Privacy Policy

Last updated: March 21, 2026

This Privacy Policy describes how Gap Assessment ("we," "us," or "our") collects, uses, and handles information when you visit freegapassessment.com or use our free compliance gap assessment tool.

1. Information We Collect

We collect two types of information:

Information you provide directly. If you submit your email address — for example, to receive your assessment results or to sign up for updates — we collect that email address. We do not sell or share your email with third parties for their marketing purposes.

Information collected automatically. When you visit our website, we automatically collect certain usage data through Google Analytics, including:

• Pages visited and time spent on each page
• How you arrived at our site (search engine, direct link, referral)
• Browser type, device type, and operating system
• General geographic location (country and city level)
• Interactions such as clicks and scroll depth

This data is collected in aggregate and does not identify you personally. It is used solely to understand how visitors use the site so we can improve it.

2. How We Use Your Information

We use the information we collect to:

• Operate and improve the gap assessment tool and website
• Send you your assessment results if you provide an email address
• Send occasional product updates or compliance content if you opt in
• Understand which content and features are most useful to visitors
• Diagnose technical issues and improve site performance

We do not use your information for automated decision-making or profiling.

3. Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 uses cookies and similar tracking technologies to collect and report website usage statistics. The data collected by Google Analytics is processed and stored by Google in accordance with Google's Privacy Policy.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

4. Cookies

Our website uses cookies — small text files stored on your device — primarily through Google Analytics. These cookies help us understand how visitors interact with the site. They do not store personally identifiable information.

You can control cookies through your browser settings. Disabling cookies may affect some site functionality but will not prevent you from using the assessment tool.

5. Data Sharing and Disclosure

We do not sell your personal information. We do not share your information with third parties except in the following limited circumstances:

• Service providers. We use Google Analytics to process usage data on our behalf. Google acts as a data processor under appropriate agreements.
• Legal requirements. We may disclose information if required by law, court order, or government authority.
• Business transfers. If Gap Assessment is acquired or merged, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information is subject to a different privacy policy.

6. Data Retention

We retain email addresses for as long as you remain subscribed to our communications. You can unsubscribe at any time using the link in any email we send, and we will remove your address promptly. Google Analytics data is retained for 14 months by default, per Google's standard retention settings.

7. Your Rights

Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, or delete the information we hold about you. To exercise any of these rights, contact us at the email address below.

If you are located in California, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information as defined under the CCPA.

8. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

9. Links to Other Websites

Our website contains links to third-party websites, including compliance resources and documentation from organizations like NIST, ISO, and the AICPA. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. If we make material changes, we will make reasonable efforts to notify users — for example, by posting a notice on the homepage. Continued use of the site after changes are posted constitutes acceptance of the updated policy.