Privacy Policy
Version: 1.3
Last updated: 2025.01.18
1. Introduction & Purpose
This Privacy Policy explains our policies and procedures regarding the collection, use, and disclosure of your information when you interact with Experience Innovation Consulting Inc. (“the Company,” “We,” “Us,” or “Our”). It also describes your privacy rights and how various data protection laws (such as GDPR, PIPEDA, and CCPA/CPRA) protect you. Our goal is to be transparent about how we handle data—particularly as we incorporate Artificial Intelligence (AI) tools into aspects of our services.
By accessing or using our services, you agree to the collection and use of your information under the terms of this Privacy Policy. If you have any questions, please contact us at privacy@experienceinnovation.consulting.
2. Definitions
We use the following terms throughout this Privacy Policy for clarity and consistency. (Additional relevant definitions—such as “Account,” “Business,” “Consumer,” “Cookies,” and “Personal Data”—are in alignment with the definitions provided under GDPR, CCPA, and other applicable laws.)
-
Data Classification Framework: Our internal system categorizes data into Public Data, B2B Prospect Data, Client Data, and Internal Proprietary Data. This classification determines how data may be used with AI and how it is secured.
-
Responsible AI Usage Policy: Our Company policy governs the ethical, secure, and transparent use of AI tools in our operations. Available at https://www.experienceinnovation.consulting/generative-ai-policy.
-
B2B Prospect Data: Data we collect about potential or prospective clients for our business outreach, typically stored via lead-generation platforms such as Clay or Instantly.ai.
-
Client Data: Data provided by or collected on behalf of our clients as part of business development or engagement.
-
Public Data: Information publicly available or published online.
-
Internal Proprietary Data: Trade secrets or intellectual property developed and owned exclusively by Experience Innovation Consulting Inc.
3. Data We Collect & How We Use It
3.1 Types of Data Collected
-
Personal Data
-
May include:
-
Email address
-
First name and last name
-
Phone number
-
Address, State, Province, ZIP/Postal code, City
-
Transactional and inquiry history
-
Personal preferences for improving the quality of our Service
-
Usage Data
-
Technographic information about your device's
-
Website interactions and behaviours on our company website or owned digital assets.
-
-
We collect this data when you fill out forms on our website, subscribe to newsletters, visit our website or correspond with us.
-
-
Usage Data
-
This is collected automatically and may include your Internet Protocol (IP) address, browser type, pages visited, time on page, and unique device identifiers.
-
We use this data to analyze trends, administer our website, and enhance user experience.
-
-
B2B Prospect Data
-
Collected from platforms like Clay or Instantly.ai for lead generation and business outreach.
-
It may contain professional contact details (e.g., name, role, LinkedIn profile, company name).
-
Retention: Held for up to two (2) years unless a valid business relationship begins or an earlier deletion request is received.
-
AI Usage: Processed only with approved AI tools for outreach segmentation or anonymized analysis, consistent with our Responsible AI Usage Policy.
-
-
Client Data
-
Information shared by clients for project work or business discussions (e.g., project briefs, proposals, proprietary documents, or financial details).
-
AI Usage: We process client data using only approved AI tools. Where necessary, redaction or explicit client consent is required (especially for sensitive or confidential information).
-
Right to Opt-Out: Clients can request an AI usage restriction anytime (see Section 9).
-
-
Internal Proprietary Data
-
Our own proprietary systems, research, methodologies, developed code or other non-public information.
-
AI tools are primarily for internal use. They are applied only in compliance with the Responsible AI Usage Policy and within secure, restricted environments.
-
4. Cookies & Tracking Technologies
We use Cookies, beacons, and similar tracking technologies to collect Usage Data and understand visitor interactions. This helps us:
-
Improve website performance and user experience.
-
Provide targeted, relevant content or advertising.
Cookie Management:
-
You can manage or refuse non-essential cookies via your browser settings or by selecting the appropriate level of cookies you are comfortable with via the CookieYes pop-up banner displayed on our website.
-
Note that certain site features may not function properly if cookies are disabled.
Session and Persistent Cookies for the purposes set out below:
Necessary / Essential Cookies
Type: Session Cookies
Administered by: Us
Purpose: These cookies are essential to providing you with services available through the website and enabling you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services you have requested cannot be provided, and we only use them to provide you with those services.
Cookies Policy / Notice Acceptance Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies identify if users have accepted cookies on the Website.
