we add an analytics tool in the future, we will update this policy before we do. You can block or delete cookies in your browser settings; the Site will still work. Where your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any optional tracking.

7. Email from us

If you request a guide or subscribe to the Freight Security Briefing, we will email you about cybersecurity topics relevant to logistics. Every marketing email includes an unsubscribe link, and you can also ask us to stop by writing to the address below. We will still send messages related to an active engagement.

8. How long we keep it

We keep contact and marketing information for as long as we have an active business relationship or you remain subscribed, and generally no more than three years after our last contact with you. We keep business records for as long as the law requires. When information is no longer needed, we delete it or make it anonymous.

9. How we protect it

We apply the same controls we recommend to our clients, including multi-factor authentication on every account, encryption of data in transit and at rest, least-privilege access for our team, managed and encrypted devices, and careful review of the service providers we use. No system is perfectly secure, but if a breach affecting your personal information occurs, we will notify you as required by law.

10. Your choices and rights

You can ask us to:

• Confirm whether we hold personal information about you and give you a copy
• Correct information that is inaccurate
• Delete your information
• Stop sending you marketing email

Depending on where you live, including Virginia and other states with consumer privacy laws, you may have additional rights. We honor these requests for everyone, whether or not a law requires it. To make a request, contact us using the details below. We will verify your identity, respond within 45 days, and will not treat you differently for making a request. If we decline your request, you may appeal by replying to our decision.

11. Children

The Site is intended for business professionals. We do not knowingly collect personal information from anyone under 16.

12. Changes to this policy

We may update this policy as our services or the law change. We will post the new version here with a new "last updated" date and, for significant changes, notify subscribers by email.

13. Contact us