Privacy Policy

1. Information We Collect

We collect personal information through the following channels:

Project Request / Contact Form. When you submit our Contact page form, we collect what you provide — typically name, email address, company name, job title, phone number (if given), and any project details or message content you enter.

Direct Email. When you email us directly, we collect your name, email address, and the contents of your message, including anything you choose to share about your project, company, or role.

LinkedIn. When you message us, comment, or otherwise interact with Thedas through LinkedIn, we may collect the information visible on your public profile (name, title, company) and the content of your message, consistent with LinkedIn's own platform terms and privacy policy, which govern your use of LinkedIn itself.

Automatically Collected Information. Like most websites, we may collect standard technical information when you visit the Site — IP address, browser type, device type, referring page, and general usage data — typically through analytics tools (see Section 5).

We do not knowingly collect financial account numbers, government ID numbers, or other sensitive identifiers through the Site, and we ask that you not include this type of information in a contact form submission or email to us.

2. How We Use Your Information

We use the information collected above to:

• Respond to your inquiry and evaluate potential engagements

• Communicate with you about our services, capabilities, or scheduling

• Maintain records of business development and client relationship activity (e.g., in our CRM or project management tools)

• Improve the Site and understand how visitors use it

• Comply with legal obligations

We do not sell your personal information. We do not use contact form, email, or LinkedIn submissions to send unsolicited marketing beyond what's reasonably related to your inquiry, unless you separately opt in (e.g., a newsletter signup).

3. How We Share Your Information

We do not share your personal information with third parties except:

• Service providers who help us operate — e.g., CRM, email, calendar, or project management tools (see Section 5) — under obligations to protect it

• Professional advisors (legal, accounting) where necessary

• Legal compliance — if required by law, subpoena, or to protect our rights or the safety of others

• Business transfer — if Thedas is involved in a merger, acquisition, or asset sale, in which case information may transfer as part of that transaction

4. Data Retention

We retain contact and inquiry information for as long as reasonably necessary to respond to your inquiry, maintain business records, and comply with legal or tax obligations, and then delete or anonymize it. If you ask us to delete your information sooner (see Section 7), we will do so unless we have a legitimate business or legal reason to retain it.

5. Third-Party Tools and Analytics

We may use third-party tools to operate the Site and manage inquiries, which may include:

• Website analytics (e.g., Google Analytics or similar)

• CRM / project management tools (e.g., Asana)

• Email and calendar platforms (e.g., Google Workspace / Microsoft 365)

• Form and scheduling tools

These providers may process information on our behalf subject to their own privacy and security practices. [Update this list to match the actual stack once finalized — see recommendations below.]

6. Cookies

The Site may use cookies or similar technologies for analytics and basic functionality. [Insert specifics once the analytics/cookie stack is confirmed — see recommendations below.] You can control cookies through your browser settings; disabling them may affect Site functionality.

7. Your Rights and Choices

Depending on where you live, you may have rights to:

• Request access to the personal information we hold about you

• Request correction or deletion of that information

• Object to or restrict certain processing

• Request a copy of your information in a portable format

• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at [privacy contact email]. We will respond within the timeframe required by applicable law.

California residents: You may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information (Thedas does not sell personal information).

EU/UK/EEA residents: If applicable, we act as a data controller for information collected via the Site and rely on legitimate interest or consent as the legal basis for processing described above. You have the rights available under GDPR, including the right to lodge a complaint with your local supervisory authority.

8. Data Security

We use reasonable administrative, technical, and organizational measures to protect the information we collect. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Site is intended for business audiences and is not directed to children. We do not knowingly collect personal information from anyone under 16.

10. International Visitors

If you contact us from outside the United States, your information may be transferred to and processed in the United States, where our systems and service providers are located.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. Material changes will be reflected on this page.

12. Contact Us

Questions about this Privacy Policy or your information can be directed to hello@thedas.agency.