Legal

Privacy Policy

Effective date: November 1, 2026 · Last updated: November 1, 2026

Plain-language summary: We collect the contact information you give us when you reach out, plus a small amount of standard website analytics. We use it to respond to you, send you content you asked for, and improve the site. We don't sell it. We don't share it for advertising. Client engagement data — the data we process while doing the actual work — is governed by your contract, not this policy.

1. Scope and Application

This Privacy Policy describes how Apison Hooks Inc. ("Apison Hooks", "we", "us", or "our") collects, uses, and discloses information when you visit our website at apisonhooks.com (the "Site") or interact with us in connection with our services. It does not apply to data we process on behalf of clients in the course of performing engagement work — that data is governed by the executed master services agreement and any associated data processing addendum.

2. Information We Collect

We collect information you provide directly to us when you fill out a contact form, request a discovery call, subscribe to our research newsletter, or correspond with us via email. This typically includes name, business email, company name, role, and the content of your inquiry. We also collect limited information automatically when you visit the Site, including IP address, browser type, pages viewed, and referring URL, via privacy-respecting analytics.

3. How We Use Information

We use information you provide to respond to inquiries, schedule and conduct discovery calls, send you content you have requested, and evaluate potential engagements. We use automatically collected information to operate and improve the Site, detect security issues, and produce aggregated, non-identifying analytics. We do not sell personal information, and we do not share it with third parties for their marketing purposes.

4. Cookies and Similar Technologies

We use a small number of cookies necessary for Site functionality and a privacy-respecting analytics cookie (configured to anonymize IP addresses and not to share data with third parties). We do not use advertising or cross-site tracking cookies. You can disable cookies in your browser settings; the Site will continue to function with cookies disabled, though some interactive elements may be limited.

5. Service Providers

We share limited information with third-party service providers who help us operate our business — for example, our website host, our email service provider, our calendar booking platform, and our CRM. These providers are contractually obligated to use information only to provide the services we have engaged them for, and to maintain appropriate security and confidentiality measures. A current list of subprocessors is available on request.

6. Legal Disclosures

We may disclose information if required to do so by law or in the good-faith belief that such action is necessary to (a) comply with a legal obligation or valid governmental request, (b) protect our rights, property, or safety, or those of our clients or the public, or (c) investigate fraud or technical issues. Where permitted, we will notify the affected individual or entity in advance.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to access, correct, delete, or restrict the processing of your information, and the right to data portability. To exercise these rights, contact us at privacy@apisonhooks.com. We will respond within thirty (30) days. If you are in the European Economic Area, the United Kingdom, or California, additional rights may apply under GDPR, UK GDPR, or the CCPA respectively.

8. Data Retention

We retain personal information for as long as needed to fulfill the purposes for which it was collected, and to comply with legal, accounting, or reporting obligations. Inquiry data is typically retained for up to thirty-six (36) months from the date of last contact, after which it is deleted or anonymized. Newsletter subscriber data is retained until you unsubscribe.

9. International Data Transfers

Apison Hooks is headquartered in the United States and our service providers may be located in the United States, the United Kingdom, and the European Union. When we transfer personal information across borders, we use mechanisms recognized under applicable law, such as the EU Standard Contractual Clauses, to ensure appropriate protection.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit and at rest, role-based access controls, security training for personnel, and an information security program reviewed annually by an independent auditor (SOC 2 Type II, ISO/IEC 27001).

11. Children's Privacy

The Site and our services are intended for business use and are not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without verified parental consent, we will delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of the policy will reflect the date of the most recent change. For material changes, we will provide additional notice (such as via email or a notice on the Site).

13. Contact Us

For questions about this Privacy Policy or our privacy practices, contact: privacy@apisonhooks.com. For postal correspondence: Apison Hooks Inc., Attn: Privacy Officer, 525 Market Street, Suite 2000, San Francisco, CA 94105, USA. EU and UK data subjects may also contact our designated representative, available at the email address above.

Apison Hooks Inc. is the data controller for personal information collected through this Site. For information about how we process data on behalf of clients (where we act as a data processor), please refer to your executed master services agreement and data processing addendum, or contact privacy@apisonhooks.com.