Legal

Privacy Notice

Effective date: August 4, 2026  |  Last updated: August 4, 2026

This notice explains how Redpath collects, uses, discloses, retains, and protects personal information when people use our website, communicate with us, participate in Redpath resources or events, apply for work, or interact with us in another business context.

1. Introduction and scope

Redpath Consulting Group, LLC (“Redpath,” “we,” “us,” or “our”) is a U.S.-based Salesforce consulting firm serving higher education, nonprofit, public-sector, and other mission-driven organizations. This Privacy Notice applies to personal information Redpath handles in connection with redpathcg.com and related webpages, contact forms, assessments and diagnostic tools, newsletters, event and webinar registrations, business development, recruiting interactions, and other communications that link to this Notice (collectively, the “Website”).

This Notice does not replace the privacy terms in a client agreement, data processing agreement, employment notice, or another notice that applies to a specific interaction. It also does not govern third-party websites or services that Redpath does not control.

2. Redpath’s role when providing client services

Redpath’s consulting work may involve configuring, integrating, supporting, or migrating systems that contain personal information controlled by a client. In those situations, the client generally determines why and how the information is processed, and Redpath acts as a service provider or processor under the client’s instructions and the applicable contract.

If your question or privacy request concerns information held by a Redpath client — for example, information in a university, nonprofit, foundation, healthcare, or government Salesforce environment — please contact that organization first. Redpath will support the client in responding as required by contract and applicable law.

3. Personal information we collect

Depending on how you interact with Redpath, we may collect the following categories of information:

  • Contact and professional information. Your name, work email address, phone number, organization, job title, industry or sector, professional profile information, and other business contact details.
  • Inquiry and correspondence information. The content of messages, project interests, service needs, support requests, meeting notes, and other information you choose to provide.
  • Marketing and event information. Newsletter preferences, event or webinar registrations, attendance, engagement with communications, and unsubscribe choices.
  • Assessment and resource information. Responses submitted through Redpath diagnostic tools, maturity assessments, calculators, surveys, downloads, and related results or recommendations.
  • Recruiting information. Resume or CV details, employment and education history, skills, application responses, interview information, references, and other information submitted through Redpath’s recruiting provider or directly to Redpath.
  • Website and device information. Internet Protocol address, browser and device type, operating system, language, referring and exit pages, pages viewed, links clicked, dates and times of visits, approximate location derived from IP address, cookie or similar identifiers, and diagnostic or error data.
  • Client-service information. Information that a client, its personnel, or its authorized systems make available to Redpath for an engagement. The categories vary by project and are governed by the client agreement and the client’s instructions.
  • Other information. Information you authorize another person or service to provide to us, and information from public professional sources, partners, event sponsors, or referrals where permitted by law.

Please do not submit sensitive personal information, protected health information, student records, payment-card information, passwords, or confidential client data through a public Website form unless Redpath specifically requests it and provides an approved secure method.

4. How we collect information

We collect personal information in three primary ways:

  • Directly from you when you submit a form, request information, complete an assessment, register for an event, subscribe to communications, schedule a meeting, apply for a position, or communicate with us.
  • Automatically when you use the Website, through server logs, cookies, pixels, local storage, analytics tools, and similar technologies.
  • From organizations and third parties, such as your employer, a Redpath client, referral source, event partner, recruiting provider, professional networking service, or publicly available professional source.

5. How we use personal information

Redpath may use personal information to:

  • Respond to inquiries, schedule conversations, prepare proposals, and manage current or prospective business relationships.
  • Provide, administer, support, secure, and improve our consulting services and Website resources.
  • Generate and deliver assessment scores, findings, recommendations, or other requested materials. Any automated scoring on the Website is intended to provide informational guidance and is not used to make legal or similarly significant decisions about individuals.
  • Send Redpath insights, event invitations, and other marketing communications when permitted by law and consistent with your preferences.
  • Understand Website usage, evaluate content and campaigns, troubleshoot errors, and improve performance and accessibility.
  • Protect the security and integrity of our Website, systems, personnel, clients, and business; prevent misuse; and investigate suspected fraud or security incidents.
  • Evaluate applicants, conduct recruiting and hiring activities, and maintain employment-related records.
  • Comply with law, enforce agreements, establish or defend legal claims, and respond to lawful requests from authorities.
  • Carry out another purpose disclosed when the information is collected or with your consent.

6. Legal bases for processing

Where a law requires Redpath to identify a legal basis for processing, we rely on one or more of the following: your consent; steps taken at your request before entering a contract or performance of a contract; our legitimate interests in operating, securing, improving, and marketing our business and services; compliance with legal obligations; and protection of vital interests or legal rights. Where processing is based on consent, you may withdraw consent at any time, without affecting processing that occurred before withdrawal.

7. Cookies and similar technologies

What these technologies are

Cookies are small text files placed on a browser or device. Similar technologies include pixels, tags, scripts, local storage, and software development tools. Some are temporary and expire when a browser closes; others remain until they expire or are deleted. A technology may be placed by Redpath (first party) or by a service provider whose technology appears on the Website (third party).

How Redpath may use them

  • Strictly necessary technologies support core Website functions, security, network management, and form delivery.
  • Functional technologies remember choices and support enhanced Website features.
  • Analytics and performance technologies help us understand traffic, engagement, errors, and Website performance.
  • Marketing technologies help measure campaigns and, if enabled, support relevant business-to-business outreach.