Functionality Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies allow us to remember your choices when you use the Website, such as your login details or language preference. The purpose of these Cookies is to provide you with a more personal experience and to avoid having to re-enter your preferences every time you use the Website.
Tracking and Performance Cookies
Type: Persistent Cookies
Administered by: Third-Parties
Purpose: These Cookies track information about website traffic and user usage. The information gathered via these Cookies may directly or indirectly identify you as an individual visitor. The information collected is typically linked to a pseudonymous identifier associated with your device when accessing the Website. We may also use these cookies to test new pages, features, or functionality of the website and see how our users react to them.
Targeting and Advertising Cookies
Type: Persistent Cookies
Administered by: Third-Parties
Purpose: These cookies track your browsing habits to enable us to show advertising more likely to interest you. These cookies use information about your browsing history to group You with other users who have similar interests. Based on that information, and with our permission, third-party advertisers can place cookies to show adverts relevant to your interests while on third-party websites.
Social Media Cookies
Type: Persistent Cookies
Administered by: Third-Parties
Purpose: In addition to our cookies, we may also use various third-party cookies to report usage statistics on different social media platforms and deliver advertisements on and through social media platforms, including behavioural remarketing and similar audience ads. These Cookies may be used when You share information using a social media networking website such as Facebook, Instagram, Twitter, Pinterest, Snapchat, WeChat, YouTube, WhatsApp, Vimeo, or any other social media networking website or mobile application.
Pixel Tags
A pixel tag (a web beacon or transparent GIF) is an invisible 1 x 1 pixel placed on specific web pages or email messages. When you access these web pages or open an email, pixel tags generate a generic notice of the visit, including the type of device being used, and permit us to set or read our cookies. Pixel tags are combined with cookies to track the activity on a site by a particular device. When you turn off cookies, pixel tags detect a given website visit or opening of an email message. For email messages, turning off the display of images will disable pixel tags.
For more information about the cookies we use and your choices regarding cookies, please see the Cookies section of our Privacy Policy below.
Your Choices Regarding Cookies
-
If you prefer to avoid using Cookies on the Website, you must disable Cookies in your browser and then delete the Cookies saved in your browser associated with this website. You may use this option to prevent using Cookies at any time.
-
If you do not accept our cookies, you may experience some inconvenience when using the Website, and some features may not function properly.
-
If you want to delete cookies or instruct your web browser to delete or refuse cookies, please visit your browser's help pages.
For the Chrome web browser, please visit this page from Google: Clear cache & cookies - Android - Google Account Help
For the Internet Explorer web browser, please visit this page from Microsoft: How to delete cookie files in Internet Explorer
For the Firefox web browser, please visit this page from Mozilla: Clear cookies and site data in Firefox
For the Safari web browser, please visit this page from Apple: Clear cookies in Safari on Mac - Apple Support
For any other web browser, please visit your web browser's official web pages.
More Information about Cookies
A cookie is a small text file created by a website and stored on your computer through your browser. The idea is that the website can access the cookie later and retrieve information about you. The website then customizes pages based on this information.
Many uses of cookies are uncontroversial and help the users. Examples include:
-
Storing your username (but not your password) to save you from having to remember it or type it in when you return to a site
-
Keeping items in a virtual "shopping basket" for an online retailer website
-
A site such as a weather forecast service or movie theatre listings 'remembers' your location and automatically displays relevant details when you next visit
Cookies fall into two categories: session cookies last only until you leave the website, and persistent cookies last until a set expiration date, which is 13 months from when the cookies were first placed on your device.
Cookie Management Disclosure
We use CookieYes (https://app.cookieyes.com) to manage and administer cookies on our website. CookieYes is a cookie consent management platform that helps us comply with data protection regulations such as GDPR, CCPA, and other applicable privacy laws.
How We Use CookieYes
-
Cookie Consent Banner: CookieYes provides a customizable consent banner on our website, allowing visitors to manage their cookie preferences.
-
Automatic Cookie Blocking: CookieYes automatically blocks third-party cookies until user consent is obtained. This ensures that no non-essential cookies are set without your explicit permission.
-
Cookie Scanning and Categorization: CookieYes scans our website to identify and categorize all cookies and scripts, providing transparency about the types of cookies we use.
-
Consent Logging: CookieYes maintains a record of user consents, including consent status, date, and time, for compliance purposes.
-
Geotargeting: CookieYes allows us to display different consent banners based on the user's location, ensuring compliance with region-specific regulations.
