How TrueNorth handles information.

We use Plausible Analytics, a privacy-first measurement product that does not set cookies, does not track visitors across sites, and does not collect personally identifiable information. We use it to count page views and outbound clicks. We do not run Google Analytics, Meta Pixel, LinkedIn Insight Tag, or any third-party advertising tracker on this site.

Because we set no marketing or third-party cookies, we do not display a cookie consent banner. The only state stored in your browser is functional — e.g., a session token if you submit an audit request.

Audit requests, contact-form submissions, and tool-report email captures collect the name, work email, and other fields explicitly requested in the form. We use that information only to (a) respond to the request, (b) deliver the report you asked for, and (c) maintain the engagement record if we begin work together.

We do not sell, rent, or trade contact information. We do not enroll submitters into a third-party marketing automation list. We do not segment email addresses by behavior and broadcast to lookalike audiences.

Three categories of service provider receive submitted information in the ordinary course of operating the site: (a) our email transactional provider, used to send the tool report and audit confirmation; (b) our hosting provider, on whose infrastructure this site runs; and (c) our internal notification channel, used to triage incoming audit requests. Each is bound by a written data-processing agreement.

Audit-request records are retained for the duration of the engagement (if commenced) plus six years thereafter, consistent with ERISA recordkeeping under §107. Tool report submissions are retained for twenty-four months and then permanently deleted. Site analytics are retained at aggregate level only.

You may request a copy of any personal information we hold about you, request correction or deletion, or withdraw consent to further communications by writing to the address in our contact page. We respond within thirty (30) days. If you are a California resident, the rights afforded under the California Consumer Privacy Act apply; we treat all visitors to the same effective standard.

Material changes to this policy are noted on this page with a new effective date. Non-material clarifications may be made without notice. We do not retroactively broaden the use of information collected under a prior version of the policy.

Privacy questions may be addressed via /contact. Please mark the message “Privacy inquiry” for routing.