Privacy Policy

This Privacy Policy describes how GridHooks ("GridHooks", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit gridhooks.com(the "Site"), contact us, subscribe to our communications, use our client portal, or otherwise interact with us (collectively, the "Services"). It also explains the choices and rights you have regarding your information.

By using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Services.

1. Scope

This Policy applies to personal information we process as a controller through the Services. Where we process personal information on behalf of a client as part of a paid engagement, that processing is governed by our agreement with that client (including any Data Processing Addendum), not by this Policy.

2. Information we collect

Information you provide to us

• Contact & project inquiries — your name, email address, phone number, company name, and any project details, budget, timeline, or message you submit through our forms.
• Newsletter — the email address you provide when you subscribe.
• Client portal accounts — your name, email, login credentials, and information related to your projects when you are invited to and use the portal.
• Correspondence — the contents of emails and other communications you send us.

Information we collect automatically

• Device & usage data — IP address, browser type and settings, operating system, the pages you view, referring URLs, and timestamps.
• Cookies & similar technologies — as described in Section 4.

Information from third parties

We may receive information from our service providers (for example, analytics and email-delivery providers) and from platforms you use to interact with us. We combine this only as needed to operate the Services.

3. How we use information

• To respond to your inquiries and provide the information or services you request.
• To operate, maintain, secure, and improve the Site, the client portal, and our free tools.
• To send transactional messages (for example, confirming receipt of a project brief).
• To send our newsletter and marketing communications where you have opted in.
• To analyze usage and improve our content and offerings.
• To detect, prevent, and address security incidents, fraud, and abuse.
• To comply with legal obligations and enforce our terms.

4. Cookies & similar technologies

We use cookies and similar technologies to operate the Site, remember your preferences, and understand how the Site is used. We group them as follows:

• Strictly necessary — required for the Site and portal to function (for example, security and session management). These cannot be switched off.
• Analytics — help us understand aggregate usage so we can improve. These load only after you consent where required.
• Preference — remember choices such as your cookie selection.

Where required by law, we request your consent through a cookie banner before setting non-essential cookies. You can change your choice at any time through the banner or your browser settings. We honor recognized opt-out signals (such as Global Privacy Control) where applicable.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as described below:

• Service providers (sub-processors) — vendors that process information on our behalf under contractual confidentiality and security obligations. See the table below.
• Professional advisors — lawyers, accountants, and auditors, as needed.
• Legal & safety — where required by law, legal process, or to protect the rights, property, or safety of GridHooks, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

Categories of service providers we use

6. Data retention

We keep personal information only for as long as necessary for the purposes described in this Policy, including to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Inquiry and lead information is retained for as long as needed to evaluate and pursue a potential engagement and for a reasonable period thereafter. Newsletter information is retained until you unsubscribe. When information is no longer needed, we delete or de-identify it.

7. International transfers

GridHooks operates remotely and may process information in the United States and other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your country. Where we transfer personal information internationally, we use appropriate safeguards, such as Standard Contractual Clauses, where required.

8. How we protect information

We maintain reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration — including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Restrict or object to certain processing.
• Receive your information in a portable format.
• Withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email privacy@gridhooks.com. We will respond within the time required by applicable law. We may need to verify your identity before acting on a request. You will not be discriminated against for exercising your rights.

EEA / UK residents

Where the GDPR or UK GDPR applies, we process personal information on the following legal bases: your consent; performance of a contract with you; our legitimate interests (such as operating and securing the Services); and compliance with a legal obligation. You also have the right to lodge a complaint with your local supervisory authority.

California & other U.S. state residents

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use and disclose it, to request access to and deletion or correction of your information, and to opt out of the "sale" or "sharing" of personal information. As noted above, we do not sell or share your personal information. Residents of other U.S. states with comprehensive privacy laws have similar rights. You may exercise these rights, or use an authorized agent to do so, by contacting privacy@gridhooks.com.

10. Children's privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

11. Third-party links

The Site may link to third-party websites and services we do not control. This Policy does not apply to them, and we are not responsible for their content or privacy practices. Review their policies before providing information.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate. Your continued use of the Services after an update means you accept the revised Policy.

13. Contact us

Questions, requests, or concerns about this Policy or your personal information? Contact us at privacy@gridhooks.com or hello@gridhooks.com.