Data Collection and Privacy
CookieYes prioritizes user privacy and data minimization:
-
The only personal data collected by CookieYes is your IP address in a masked form solely for consent logging.
-
No other personally identifiable information (such as names or email addresses) is collected or stored by CookieYes.
-
Data collected by CookieYes is retained only for the duration of our subscription to their service.
Your Rights
You have the right to manage your cookie preferences at any time. You can access and modify your cookie settings through our website's consent banner or preference center. For more information about how we use cookies and your related rights, please refer to our full Cookie Policy and Privacy Policy. By using CookieYes, we aim to provide you with greater control over your privacy while browsing our website and ensure our compliance with applicable data protection regulations.
Platform Privacy Policy
For complete information on CookieYes's privacy policy and data handling practices, please visit their privacy center -https://www.cookieyes.com/privacy-policy/
Contact Us
If you have any questions about this Cookies Policy, You can contact us:
By email: privacy@experienceinnovation.consulting
5. How We Use Your Personal Data
We use your data for various legitimate business purposes, including:
-
Service Delivery:
-
Processing and fulfilling contractual obligations (e.g., consulting engagements, delivering project outcomes).
-
-
Marketing & Communication:
-
Sending service updates, marketing communications, or responding to inquiries.
-
Using AI-assisted drafting for communication only where such usage complies with your preferences and the Responsible AI Usage Policy.
-
-
Business Development & Outreach:
-
If you are a potential client (B2B Prospect Data), we may reach out regarding relevant services or offers.
-
You can opt out of these communications anytime via unsubscribe links or by contacting us.
-
-
Data Analysis & Improvement:
-
Analyzing trends to enhance service offerings.
-
AI Tools may be used for anonymized data analysis, text summarization, sentiment analysis or pattern detection, strictly following our Data Classification rules (see Section 7).
-
-
Legal & Regulatory Compliance:
-
Meeting our obligations under applicable laws, handling disputes, or responding to regulatory or law enforcement requests.
-
-
Customer Support:
-
To respond to inquiries and provide customer support.
-
6. Disclosure & Sharing of Data
6.1 Approved AI Providers & Third-Party Tools
We share specific data with approved AI technology providers (e.g., ChatGPT API, Claude) under strict security and confidentiality terms. We do not provide or sell your personal data to AI vendors for their model training. Any data processed by or through AI tools is handled as per our Responsible AI Usage Policy, ensuring:
-
Without appropriate anonymization or client consent, no financial or highly sensitive data is input.
-
Logs that store user prompts are kept confidential and purged according to our data retention timelines and the data retention policies of LLM providers (typically 30 days unless a legal reason arises to extend the hold longer).
6.2 Service Providers
We engage service providers (subcontractors, analytics vendors, marketing automation platforms) for legitimate business needs:
-
Data Processors: These entities act under our instructions and are obligated by written agreements to protect your data as required by law and this Privacy Policy.
-
Subcontractors: Must sign our Subcontractor Agreement, which includes compliance with our Data Classification Framework and the Responsible AI Usage Policy.
6.3 Legal Requirements & Business Transfers
We may disclose your personal data if required by law or for the purposes of business transactions such as mergers, acquisitions, or asset sales.
6.4 Data Retention Timelines
Experience Innovation Consulting Inc., its affiliates and business partners store data collected to provide the Services for a rolling period of two (2) years from the last website visit of our Services. Reporting data (which does not contain personal data) is stored during our contract with you. Reporting data may be deleted at your request and in all cases two (2) years after termination of the Agreement. If our contract terminates with you, we do not further collect or use any information received from you for any purposes.
7. Data Classification & AI Usage
Our internal Data Classification Framework governs how we handle data:
-
Public Data: May be used freely in AI tools with proper attribution or license considerations.
-
B2B Prospect Data: Processed with AI only through approved platforms (e.g., lead segmentation) and retained no longer than 2 years unless otherwise justified.
-
Client Data: Processed in AI tools only if authorized or anonymized. Clients can opt-out (see Section 9). Authorization is implied unless the client has explicitly stated otherwise and completed the appropriate opt-out form.
-
Internal Proprietary Data: Kept confidential and not used in publicly accessible AI training or fine-tuning without executive approval.
For further details, consult our Responsible AI Usage Policy at https://www.experienceinnovation.consulting/generative-ai-policy.
8. Data Security, Retention, & Incident Response
-
Security Measures:
-
We employ administrative, technical, and physical safeguards, including 2FA, role-based access controls, privacy screens, and endpoint security checks to prevent unauthorized access or disclosure.
