Last updated: July 21, 2026
Privacy Notice
ClearSite Security is a service of Lux Global Consulting LLC (“we,” “us,” “our”), doing business as ClearSite Security. This notice explains what personal information we collect when you ask us to scan your website, why we collect it, and the choices you have. We’ve kept it short and plain on purpose.
What we do (in one paragraph)
We run a low-impact, read-only, external, non-destructive security and privacy scan of the public-facing website you send us. We look at things anyone on the open internet can already see — your security response headers, SSL/TLS setup, SPF/DMARC email-spoofing posture, whether your contact form appears to have anti-bot protection (checked by reading your page’s public HTML only), and your privacy/tracker exposure. We never log in, never submit data to your forms, never test your internal systems, and never try to break, overload, or take down your site. It’s a look from the outside, at a single point in time.
What we collect and why
We aim to collect only the information reasonably needed to provide and operate the service:
- Your email address and message — so we can send you the teaser summary or full report, and reply to you. You give this to us when you email us your URL.
- The website URL/domain you submit — this is what tells us what to scan. We review the submitted domain, its ordinary public redirects, and closely related public hostnames or DNS records reasonably necessary for the listed checks, from a public, external vantage point.
- Scan findings — the technical observations we gather about your site’s publicly accessible infrastructure (e.g., which security headers are present or missing). These describe your website, and may indirectly relate to you as its owner.
- Payment information — if you buy the full report (a one-off USD $297), Stripe collects your payment-card and transaction information directly. We may receive your name, billing contact information, payment status, transaction amount, card brand and last four digits, and information needed to handle refunds or disputes. We do not receive or store your complete card number.
- Basic technical data — depending on how you contact us, this may include IP address, browser information, and website/server logs.
How we use it
- To run the scan you requested and prepare your teaser summary and/or full report.
- To deliver that report to you and answer your questions about it.
- To process your payment if you buy the full report.
- To keep basic business records (e.g., who we did work for, invoices).
We do not use your information to build advertising profiles, and we do not scan any domain other than the one you send us (and its closely related public hostnames as described above).
Your findings are confidential
The findings we produce about your website are for you, the named client, only. We treat them as confidential and don’t share them with other customers, publish them, or hand them to third parties — except the limited service providers below, or where the law requires it.
Service providers we use
We’re a small operation and rely on a few trusted providers to run the service. We share only what each one needs:
- Zoho processes email and report communications to provide our email service (our
hello@clearsitesecurity.cominbox and outgoing mail). - Stripe processes payment and transaction information to complete payments, prevent fraud, comply with legal requirements, and operate its services.
These companies process information under their own terms and privacy notices, and may use additional service providers.
We do not sell your data
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Browser privacy signals and third-party tracking
We do not use your ClearSite website activity for cross-site behavioral advertising. Because we do not sell or share personal information for cross-context behavioral advertising, browser opt-out signals such as Global Privacy Control (GPC) or Do Not Track do not currently change how we process your information.
Our service providers may collect limited technical information needed to host, secure, operate, or process payments for the service under their own privacy notices. We do not permit advertising networks to track visitors across unrelated websites through the ClearSite website.
How long we keep it
- Teaser (free) requests: we keep the email and URL only as long as needed to respond, and routinely clear them within about 90 days.
- Paid reports and communications: we generally keep these for up to 2 years for support and dispute handling.
- Invoices, transaction records, and other records needed for tax, accounting, fraud-prevention, or legal purposes: we keep for the applicable statutory period, generally at least 4 years and longer where required. We don’t need to retain the full technical report merely because we retain an invoice.
When we no longer need something, we delete it or render it anonymous.
Your rights and how to use them
You can ask us to:
- See what personal information we hold about you,
- Correct it if it’s wrong,
- Delete it, or
- Get a copy of what you gave us.
Just email hello@clearsitesecurity.com with your request. We’ll verify that the request really comes from you (usually by confirming the email address you used) and respond within a reasonable time. Using these rights won’t cost you anything and we won’t treat you differently for asking.
We voluntarily accept reasonable requests to access, correct, delete, or receive a copy of personal information associated with you, subject to identity verification and records we must retain for legal, tax, security, or dispute-handling purposes. Applicable law may provide additional rights depending on where you live.
A note on what this service is (and isn’t)
Our scan is an observational, external snapshot, provided “as is,” with no warranty and no guarantee that your site is secure. It is not a penetration test, a source-code review, or a substitute for a full security audit, and it is not legal advice. It reflects what was publicly visible at the time we looked.
Security of your information
We take reasonable steps to protect the information you give us, and we keep it to a minimum so there’s less to protect. No method of storage or transmission is perfectly secure, but we limit access to your data to what’s needed to serve you.
Children
Our service is for businesses and their owners. It isn’t directed to children, and we don’t knowingly collect information from anyone under 13.
Changes to this notice
If we update this notice, we’ll change the “Last updated” date above. For significant changes, we’ll do our best to let recent clients know by email.
Contact us
Questions or privacy requests? Reach us at:
Lux Global Consulting LLC (dba ClearSite Security)
Email: hello@clearsitesecurity.com
Mail: PO Box 27251, Oakland, CA 94602, USA