Clarovate

Legal

Privacy Policy

How Clarovate collects, uses, shares and protects personal data — and the rights you have over it.

Last updated: 24 August 2026

1. Who we are and how to contact us

Clarovate is the operating name of Clarovate Media Private Limited, CIN U73100PN2025PTC237305, registered office A 4040, Solitaire Business Hub, Pune, India. Clarovate provides demand generation services to cybersecurity technology companies, publishers and event organisers.

For any privacy, data protection or legal enquiry, contact aditya@clarovate.io.

2. What we collect from site visitors

  • Newsletter sign-ups. First name and work email address when you subscribe to The Brief.
  • Form submissions. Any details you send us through a form on this site, including your message and contact details.
  • Meetings. Where you book a session through the Calendly embed, the name, email, meeting time and any answers you provide to Calendly.
  • Technical data. IP address, browser and device type, referring source, pages viewed and time on page, collected through server logs and analytics cookies.
  • ROI Calculator enquiries. If you ask us to email you your estimate, we record the first name and work email you give us along with the figures shown in that estimate.

3. What we process for campaigns

When we run content syndication and demand generation campaigns we process business contact details of professionals — typically name, job title, employer, business email, business telephone number, country and details of the content engaged with.

Clarovate is a controller for its own marketing, newsletter and audience database. Where we deliver campaigns on behalf of a client and act on that client's documented instructions, Clarovate acts as a processor for that client under a written data processing agreement.

4. Lawful bases (UK GDPR and EU GDPR)

  • Consent — for subscribing to The Brief, for opt-in campaign responses, and for non-essential cookies. You can withdraw consent at any time.
  • Legitimate interests — for business-to-business marketing to relevant professionals, campaign delivery and reporting, site analytics, security and fraud prevention. We balance these interests against your rights and you can object at any time.
  • Contract — to provide services to clients and manage our relationship with them.
  • Legal obligation — where we must retain records for tax, accounting or compliance purposes.

5. How long we keep data

  • Newsletter subscribers: until you unsubscribe, plus 12 months of suppression data.
  • Form and enquiry data: 24 months from the last meaningful interaction.
  • Meeting records: 24 months from the meeting date.
  • Campaign contact records held as controller: reviewed at least every 24 months and removed where there is no continued engagement.
  • Campaign data processed for a client: for the period set in that client's agreement, then deleted or returned.
  • Analytics and log data: up to 26 months.

6. Who we share data with

  • Email delivery and marketing automation providers.
  • Form handling, CRM and data enrichment providers.
  • Scheduling providers, such as Calendly, for booked meetings.
  • Hosting, infrastructure and analytics providers.
  • Clients for whom campaigns are run, where a lead or opportunity is delivered to them.
  • Professional advisers, and authorities where legally required.

We do not allow our providers to use personal data for their own purposes, and each is bound by a written contract.

7. International transfers

Clarovate operates across the UK, Ireland, EMEA and North America, so personal data may be transferred outside the UK or European Economic Area. Where it is, we rely on UK or EU adequacy decisions where available, or on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses together with a transfer risk assessment and appropriate technical safeguards.

8. Your rights under UK and EU GDPR

  • Access — a copy of the personal data we hold about you.
  • Rectification — correction of inaccurate or incomplete data.
  • Erasure — deletion where there is no overriding basis to retain it.
  • Restriction — limiting how we use your data while a matter is resolved.
  • Portability — a machine-readable copy of data you gave us.
  • Objection — including an absolute right to object to direct marketing.
  • Withdrawal of consent — at any time, without affecting prior processing.

To exercise any right, email aditya@clarovate.io. We respond within one month and will tell you if we need to verify your identity. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to the supervisory authority in your country.

9. California residents (CCPA/CPRA)

If you are a California resident you have the right to know what personal information we collect and how it is used and disclosed, to request deletion, to request correction, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising those rights.

Clarovate does not sell personal information for money. Because we deliver business-contact records to clients as part of demand generation campaigns, some of that activity may be treated as a "sale" or "sharing" under CCPA/CPRA. To opt out of that activity, or to make any other CCPA/CPRA request, email aditya@clarovate.io with "California privacy request" in the subject line. An authorised agent may submit a request on your behalf with written proof of authority. We do not knowingly collect or process sensitive personal information for inferring characteristics.

10. India — Digital Personal Data Protection Act 2023

Clarovate Media Private Limited is the Data Fiduciary for personal data it determines the purpose and means of processing under India's Digital Personal Data Protection Act 2023. Where we process personal data on a client's instructions we act as a Data Processor for that client.

Data Principals may request access to a summary of the personal data we process and the processing activities carried out, correction or completion of inaccurate or incomplete data, updating of their data, and erasure of personal data where the purpose is served or consent is withdrawn. Consent given for a purpose may be withdrawn at any time, with the same ease as it was given.

For any Data Principal request, or to raise a grievance for redressal, contact our grievance contact point at aditya@clarovate.io. We acknowledge and respond to grievances within the timelines set by the Act. If a grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India.

11. Children's data

This site and our services are for business professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

12. Cookies

We use strictly necessary cookies to run the site, plus optional analytics and marketing cookies. You can change your choice at any time on our cookie settings page.

13. Changes to this policy

We may update this policy as our services or the law change. The date at the top of this page shows when it was last revised.