-
AI usage is restricted to approved tools with verified security practices.
-
-
Data Retention:
-
Personal data is retained only as long as necessary to fulfill the purposes outlined in this policy or comply with legal obligations.
-
B2B Prospect Data is retained for up to two years (or until requested deletion).
-
Some AI usage logs (for custom AI agents) may be stored briefly (30 days) but are not used for model training.
-
-
Incident Response:
-
We have an AI Incident Response Procedure for data breaches or unauthorized AI use.
-
If we confirm a breach impacting personal or client data, we will promptly notify affected individuals and relevant authorities under applicable laws (e.g., GDPR Articles 33/34, CCPA breach notifications).
-
-
Disposal Methods:
-
When disposing of personal information, we will:
-
Permanently delete electronic records from our systems and any backups
-
Securely shred or destroy any physical records.
-
Maintain records of "no-contact" lists to ensure no follow-up communication.s
-
-
9. Your Rights & AI Opt-Out
You may have rights under GDPR, CCPA, PIPEDA, or similar regulations, depending on your location. These rights can include:
-
Access, Correction & Erasure: Request access to your personal data or ask us to correct or delete it.
-
Restriction of Processing: Request that we limit or cease processing specific data.
-
Opt-Out of AI Usage: Clients can request that their data not be processed or analyzed by any AI tool.
-
Procedure: Submit a written request or complete our AI Usage Opt-Out Form. We will acknowledge this within three business days and propose a resolution within 15 business days.
-
If you exercise this right, we will segregate your data from AI-enabled workflows to the extent possible.
-
-
Objection to Marketing: You can unsubscribe from marketing emails at any time or contact us to be removed from B2B outreach campaigns.
10. Cross-Border Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure adequate safeguards (e.g., Standard Contractual Clauses and compliance with GDPR requirements) for data transfers. If you have any questions about cross-border transfers, contact us at privacy@experienceinnovation.consulting.
11. Children’s Privacy
Our services are not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe your child has provided us with personal data, please contact us, and we will take steps to delete such information.
12. Changes to This Privacy Policy
We may occasionally update this Privacy Policy to reflect changes in our practices or applicable regulations. When we do, we will revise the “Last updated” date at the top of this page. We may notify you by email or prominently post a notice on our website if we make material changes.
13. Business Outreach and Data Aggregation Platforms (Clay.com, Instantly.ai)
First-Party Data Obtained Using Clay
How We Use Clay.com
We utilize Clay.com to enhance our customer relationship management (CRM) and lead generation processes. Clay helps us gather, organize, and analyze prospect data, enabling us to improve our services and interactions in the following ways:
-
Data Collection & Storage
-
We may collect personal data such as names, email addresses, phone numbers, LinkedIn profile information, and other relevant professional details.
-
This information is stored within Clay’s platform and used to maintain accurate and up-to-date records.
-
-
Customer Interaction Analysis
-
Clay assists us in tracking and analyzing prospect interactions so we can better understand and respond to potential client needs.
-
-
Service & Marketing Improvements
-
We leverage insights from Clay to provide more personalized and efficient service.
-
We also use this data for targeted marketing communications—such as emails or newsletters—about our products and services, but only where lawful and relevant.
-
-
Lead Generation
-
Clay.com supports our outreach to prospective customers who could benefit from our services by segmenting and identifying high-value leads.
-
Categories of Personal Information Collected
Over the past 12 months, we have collected the following categories of personal information through Clay.com:
-
Identifiers: Name, business email address, business phone number, LinkedIn profile, mentions in the news.
-
Commercial Information: Records of products or services in which a prospect has shown interest.
-
Internet Activity: Relevant data about interaction with our website or advertisements (if integrated with Clay’s capabilities).
-
Professional Information: Job title, employer, and other work-related contact details.
Purposes for Data Processing
The personal data collected via Clay.com is processed for:
-
Service Delivery: To better provide and manage our consulting and related services.
-
Customer Support: To respond to inquiries and improve client service experiences.
-
Marketing: To craft and send personalized promotional materials or relevant content (where permitted).
-
Analytics: To analyze usage patterns and continuously refine our marketing and outreach strategies.
-
Lead Generation: To identify potential new clients and tailor communications accordingly.
Clay Connected Accounts
Personal and commercial data collected in Clay may come from its integrations with third-party vendors or data enrichment services. For transparency, here are some of the connected accounts managed by Clay (subject to change as Clay’s integrations evolve):
-
Alexa, Anthropic, BuiltWith, Clearbit, ContactOut, Datagma, Debounce, DeepL, Dropcontact, Enrichley, Findymail, Forager, Google Gemini, Google Translate, OpenAI, HitHorizons, Hunter, Icypeas, LeadMagic, MadKudu, Mapbox, Nimbler, Ocean.io, Owler, People Data Labs, PredictLeads, ProductHunt, Prospeo, Selligence, Semrush, Smartlead.ai, Snov.io, Store Leads, Twain, Zenrows, ZeroBounce, and more.
These integrations help enrich or verify contact information. Each provider is vetted for privacy and security alignment with our internal Data Classification Framework.
Data Retention Policy for Information Obtained Through Clay
We strive to balance business insights with the privacy rights of our prospects.
-
Data Categories
-
Identifiers, Professional Information, Commercial Information, Internet Activity (if applicable).
-
-
Retention Periods
-
Interested or Active Contacts: We retain personal data for as long as necessary to fulfill the purpose for which it was collected or as required by applicable laws. This period does not exceed two years from the last meaningful interaction, end of engagement, or communication unless there is a continuing business relationship.
-
Uninterested or Opt-Out Contacts: If a prospect has not shown interest or explicitly requests no further contact, we delete their data annually or sooner if required by law (e.g., Canadian, American, and European regulations).
-
Annual Review: We review and update our records at least once yearly to ensure ongoing compliance with this policy.
-
-
Disposal Methods
-
Permanent Deletion of electronic records from systems and backups when no longer needed.
-
Secure Destruction of any physical records, if applicable.
-
Maintenance of “no-contact” lists to avoid any inadvertent follow-up communications.
-
-
Legal Holds
-
In case of ongoing or anticipated legal or regulatory matters, we may suspend data deletion for the relevant records until those matters are resolved.
-
-
Compliance with Privacy Laws
-
We adhere to PIPEDA, CCPA/CPRA, GDPR, and other relevant laws. We will comply if these laws specify shorter retention periods or specific disposal methods.
-
Review & Updates
This Clay.com usage policy is subject to annual review. We may update it to reflect changes in our business practices, legal requirements, or Clay’s platform capabilities. All revisions will appear under the “Last updated” date in our main Privacy Policy or on our website.
Responsibility
Our Data Protection Officer oversees the implementation of this policy and ensures we remain compliant. By incorporating this data retention approach for Clay.com usage, we uphold our commitment to respecting privacy rights and meeting legal obligations.
Platform Privacy Policies
-
For complete information on Clay’s privacy practices, please visit:
Clay Privacy Center
14. Customer Review Data
1. Use of Trustpilot for Customer Reviews
Purpose
We use Trustpilot to collect and display customer reviews about our products and services. Trustpilot helps us gather valuable feedback, build credibility, and provide social proof for potential customers.
Types of Data Collected
When you leave a review on Trustpilot, the following data may be collected:
-
Personal Identifiers: Name, email address, or other contact details you provide.
-
Review Content: The text of your review, including any comments about your experience with our products or services.
-
Rating: A star rating (1–5) reflects your overall satisfaction.
-
Interaction Data: Information about your interactions with our company (e.g., purchase history, customer service experiences).
How We Use the Data
-
Displaying Reviews: We feature your reviews and ratings on our website and marketing materials to be transparent and build trust.
-
Customer Feedback: We analyze reviews to gauge satisfaction and identify areas for improvement.
-
Engagement: We may reply to reviews on Trustpilot to address concerns or express gratitude.
-
Marketing: Our marketing campaigns may highlight positive reviews to showcase customer satisfaction.
Data Display on Our Website
-
Star Rating: Displayed next to your review.
-
Review Text: Published in full, sharing your experience with potential customers.
-
Reviewer Information: Your name (or username) and any non-sensitive details you share are visible alongside your review.
Data Retention and Deletion
-
Retention Period: Reviews and associated data are retained for as long as they serve a legitimate business purpose or as required by applicable law.
-
Deletion of Data:
-
We will delete the review and associated information upon request from the reviewer or if the data is no longer necessary.
-
We keep records of preferences for individuals who have opted out of further contact to ensure no follow-up communications.
-
-
Annual Audit: We conduct a yearly data audit to confirm compliance with our retention policies and relevant laws.
Platform Privacy Policy
For more details on how Trustpilot handles personal data, refer to their Privacy Policy.
