Privacy Policy

Last updated:

This Privacy Policy describes how Elbowboost ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website at elbowboost.world or contact us about our workplace culture consulting services. This policy applies to visitors and clients in the United States and is designed to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Business Information

The business responsible for your personal information is:

Elbowboost
32399 Basin St
Fort Bragg, CA 95437
United States
Email: callback@elbowboost.world
Phone: +1 707 964 4113

Information We Collect

We may collect the following categories of personal information:

• Identifiers: full name, email address, phone number, and postal address when you provide them
• Commercial information: records of inquiries about our consulting services
• Internet or network activity: IP address, browser type, device information, pages visited, and interaction with our website (see our Cookie Policy)
• Communications: messages and inquiries submitted through our contact form or by email or phone
• Inferences: general preferences derived from your use of our website, where permitted by law

We collect personal information directly from you when you submit a contact form, email us, or call us. We also collect certain technical information automatically when you visit our website through cookies and similar technologies.

We do not knowingly collect sensitive personal information as defined under California law, and we do not collect Social Security numbers, financial account numbers, or government-issued identification numbers through this website.

How We Use Your Information

We use personal information for the following business purposes:

• Responding to inquiries and providing information about our consulting services
• Operating, maintaining, and securing our website
• Understanding website usage and improving user experience
• Measuring the effectiveness of our advertising and marketing communications, where you have consented to non-essential cookies
• Complying with legal obligations and enforcing our Terms of Use
• Protecting against fraud, unauthorized access, and other security risks

How We Share Your Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising in exchange for monetary or other valuable consideration.

We may disclose personal information to the following categories of recipients for business purposes:

• Website hosting and infrastructure providers
• Analytics and advertising technology providers, only when you have accepted non-essential cookies
• Professional advisors such as legal or accounting providers, when necessary
• Law enforcement, regulators, or other parties when required by law or to protect our rights

Service providers that process personal information on our behalf are contractually required to use it only for the services they provide to us and to maintain appropriate security safeguards.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: up to 24 months from the date of last communication
• Technical and usage data: up to 12 months
• Cookie data: as specified in our Cookie Policy
• Legal compliance data: as required by applicable law

Online Advertising and Analytics

We may use third-party analytics and advertising tools, including services provided by Google, to understand how visitors use our website and to measure advertising performance. These tools may use cookies, pixels, or similar technologies to collect information about your visits to this and other websites.

Non-essential analytics and marketing technologies are used only after you provide consent through our cookie banner. You can learn more in our Cookie Policy and may withdraw consent at any time using the methods described there.

For information about how Google uses data from sites that use its services, visit Google's partner sites policy. You can manage Google ad personalization at Google Ads Settings.

Your Right to Opt Out of Sale or Sharing

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. Because we do not engage in these activities, a separate opt-out request is generally not required. If our practices change, we will update this policy and provide a clear opt-out mechanism as required by law.

California residents may contact us using the details below to confirm our data practices or submit a privacy request.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data transmission
• Access controls limiting data access to authorized personnel
• Regular security assessments of our systems
• Secure storage of contact form submissions

Your U.S. State Privacy Rights

Depending on where you live, you may have rights regarding your personal information under state privacy laws, including laws in California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy statutes. These rights may include:

• Right to know: request details about the categories of personal information we collect, the sources, the purposes for use, and the categories of third parties with whom we share it
• Right to access: request a copy of the personal information we maintain about you
• Right to delete: request deletion of personal information we collected from you, subject to legal exceptions
• Right to correct: request correction of inaccurate personal information
• Right to opt out: opt out of the sale or sharing of personal information and certain targeted advertising, where applicable
• Right to limit use of sensitive personal information: where applicable under California law
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

To submit a privacy request, contact us using the information in the Business Information section above. We will verify your request using information you have previously provided to us. You may designate an authorized agent to submit a request on your behalf where permitted by law; the agent must provide proof of authorization.

We aim to respond to verified requests within 45 days, or within the timeframe required by applicable law. If we need additional time or information, we will notify you.

California Privacy Rights (CCPA/CPRA)

California residents have specific rights under the CCPA and CPRA, including the rights listed above. In the preceding 12 months, we have collected the categories of personal information described in the "Information We Collect" section for the business purposes described in "How We Use Your Information." We have disclosed personal information to service providers as described in "How We Share Your Information."

We do not sell personal information and do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than those permitted by California law.

California's "Shine the Light" law permits California residents to request information once per year about personal information disclosed to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Global Privacy Control and Browser Signals

Where required by applicable law, we honor opt-out preference signals such as the Global Privacy Control (GPC) for applicable processing activities related to the sale or sharing of personal information. Because we do not sell or share personal information for cross-context behavioral advertising, GPC signals are acknowledged but generally do not change our practices.

Children's Privacy (COPPA)

Our website and consulting services are directed to adults and business professionals. We do not knowingly collect personal information from children under 13 years of age. If you believe we have collected information from a child under 13, please contact us and we will delete it promptly.

International Visitors

If you are located outside the United States, including in the European Economic Area or United Kingdom, you may have additional rights under local data protection laws such as the GDPR, including rights of access, rectification, erasure, restriction, portability, and objection. To exercise those rights, contact us using the details above. Where personal information is transferred internationally, we take reasonable steps to protect it in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Material changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us using the details in the Business Information section above. California residents may also contact us to obtain information about our privacy practices or to submit a verifiable consumer request.