Skip to content
Privacy

Privacy policy.

Last updated 21 October 2026

This policy explains what personal data CLS Wind collects through clswind.com, why we collect it, how long we keep it, who we share it with, and what rights you have over it. We have written it to be readable; the legal language sits where it has to.

1. Who we are

CLS Wind, Inc. (US parent, Delaware) and CLS Wind (UK) Ltd (Scotland, Companies House SC873164, registered office 84 Commercial Street, Edinburgh EH6 6LX) act as joint controllers of personal data collected through this website. References to "CLS Wind", "we", "us", or "our" mean both entities together unless the context makes clear that only one is involved.

2. What data we collect

The website only collects personal data when you actively give it to us:

  • Contact form: name, email address, organization (optional), market (onshore / offshore / both), and the contents of your message.
  • Investor deck request: name, email address, firm (optional), role (optional), and any notes you choose to include.
  • Careers application: name, email address, phone number, the position(s) you are interested in, and the resume or cover letter you upload.

Standard server logs (IP address, user agent, requested URL, timestamp) are recorded by our hosting provider for security, abuse prevention, and operational diagnostics. We do not run web analytics on this site.

3. Why we use it (lawful basis)

For the EU and UK, the lawful basis under Article 6 GDPR / UK GDPR for each form is either your consent (which you give by submitting the form), our legitimate interest in responding to a business inquiry, or, in the case of careers applications, the steps taken at your request prior to entering a contract.

We use the data only for the purpose for which you submitted it: replying to your message, sending the investor deck, or considering you for a role. We do not use it for marketing without separate consent.

4. Cookies

We use only the small number of cookies needed to make the site work and to keep it secure. There are no advertising cookies, no cross-site tracking pixels, and no analytics cookies on this site. The cookies we do use are set by Cloudflare (our hosting and security provider) for bot mitigation and to ensure your session is routed correctly. These are classified as strictly necessary under the ePrivacy Directive and the UK Privacy and Electronic Communications Regulations and do not require opt-in consent.

A small notice appears on your first visit explaining this. Once you dismiss the notice, your choice is stored in your browser's local storage so we don't show it again.

5. Who we share it with

We use a small number of third-party processors to deliver the website and the form handling. Each is bound by data processing terms consistent with our obligations as controllers.

  • Cloudflare, Inc.: hosting, content delivery network, and edge security. Receives all incoming requests, including IP addresses and form submissions.
  • Postmark (ActiveCampaign, LLC): transactional email delivery. Receives the contents of form submissions to relay them to our internal inboxes.
  • Google Fonts: typography. Your browser fetches font files from Google's CDN when you visit the site, which exposes your IP to Google.

We do not sell, rent, or trade personal data to third parties. We do not use it to build profiles for advertising.

6. International transfers

As a US/UK group, we transfer personal data between the United States and the United Kingdom in the normal course of running the business. Where personal data of EU/UK individuals is transferred to the United States, we rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (Cloudflare) where available, and on the UK Extension to that framework, with Standard Contractual Clauses as a fallback. CLS Wind, Inc. is registered or will register under the Data Privacy Framework as applicable.

7. How long we keep it

  • Contact and investor deck submissions: kept for as long as needed to handle the inquiry and the resulting commercial relationship, then deleted within 24 months of the last meaningful contact.
  • Careers applications: kept on file for up to 12 months from submission, after which they are deleted unless you have separately consented to a longer retention period.
  • Server logs: kept for the operational and security retention period of our hosting provider, typically 30 days.

8. Your rights

If you are in the EU or UK

Under the GDPR (EU) and the UK GDPR, you have the right to access the personal data we hold about you, to ask us to correct it or delete it, to restrict or object to certain processing, and to receive a copy of it in a portable format. Where we rely on consent, you may withdraw it at any time.

You can exercise any of these rights by sending us a message and marking it as a privacy request. We will respond within one calendar month. If you believe we have not handled your data correctly, you have the right to complain to the Information Commissioner's Office in the UK (ico.org.uk) or your local supervisory authority in the EU.

If you are a California resident

Under the California Consumer Privacy Act (CCPA, as amended by the CPRA), you have the right to know what personal information we have collected about you, the right to delete it, the right to correct inaccurate information, and the right to opt out of any "sale" or "sharing" of your personal information. We do not sell or share personal information as those terms are defined under the CCPA, and we do not use it for cross-context behavioral advertising.

If you are in another US state with a privacy law

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Florida, Iowa, Tennessee, Indiana, and the other states with comparable consumer privacy laws have rights similar to those described above for California, including the right to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising and the sale of your personal information. We honor these rights as the laws come into effect.

9. Children

The website is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it.

10. Security

We protect personal data with technical and organizational measures appropriate to the risk: encrypted transport (HTTPS) for all submissions, access controls on internal systems, and least-privilege access for the team members who need to handle inquiries. No system is entirely secure; if a breach occurs that affects you, we will notify you and the relevant supervisory authority as required by law.

11. Changes

We may update this policy as the business or the law changes. The "last updated" date at the top reflects the most recent revision. Material changes will be noted at the top of the page for a reasonable period.

12. Contact

Questions about this policy or requests to exercise your rights: send us a message and mark the subject as a privacy request. We will route it to the right person and respond within the timeframe required by the law that applies to you.