2. Use of Clutch.co for Customer Reviews
Purpose
We also use Clutch.co to collect and display customer reviews of our products and services. This independent review platform provides social proof, builds credibility, and collects valuable client feedback.
Types of Data Collected
When you leave a review on Clutch.co, the following data may be collected:
-
Personal Identifiers: Name, email address, and other contact details you provide.
-
Review Content: The text of your review, including any comments about your experience with our services.
-
Rating: A star rating (1–5) reflecting overall satisfaction.
-
Project Details: Information such as project scope, budget, or timeline.
-
Company Information: Your company’s name, industry, and size.
How We Use the Data
-
Displaying Reviews: We showcase your reviews and ratings on our Clutch.co profile and may embed them on our website or in marketing materials.
-
Customer Feedback: We analyze review content to understand client satisfaction and enhance service quality.
-
Engagement: We may respond to your Clutch.co reviews to address issues or share our thanks.
-
Marketing: Our promotional materials or marketing campaigns may feature positive reviews to reflect customer satisfaction.
Data Display on Our Website
-
Star Rating: Prominently displayed.
-
Review Text: Typically shown in its entirety to offer detailed insights for prospective clients.
-
Reviewer Information: Your name (or username) and any other non-sensitive details you opt to share appear beside your review.
Data Retention and Deletion
-
Retention Period:
-
We retain reviews as long as they serve a legitimate business purpose or fulfill legal requirements.
-
Data for non-active business contacts is not kept longer than two (2) years.
-
-
Deletion of Data:
-
We will remove reviews and associated data upon the reviewer’s request or if the data is deemed unnecessary.
-
We preserve records of individuals’ preferences if they opt out of future contact.
-
-
Annual Audit: We assess our data practices annually to ensure they comply with this retention policy and any applicable regulations.
Platform Privacy Policy
For more information on how Clutch.co processes personal data, consult their Privacy Policy.
14. Analytics, Advertising, and Marketing Services
1. Analytics
We use third-party service providers to monitor and analyze the use of our websites and services. These providers help us evaluate user behaviour and interactions, allowing us to enhance our advertising performance and the overall quality of our services.
Google Analytics
-
What It Does: Google Analytics is a web analytics service by Google that tracks and reports website traffic. Google may use the data it collects to contextualize and personalize ads on its advertising network.
-
Data Collected: Includes information about your device, browsing patterns, and interactions with our site.
-
Opt-Out:
-
You can install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from sharing your visit data.
-
Alternatively, you can use the NAI Opt-Out, DAA Tool, or EDAA Platform to opt out of certain Google Analytics features.
-
-
More Information: See Google’s Privacy Policy for details on data handling and how Google uses information.
2. Advertising
We may partner with third-party advertising networks to display or manage ads on our site or elsewhere. These networks use cookies or similar technologies to collect information about your online activities, enabling them to present ads based on your interests.
Google Ads (AdWords)
-
What It Does: A marketing service provided by Google Inc. using cookies to serve ads relevant to your visits on our site and elsewhere on the internet.
-
Opt-Out:
-
Manage personalized ad settings via Google Ads Settings.
-
For broader Google Advertising opt-outs, see Google’s Privacy & Terms.
-
-
Additional Note: If you wish to disable Google Analytics tracking, Google recommends installing its Analytics Opt-out Browser Add-on.
-
What It Does: LinkedIn provides marketing and advertising solutions that may show interest-based ads to users.
-
Opt-Out:
-
Enable your browser’s “Do Not Track” or manage your preferences directly at LinkedIn Advertising Preferences.
-
See LinkedIn’s Privacy Policy for additional information on data practices.
-
3. Email Marketing
We may use your personal data to send you newsletters, marketing or promotional materials, and other information that may interest you. You can opt out of these emails anytime by clicking the “unsubscribe” link or contacting us directly.
HubSpot Marketing Campaigns
-
What It Does: Part of the HubSpot suite of products, using cookies and web beacons to measure email effectiveness and user interactions.
-
Opt-Out: Simply click “unsubscribe” in any HubSpot-powered email you receive.
-
Privacy Policy: Refer to the HubSpot Privacy Policy for more details on data handling.
4. Behavioral Remarketing
We use remarketing services to advertise to previous visitors or users interested in our services. These third-party vendors use cookies and/or non-cookie technologies to identify your device and understand usage patterns, which helps us:
-
Measure & Analyze traffic and browsing activity.