Your choices

Where the Website provides a cookie preference tool, you can use it to manage non-essential technologies. You can also configure your browser to block or delete cookies. Blocking some technologies may affect Website features. Some browsers transmit Do Not Track or Global Privacy Control signals. Because technical standards and legal requirements differ, Redpath responds to recognized browser-based privacy signals where required by applicable law.

8. How we disclose personal information

Redpath may disclose personal information to the following recipients for the purposes described in this Notice:

  • Service providers that support hosting, cloud infrastructure, analytics, security, form processing, customer relationship management, email delivery, scheduling, event delivery, document collaboration, recruiting, and other business operations.
  • Clients and authorized project participants when needed to provide services, carry out instructions, or support a joint engagement.
  • Professional advisors, including attorneys, accountants, auditors, insurers, and consultants, subject to appropriate confidentiality duties.
  • Government authorities, regulators, courts, law enforcement, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, security, or property; investigate misuse; or enforce agreements.
  • Parties to a business transaction or due diligence process involving a merger, acquisition, financing, reorganization, sale of assets, or similar event, subject to appropriate protections.
  • Other recipients at your direction, with your consent, or as otherwise disclosed when information is collected.

Redpath does not sell personal information for monetary consideration. Some privacy laws may define disclosures of online identifiers to analytics or marketing providers as a “sale,” “sharing,” or “targeted advertising” even when no money is exchanged. Where those laws apply, Redpath provides the required notice and choices, which may include a Website cookie preference tool, a recognized browser-based opt-out signal, or a privacy request submitted using the methods below.

9. Retention

Redpath retains personal information for as long as reasonably necessary for the purpose for which it was collected, including to maintain a business or employment relationship, provide services, honor communication preferences, meet contractual commitments, comply with legal and accounting requirements, resolve disputes, and enforce agreements.

Retention periods depend on the type of information and context. For example:

  • Client-service information is retained according to the applicable client agreement, client instructions, and Redpath’s records-management and security requirements.
  • Inquiry and relationship records may be retained while a relationship is active and for a reasonable period afterward for follow-up, continuity, legal, and recordkeeping purposes.
  • Marketing information is retained until you unsubscribe or Redpath no longer needs it, although a limited suppression record may be retained to honor your opt-out.
  • Recruiting information is retained according to Redpath’s recruiting and employment recordkeeping requirements and applicable law.
  • Cookie, analytics, log, and diagnostic information is retained according to the settings and business purpose of the relevant technology.

When retention is no longer necessary, Redpath will delete, de-identify, or securely dispose of the information, subject to technical limitations and lawful exceptions.

10. Security

Redpath uses administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, use, alteration, disclosure, or destruction. Safeguards are selected based on the nature of the information and may include access controls, authentication, encryption in transit or at rest where appropriate, logging and monitoring, vendor oversight, employee training, secure development and change practices, backups, and incident-response procedures.

No method of transmission, storage, or security is completely reliable. Please use care when sending information over the internet and use the secure channel Redpath or a client specifies for sensitive or confidential project data.

11. International data transfers

Redpath is based in the United States, and the Website and our service providers may process information in the United States and other countries. Those countries may have privacy laws that differ from the laws where you live. Where required, Redpath uses appropriate contractual or other safeguards for international transfers.

12. Your privacy rights and choices

Depending on where you live and the law that applies, you may have the right to:

  • Confirm whether Redpath processes your personal information and request access to it.
  • Request correction of inaccurate personal information.
  • Request deletion of personal information, subject to legal exceptions.
  • Request a portable copy of certain information.
  • Object to or request restriction of certain processing.
  • Withdraw consent where processing is based on consent.
  • Opt out of targeted advertising, sale, or certain profiling, where applicable.
  • Appeal Redpath’s decision on a privacy request, where applicable.
  • Lodge a complaint with a regulator or supervisory authority.
  • Receive equal service and not be discriminated against for exercising a privacy right.

To submit a request, email info@redpathcg.com with the subject line “Privacy Request” or use the contact form. Describe the right you wish to exercise and the information or interaction involved. If Redpath denies a request and applicable law provides an appeal right, reply with the subject line “Privacy Appeal” and explain why you believe the decision should be reconsidered.

Redpath may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where permitted by law, but Redpath may require proof of authorization and direct identity verification. Redpath will respond within the time required by applicable law. Some rights are subject to exceptions, and Redpath may decline a request when permitted or required by law.

If Redpath holds information only as a processor or service provider for a client, Redpath may direct the request to that client or identify the client as the appropriate organization to contact.

13. Marketing communications

You may unsubscribe from marketing email at any time by using the unsubscribe link in the message or contacting Redpath. Opting out of marketing does not prevent Redpath from sending non-promotional communications related to an existing relationship, request, event registration, project, security issue, or legal obligation.

14. Children’s privacy

The Website is intended for business and professional audiences and is not directed to children under 13. Redpath does not knowingly collect personal information through the Website from children under 13. If you believe a child has provided personal information to Redpath, contact us so we can investigate and take appropriate action.

15. Third-party websites and services

The Website may link to or integrate with third-party services, including scheduling, video conferencing, social media, event registration, recruiting, maps, embedded content, or other tools. For example, Redpath’s careers page may direct applicants to ADP Workforce Now. A third party’s collection and use of information is governed by that party’s privacy notice, not this Notice, except for information the third party provides to Redpath for Redpath’s own purposes.

16. Changes to this Privacy Notice

Redpath may update this Notice to reflect changes in our practices, technology, services, or legal obligations. The “Last updated” date identifies the most recent revision. If a change is material, Redpath will provide additional notice when required by law, such as a prominent Website notice or direct communication.

17. Contact Redpath

Questions, concerns, and privacy requests may be directed to: