Privacy Policy

1. Who we are

Percipio Company is a consulting practice based in the San Francisco Bay Area, California, led by Matthew Cahill. We provide cognitive bias mitigation consulting, executive coaching, workplace mediation, board advisory, peer advisory groups, and AI consulting services to organizations and individuals.

Business contact: Percipio Company · San Francisco Bay Area, CA · (925) 644-7080 · info@percipiocompany.com

2. What information we collect

We collect information in the following ways:

Information you provide directly:

• Contact forms — name, email address, and any message content you submit through our website contact form or assessment tools.
• Assessment responses — your answers to our Unconscious Bias Assessment, Belonging Assessment, Human Delta Assessment, and AI Assessment. These responses are used to generate your results and aggregate anonymous benchmarking data.
• Scheduling information — name, email, and scheduling preferences when booking a meeting through HubSpot Meetings or Zcal.
• Payment information — billing details when purchasing services through HubSpot payment links. Percipio Company does not store payment card data directly — this is handled by HubSpot's payment processor.
• Email correspondence — communications you send to us by email, including contacts synced from Gmail when you initiate contact.

Information collected automatically:

• Usage data — pages visited, time on page, links clicked, and general browsing behavior on percipiocompany.com, collected via Google Analytics 4.
• Device and browser information — browser type, operating system, screen resolution, and IP address, collected automatically by our analytics tools.
• Cookies — small data files placed on your device to support analytics, form functionality, and session management. See the Cookies section below.

3. How we use your information

• To deliver services — responding to inquiries, scheduling consultations, delivering assessment results, and fulfilling service engagements.
• To improve our services — analyzing anonymized assessment data to maintain and update benchmark datasets used in assessment scoring.
• To communicate with you — sending confirmation emails, service-related updates, and occasional marketing communications. You may opt out of marketing emails at any time.
• To process payments — facilitating service purchases made through our website.
• To analyze website performance — understanding how visitors use our site so we can improve content and user experience.
• To comply with legal obligations — maintaining records required by applicable law.

We do not sell your personal information to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Third-party services

We use the following third-party services that may receive or process your personal information:

• HubSpot (HubSpot, Inc.) — CRM, contact forms, email marketing, meeting scheduling, and payment processing. Data is stored on HubSpot's servers. HubSpot Privacy Policy
• Google Analytics 4 (Google LLC) — website analytics. Data is processed by Google and subject to Google's data processing terms. Google Privacy Policy
• Zcal — meeting scheduling. When you book a meeting through Zcal, your name and email are shared with Zcal's platform. Zcal Privacy Policy
• SendGrid (Twilio Inc.) — occasional bulk email communications. When used, your email address is processed by SendGrid's platform. SendGrid Privacy Policy
• Anthropic (Claude) and OpenAI (ChatGPT) — AI platforms used in certain consulting engagements. Data shared with these platforms during AI consulting work is governed by their respective privacy policies. We do not share client personal information with AI platforms without explicit consent.
• Google Workspace / Gmail — email communications and contact management. Email correspondence is processed through Google's servers.

Each third-party service operates under its own privacy policy. We encourage you to review those policies for information about how they handle your data.

5. Cookies and analytics

Our website uses cookies — small text files stored on your device — for the following purposes:

• Analytics cookies — Google Analytics 4 uses cookies to track page visits, session duration, and user interactions. This data is anonymized and aggregated.
• Functional cookies — HubSpot uses cookies to support form functionality, track form submissions, and maintain session state for our embedded tools.
• Preference cookies — we use a cookie to remember whether you have dismissed our cookie consent banner.

You can control cookie settings through your browser. Disabling cookies may affect the functionality of our assessment tools and contact forms. Most browsers allow you to refuse or delete cookies through their settings menus.

We do not use advertising cookies, retargeting cookies, or cookies that track you across third-party websites.

6. Payment information

When you purchase services through Percipio Company's website, payment processing is handled by HubSpot's integrated payment system, powered by Stripe. Percipio Company does not store, process, or have access to your full payment card number, CVV, or bank account details.

Billing information including name, billing address, and transaction records may be retained in our HubSpot CRM for accounting and service fulfillment purposes. Payment card data is handled exclusively by our payment processor and is subject to PCI-DSS compliance standards.

7. Data retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, including maintaining active client relationships and complying with legal obligations.

• Contact and CRM data — retained in HubSpot for the duration of our relationship and for a reasonable period thereafter. You may request deletion at any time.
• Assessment responses — individual responses are retained to support your results and may contribute to anonymized aggregate benchmark data. Identifying information can be removed upon request.
• Analytics data — Google Analytics data is retained according to our GA4 data retention settings, currently set to 14 months.
• Payment records — retained as required by applicable tax and accounting laws, typically seven years.
• Email correspondence — retained in accordance with our email provider's policies and our business record-keeping practices.

To request deletion of your personal information, contact us at info@percipiocompany.com.

8. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to certain legal exceptions.
• Portability — request your data in a structured, machine-readable format.
• Opt-out of marketing — unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us directly.
• Withdraw consent — where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at info@percipiocompany.com. We will respond within 30 days.

9. California residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.

• Right to know — you have the right to know what personal information we collect, use, disclose, and sell.
• Right to delete — you have the right to request deletion of personal information we have collected from you.
• Right to correct — you have the right to request correction of inaccurate personal information.
• Right to opt-out of sale — Percipio Company does not sell personal information. We do not share personal information for cross-context behavioral advertising.
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at info@percipiocompany.com with the subject line "CCPA Request." We will verify your identity before processing the request and respond within 45 days.

Categories of personal information collected in the past 12 months: identifiers (name, email, IP address), commercial information (service purchases), internet activity (website usage data), and professional information (job title, company, provided voluntarily).

10. International users

Percipio Company is based in the United States. If you are accessing our services from outside the United States — including from Mexico, Italy, or other countries — please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

For users in the European Union or United Kingdom, we process your personal data on the basis of legitimate interests (providing services you have requested) and, where required, with your consent. You have the right to lodge a complaint with your local supervisory authority if you believe your data has been processed unlawfully.

For users in Mexico, we process your personal data in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). You have the right to access, correct, cancel, and oppose the processing of your personal data (ARCO rights) by contacting us at info@percipiocompany.com.

11. Children

Percipio Company's services are intended exclusively for business professionals and organizations. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted personal information through our website, please contact us immediately at info@percipiocompany.com and we will delete it promptly.

12. Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include HTTPS encryption for all data transmitted through our website, access controls on our CRM and email systems, and reliance on SOC 2-compliant third-party platforms.

No method of internet transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify affected individuals as required by applicable law.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website and services after any changes constitutes acceptance of the updated policy.

14. Contact us

For any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

We will respond to all privacy-related inquiries within 30 days. For CCPA requests, we will respond within 45 days as required by law.