-
Deliver relevant ads or offers on third-party websites or apps.
-
Assess the performance of our advertising campaigns.
Important: Some vendors may rely on non-cookie tracking, which browser settings alone may not affect. You can use the following tools to decline interest-based advertising:
-
NAI’s Opt-Out Platform
-
DAA’s WebChoices
Mobile Device Controls:
-
iOS Users: Enable “Limit Ad Tracking” in your iOS settings.
-
Android Users: Enable “Opt out of Ads Personalization” in your Android settings.
Data Sharing:
We may share hashed email addresses (if collected) or similar online identifiers with these third-party vendors to recognize you across different devices. For more details, refer to the privacy policies of these vendors:
-
Google Ads (AdWords) remarketing: Manage settings via Google Ad Settings.
-
LinkedIn remarketing: Follow LinkedIn’s Advertising Preferences.
5. Usage, Performance, and Miscellaneous
Invisible reCAPTCHA
-
We may implement invisible reCAPTCHA (operated by Google) for security purposes, such as preventing spam or abuse.
-
reCAPTCHA collects user information to verify they are human (e.g., analyzing your browsing behaviour).
-
See Google’s Privacy Policy for how this data is processed.
15. GDPR Privacy
Legal Basis for Processing Personal Data under GDPR
We may process Personal Data under one or more of the following legal bases:
-
Consent
You have provided clear permission to process your Personal Data for one or more specified purposes.
-
Performance of a Contract
Processing is necessary for the performance of an agreement with you and/or for any pre-contractual obligations.
-
Legal Obligations
Processing is required for compliance with a legal obligation to which we are subject.
-
Vital Interests
Processing is necessary to protect your vital interests or those of another natural person.
-
Public Interests
Processing is related to a task carried out in the public interest or exercising official authority vested in the Company.
-
Legitimate Interests
Processing is necessary for the purposes of the legitimate interests pursued by the Company, except where your fundamental rights and freedoms override such interests.
If you have any questions about the specific legal basis for processing your Personal Data or whether providing Personal Data is a statutory or contractual requirement, please contact us.
Your Rights under the GDPR
We respect the confidentiality of your Personal Data and uphold your rights as granted by the GDPR. If you are located in the European Union (EU) or European Economic Area (EEA), you have the right to:
-
Request Access to Your Personal Data
-
You can ask for a copy of the Personal Data we hold about you and verify how we use it.
-
-
Request Correction
-
You have the right to request that any incomplete or inaccurate Personal Data be rectified.
-
-
Object to Processing
-
You can object to our processing of your Personal Data, where we rely on legitimate interests as the legal basis for processing. You also have an unconditional right to object when we process your Personal Data for direct marketing purposes.
-
-
Request Erasure (‘Right to be Forgotten’)
-
You can ask us to delete or remove your Personal Data if there is no valid reason for us to continue processing it.
-
-
Request the Transfer of Your Personal Data
-
We will provide your Personal Data in a structured, commonly used, and machine-readable format to you or a chosen third party when it concerns automated information you initially consented to or used for contract performance.
-
-
Withdraw Consent
-
If you have provided consent for the processing of your Personal Data, you may withdraw it at any time. Note that withdrawing consent may limit your access to certain services or features.
-
Exercising Your GDPR Data Protection Rights
-
To exercise any of these rights, please contact us at privacy@experienceinnovation.consulting.
-
For security purposes, we may request verification of your identity before responding to such inquiries.
-
We strive to address all requests as promptly as possible.
-
If you have concerns about how we handle your Personal Data, you may complain to your local data protection authority within the EU/EEA.
16. CCPA Privacy
This section supplements our Privacy Policy for California residents and describes your rights under the California Consumer Privacy Act (CCPA/CPRA).
Categories of Personal Information Collected
Over the last 12 months, we may have collected information in the following categories (as defined by the CCPA). Please note that not all types of data in each category may have been collected; the list is based on good-faith belief.
-
Category A: Identifiers
Examples: Name, alias, postal address, IP address, email address, driver’s license number, passport number.
Collected: Yes. -
Category B: Personal information categories listed in the California Customer Records statute
Examples: Name, signature, telephone number, insurance policy number, employment history.
Collected: Yes. -
Category C: Protected classification characteristics under California or federal law
Examples: Age, race, religion, nationality, gender, disability status.
Collected: No. -
Category D: Commercial information
Examples: Records of products or services purchased or considered.
Collected: Yes. -
Category E: Biometric information
Examples: Fingerprints, faceprints, voiceprints, iris or retina scans.
