Privacy Policy

ExpertGRC (“we”, “us” or “our”) is a compliance consulting firm located in Denver, Colorado. Your privacy is important to us and this privacy statement will explain how ExpertGRC uses the personal data we collect from you when you visit our website.

Purpose

The purpose of this Privacy Statement is to provide our website visitors with an understanding of:

  • The types of data that we collect

  • How and why we collect your data

  • Who we share your data with

  • How we use, process, store, and protect your data

  • Our contact details so you can request information about the processing of your data and your rights to do so

Data that We Collect

ExpertGRC collects the following data when you visit our website:

  • Your email address if you choose to contact us

  • Analytics/ Cookies by type:

    • Essential for core functionality of this website

    • Enhanced performance and functionality of this website

    • Analytics to help us understand traffic and activity

Analytics

This website collects personal information to power our site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity.

Cookies

This website collects personal information to power our site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity.  For more information about cookies, please see https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses

Website Visitors

This website is hosted by Squarespace. Squarespace collects personal information when you visit this website, including:

  • Information about your browser, network and device

  • Web pages you visited prior to coming to this website

  • Web pages you view while on this website

  • Your IP address

Squarespace needs the data to run this website, and to protect and improve its platform and services. You can read more about how Squarespace uses your data (site usage information of end users) for its own purposes in their Privacy Policy, found here: https://www.squarespace.com/privacy

How do we transfer and store your data?

All of your analytics and cookie data is stored securely by SquareSpace, see https://www.squarespace.com/security for more information.

If you send us an email, we will store this securely in our company’s hosted email platform, see https://workspace.google.com/security/ for more information.

All data is processed and stored in the United States.  

What are your data protection rights?

ExpertGRC would like to make sure you are fully aware of all of your data protection rights.

 Every website visitor is entitled to the following:

The right to access – You have the right to request ExpertGRC for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that ExpertGRC correct any information you believe is inaccurate. You also have the right to request ExpertGRC to complete the information you believe is incomplete.

The right to erasure – You have the right to request that ExpertGRC erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that ExpertGRC restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to ExpertGRC’s processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that ExpertGRC transfer the data that we have collected to another organization, or directly to you, under certain conditions.

How to Contact Us

If you have any questions about this privacy notice, the data that we hold on you, or you would like to exercise one of your data protection rights, please contact us:

Email:  cynthia@expertgrc.com

Or write to us at:

ExpertGRC

Attn: Data Protection Officer

10600 E. 28th Avenue

Denver, CO 80238

Changes to our Privacy Notice

ExpertGRC keeps its privacy notice under regular review and places any updates on this page.  This privacy notice was last updated on April 28, 2026.