Plain-language privacy policy.Plain-language privacy policy.

Last updated October 2026

Who we are

memberwright.com is run by MemberWright LLC of Fort Lauderdale, Florida, United States. We decide what happens to the information described on this page. Write to us at [email protected].

What this site collects

Very little. There is no advertising, and nothing tracks you unless you allow analytics: Google Analytics loads only after you press Accept in the cookie banner, and not at all if you decline. Fonts and images are served from this site.

Like every website, this one is delivered by a hosting company, Cloudflare, whose servers briefly handle your IP address and browser details to send you the pages and to block attacks. We do not use that to identify visitors.

Cookies and storage

This site sets cookies only if you accept analytics. Until you choose, and if you decline, it sets none.

Analytics cookies, only if you accept. Google Analytics sets _ga and _ga_CP4J2ZD57J to tell visits apart and count returning visitors. They last up to two years. You can change your choice at any time with Cookie settings at the bottom of every page; declining removes them.

It keeps a few things in your own browser and never sends them to us:

• Your cookie choice, so the banner does not ask again on every page.
• Your theme (light or dark), if you choose one with the toggle, so the next page opens the same way.
• Your board checklist answers, if you tick them, so they are still there when you come back. “Clear my answers” on that page removes them.
• Copies of the pages you open, so the site opens faster and still works without a signal, including when you add it to your home screen. The request form is never stored this way: it always sends live.

You can delete all of this at any time by clearing this site’s data in your browser, or by removing it from your home screen.

The audit request form

When you request an audit or a call, through the start questions or the contact page, the form sends us your work email, and your name, organization, phone number and answers if you give them. Only the email is required. With them we record the date, the page you sent it from, and two details that help us spot spam: the country your connection comes from, as Cloudflare reports it, and your browser type.

A request that looks automated, for example one sent within seconds of the page opening, is stored the same way but marked as likely spam, and no email is sent about it. We still look through those, so a real request caught by mistake is not lost.

They are stored in a private database at Cloudflare, which hosts this site, and Cloudflare’s email service sends us a notification email. We also send you one confirmation email, through Cloudflare’s email service, at most once a day per address. We use them to reply to you and to prepare for a call. We do not add you to any list unless you subscribe to the newsletter yourself, we do not share your answers with anyone outside the studio, and we never sell them.

The newsletter

If you subscribe to Insights by email, we keep your address to send you new pieces, roughly one every two weeks. Nothing else is sent to it and it is never shared. Every email carries an unsubscribe link, and one click removes you. Until a newsletter tool is chosen, subscriptions arrive as an email to MemberWright; when a tool is chosen, this page will name it.

Why we use it

A request: to answer the request you sent us and to prepare the conversation you asked for. The newsletter: because you asked for it, and you can withdraw that at any time with one click.

Who else handles it

• Cloudflare hosts the site, keeps the request database, sends us the email that tells us a request has arrived and sends you the confirmation, and runs the security that keeps the site up.
• Google Analytics, only if you accept analytics, counts visits and which pages are read: pages viewed, how you arrived, your device and browser, and your approximate location from your IP address. Google Analytics does not store IP addresses, its advertising features are turned off, and we keep its reports for at most 14 months.
• Google Workspace runs our email, so it holds the messages we exchange with you at [email protected].

They handle the information for us, only as needed to provide their service. Some of their servers are in the United States and other countries, so your information may be handled outside the country you live in.

Keeping and deleting your data

We keep audit requests for as long as the conversation is live, then for two years in case you come back.

You can ask us to see, correct, export or delete what we hold about you, or to stop using it. Email [email protected] and we will do it within ten business days. If you are in the UK, the EU or Canada, the section below adds what your law gives you.

If you are in the UK, the EU or Canada

MemberWright LLC, in Fort Lauderdale, Florida, is the controller of the information described on this page: we decide what happens to it. Write to us at [email protected].

Why we may use it (the legal basis under UK and EU law).

• An audit or call request: to take the steps you asked for before a possible contract, and our legitimate interest in answering business enquiries.
• Requests that look automated: our legitimate interest in keeping spam out while making sure a real request is not lost.
• The newsletter: your consent, which you can withdraw at any time by writing to us or with the unsubscribe link in any issue.
• Analytics: your consent, given with Accept in the cookie banner and withdrawn at any time with Cookie settings at the bottom of every page.
• Keeping the site running and secure: our legitimate interest in protecting the site and its visitors, through Cloudflare.

Transfers to the United States (UK and EU). We, Cloudflare and Google are in the United States, so your information is transferred there. Where a provider is certified under the EU–US Data Privacy Framework (and its UK extension), we rely on that; otherwise on the European Commission’s Standard Contractual Clauses, with the UK Addendum for UK data. Ask us and we will send you a copy of the safeguards.

Your rights. You can ask to see your information, correct it, delete it, restrict how we use it, receive it in a portable format, or object to our use of it, including any use based on our legitimate interests. Where we rely on consent, you can withdraw it at any time. We answer within ten business days, well inside the one-month limit the law sets. In Canada, the same requests are answered under PIPEDA.

Complaints. You can complain to the Information Commissioner’s Office in the UK (ico.org.uk), to the data protection authority where you live in the EU, or to the Office of the Privacy Commissioner of Canada (priv.gc.ca). We would be grateful for the chance to put it right first.

No automated decisions. We do not make decisions about you by automated means alone, and we do not profile visitors.

Children

This site is written for association staff and boards. It is not meant for children, and we do not knowingly collect information from anyone under 16.

Platforms we build for clients

Member data inside a platform we build belongs to that association and lives in accounts in its name. Each platform carries its own privacy policy written for its members. This page covers memberwright.com only.

Changes

If this policy changes, we update it here and change the date at the top.

Questions

MemberWright LLC, Fort Lauderdale, Florida. [email protected]