Collected: No. -
Category F: Internet or other similar network activity
Examples: Browsing history, interaction with our Services or advertisements.
Collected: Yes. -
Category G: Geolocation data
Examples: Approximate physical location.
Collected: Yes. -
Category H: Sensory data
Examples: Audio, electronic, visual, thermal, olfactory.
Collected: No. -
Category I: Professional or employment-related information
Examples: Job history or performance evaluations.
Collected: Yes (only job history if disclosed). -
Category J: Non-public education information
Examples: Student records, grades, class schedules.
Collected: No. -
Category K: Inferences
Examples: Preferences, characteristics, psychological trends, predispositions.
Collected: No.
Sources of Personal Information
We collect personal information from:
-
You directly (e.g., forms you fill out, preferences you share).
-
Indirectly (e.g., observing your activity on our Services).
-
Automatically (e.g., cookies placed on your device).
-
Service Providers (e.g., analytics or advertising vendors).
Use of Personal Information
We may use or disclose personal information for business or commercial purposes, including:
-
Operating and improving our Service.
-
Providing support and responding to inquiries.
-
Meeting legal or regulatory obligations.
-
Fulfilling or meeting the reason you provided the information.
-
Internal administrative and auditing purposes.
-
Detecting and protecting against malicious or illegal activity.
If we need to use previously collected personal information for new, unrelated, or incompatible purposes, we will update this Privacy Policy and secure additional consent if required.
Disclosure of Personal Information
In the last 12 months, we may have disclosed the following categories of personal information for business or commercial purposes:
-
Category A: Identifiers
-
Category B: Personal information categories listed in the California Customer Records statute
-
Category D: Commercial information
-
Category F: Internet or other similar network activity
-
Category G: Geolocation data
-
Category I: Professional or employment-related information
Note: A disclosure is made under a contract that restricts the use and confidentiality of personal information to the purpose for which it was disclosed.
Sale of Personal Information
Under the CCPA, "sell" or "sale" can refer to sharing personal information with third parties in exchange for valuable consideration, not necessarily monetary. We do not sell your personal information under any circumstances. If any analytics or advertising provider is considered a “sale” under CCPA, you can opt-out by following the instructions below.
Share of Personal Information
We may share personal information with Service Providers bound by contractual obligations to keep the data confidential and use it only for the specified purposes.
Collection or Sale of Personal Information of Minors Under 18
We do not knowingly collect or sell personal information from minors under 18. If you believe a minor has provided personal data through our Services, please contact us so we can remove that information promptly.
Your Rights under the CCPA
If you are a California resident, you have the right to:
-
Right to Notice
-
Be informed about which categories of Personal Data are collected and why.
-
-
Right to Request
-
Request details of our collection, use, sale, and disclosure of personal information over the past 12 months.
-
-
Right to Say No (Opt-Out)
-
Direct us not to sell your personal information.
-
-
Right to Delete
-
Ask us to delete your personal information, subject to certain exceptions (e.g., legal compliance, security, etc.).
-
-
Right Not to Be Discriminated Against
-
We will not deny goods or services, charge different prices, or provide different quality of services to exercise your privacy rights.
-
Exercising Your CCPA Data Protection Rights
If you are a California resident and want to exercise any of your rights under the CCPA:
We may verify your identity or request more information to process your request. We aim to respond within 45 days of receiving a verifiable request (with a possible 45-day extension when necessary).
Do Not Sell My Personal Information
If you wish to opt out of any potential “sale” as defined by the CCPA, please contact us using the details above. Please remember that opting out may need to be done per browser or device if it relies on cookies. Refer to these tools for interest-based advertising opt-outs:
-
NAI’s Opt-Out
-
DAA’s WebChoices
Mobile Device
-
iOS: “Limit Ad Tracking”
-
Android: “Opt out of Ads Personalization”
Your California Privacy Rights (Shine the Light Law)
California residents with an established business relationship may request information about how we share certain Personal Data with third parties for direct marketing purposes. To request more information, please reach us at privacy@experienceinnovation.consulting.
Links to Other Websites
We are not responsible for the privacy practices of non-affiliated third-party websites or services linked to our Services. Therefore, we recommend that you review each website’s privacy policy.
17. Contact Us
If you have any questions about this Privacy Policy or wish to exercise any of your rights, you can contact us:
We appreciate your trust in us and are committed to protecting your privacy as we continue to innovate responsibly.