Skip to content

    Sherpa is now Navorda. Read the announcement

    Navorda
    Legal

    Privacy Policy

    Last updated: 11 September 2026

    This policy explains how CabSan Advisory S.L., trading as CabSan Solutions ("CabSan", "we", "us"), collects, uses, and stores personal data you submit through www.navorda.com (the "site"). CabSan is a Spanish company headquartered in Seville, Spain, and acts as the data controller for the data described below.

    Note: in September 2026 the product was renamed from Sherpa to Navorda and this site moved from www.sherpa-platform.com to www.navorda.com; every old address redirects here. In May 2026 the site had already moved from www.cabsansolutions.com, which now hosts the CabSan Solutions corporate site with its own privacy policy.

    1. What we collect

    We collect personal data in four ways:

    • Demo request form. When you click "Request a demo" and submit the form, we collect your name, work email, company, and any optional fields you choose to fill in (role, phone, country, pipeline size, message). We also record which surface of the site the form was submitted from (e.g. homepage hero, product page) for internal analytics.
    • Corporate Distance Assessment. When you take the assessment at /corporate-distance, we collect your name, position, company, work email and, optionally, your phone number, together with your answers to the questionnaire (how your organization operates — not personal data), your scores, whether you ticked the mailing-list box, and the surface, campaign parameters and referrer you arrived from. The shareable results link contains only your answers, never your contact details. Your browser keeps an in-progress draft in session storage so you can resume after a reload; it is cleared when you finish.
    • Site analytics. If you accept analytics cookies, we collect anonymised usage data through Google Analytics 4 (page views, device type, country, referral source). You can decline at any time via the "Manage cookies" link in the footer.
    • Direct communication channels. When you contact us — or ask us to contact you — by email, phone, or messaging services such as WhatsApp, we collect the contact details you use (e.g. your phone number and profile name), the content of your messages, and the date and time of the conversation. See Section 3 for details on WhatsApp.

    We do not collect special-category personal data, payment information, or government identifiers through this site. Procurement of Navorda happens via the AWS Marketplace, which has its own privacy terms.

    2. How we use it

    We use the data you submit to:

    • Reply to your demo request and schedule an introductory call.
    • Send follow-up communication about Navorda that is relevant to the context of your enquiry. You can opt out at any time by replying to any of our emails with the word "unsubscribe".
    • Produce and follow up on your Corporate Distance Assessment report, and — only if you ticked the mailing-list box — send you occasional Navorda insights on development governance.
    • Build aggregated, anonymised statistics from assessment answers (never individual results).
    • Improve the site and our outreach (aggregated, non-identifying analytics).

    We do not sell your personal data and we do not share it with third parties for advertising.

    3. WhatsApp and other messaging channels

    CabSan may offer WhatsApp as a way to contact us or to receive updates you have requested. If you communicate with us via WhatsApp:

    • We process your phone number, your WhatsApp profile name, and the content and timing of the messages you exchange with us, solely to answer your enquiry and provide the follow-up you asked for.
    • WhatsApp is a service of Meta Platforms (WhatsApp Ireland Limited for users in the EU). Your use of WhatsApp itself is governed by the WhatsApp Privacy Policy; when we exchange messages with you through the WhatsApp Business services, WhatsApp/Meta processes the messages as described there.
    • We only message you on WhatsApp if you contacted us there first or expressly opted in. You can stop receiving messages at any time by replying "STOP" or emailing info@cabsansolutions.com.
    • Conversation data from WhatsApp is subject to the same retention periods, legal bases, and rights described in Sections 5–7 of this policy. We do not use WhatsApp conversation data for advertising and we do not share it with third parties.

    4. Where data is stored

    Form submissions are processed by Formspree, our form-relay provider (servers located in the United States), and immediately forwarded to a CabSan-controlled email inbox hosted by Microsoft 365 (servers located in the European Union). Formspree retains submissions for the duration of our subscription with them; you can request deletion at any time (see Section 6).

    Site analytics are processed by Google LLC; see the Google Privacy Policy for details.

    CabSan operates the rest of the Navorda platform on AWS infrastructure hosted in the European Union.

    5. How long we keep it

    We keep your demo request and conversation data for as long as it takes to resolve your enquiry, plus up to 24 months for follow-up purposes. After that period, or sooner if you request deletion, the data is removed from our systems. Analytics data is retained per Google's default retention settings.

    Assessment submissions follow the same 24-month period. Mailing-list consent lasts until you withdraw it.

    6. Legal basis

    When you submit the demo request form, you give us your explicit consent (GDPR Art. 6(1)(a)) to contact you about Navorda. For analytics, our legal basis is your consent through the cookie banner, withdrawable at any time. Where we send relevant follow-up commercial communication after an initial request, we may also rely on our legitimate interest (GDPR Art. 6(1)(f)) in promoting our product to a clearly interested party — you can object at any time.

    The Corporate Distance Assessment works the same way: submitting your details is your explicit consent to be contacted about your results. The mailing-list box is a separate consent (GDPR Art. 6(1)(a)) that you can withdraw at any time by replying to any of our emails with the word "unsubscribe".

    7. Your rights

    Under the GDPR you have the right to:

    • Access the personal data we hold about you.
    • Request correction or deletion of that data.
    • Restrict or object to our processing of it.
    • Request a portable copy of your data.
    • Lodge a complaint with the Spanish data protection authority (AEPD) if you believe we have mishandled your data.

    To exercise any of these rights, email info@cabsansolutions.com. We respond within 30 days.

    8. Cookies

    The site uses functional cookies (always-on, required for the site to work) and optional analytics cookies (Google Analytics 4). You can review and change your choices at any time via the "Manage cookies" link in the footer. The "Buy with AWS" button loads an external script from AWS Marketplace that may set its own cookies when interacted with; that interaction is governed by AWS's privacy terms.

    9. Changes to this policy

    If we materially change how we handle your data, we will update this page and the "Last updated" date at the top. We encourage you to check it periodically.

    10. Contact

    For privacy questions, write to info@cabsansolutions.com or by post to CabSan Advisory S.L., Seville, Spain.