Privacy Policy

Effective Date: April 1, 2026

Last Updated: April 1, 2026

1. Introduction

Sidekick Strategies LLC ("Sidekick Strategies," "we," "us," or "our") is a HubSpot Platinum Partner agency registered in North Carolina, USA. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at sidekickstrategies.com (the "Site") or engage with our services.

By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Site.

2. Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Fill out a contact form (first name, last name, email address, company name, message)
• Subscribe to our newsletter or resource updates (name, email, subscription preferences)
• Register for events or webinars (name, email)
• Book a strategy call through our HubSpot meetings integration (name, email, company)
• Submit suggestions for podcast guests or topics (name, email, suggestion details)
• Leave comments on articles (display name, stored locally in your browser)
• Download offers or resources (name, email)

Information Collected Automatically

When you visit the Site, we automatically collect certain information, including:

• Device and browser information: IP address, browser type and version, operating system, screen resolution
• Usage data: Pages visited, time spent on pages, referring URL, click patterns
• Location data: Approximate geographic location based on IP address

This information is collected through Google Analytics (GA4) and HubSpot tracking technologies.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Send newsletters, resource updates, and event notifications you've opted into
• Schedule and conduct strategy calls
• Improve our website, content, and user experience through analytics
• Understand how visitors interact with our Site to improve performance
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for automated decision-making or profiling.

4. Third-Party Services

We use the following third-party services that may collect or process your data:

• HubSpot (CRM, forms, email marketing, meetings scheduling): Processes form submissions, manages contact records, and delivers email communications. HubSpot Privacy Policy
• Google Analytics (GA4): Collects anonymized usage data to help us understand website traffic patterns. Google Privacy Policy
• Vercel (website hosting): Hosts and serves our website. Vercel Privacy Policy
• Sanity.io (content management): Stores and delivers our website content. Sanity Privacy Policy
• YouTube (embedded videos): Video embeds may set cookies when you interact with them. Google Privacy Policy

5. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to:

• Essential cookies: Necessary for the Site to function (session management)
• Analytics cookies: Google Analytics and HubSpot tracking to understand usage patterns
• Functional cookies: Remember your preferences (e.g., comment display name stored in localStorage)

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling cookies may affect Site functionality.

We honor "Do Not Track" (DNT) browser signals and Global Privacy Control (GPC) signals where required by applicable law.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Contact form submissions: Retained in HubSpot CRM for the duration of our business relationship, plus 2 years
• Newsletter subscriptions: Until you unsubscribe
• Analytics data: Google Analytics retains data according to their retention policies (default 14 months)
• Comments: Stored locally in your browser; you can clear them at any time by clearing your browser storage

7. Your Rights: California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions
• Right to Correct: You may request correction of inaccurate personal information
• Right to Opt-Out: You have the right to opt out of the "sale" or "sharing" of your personal information. We do not sell or share your personal information as defined by the CCPA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights

To exercise these rights, contact us at george@georgebthomas.com. We will respond within 45 days as required by law.

8. Your Rights: EU/UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of incomplete or inaccurate data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interest or for direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

Legal Basis for Processing: We process personal data on the following bases:

• Legitimate Interest: For B2B communications, service delivery, and website analytics
• Consent: For newsletter subscriptions and marketing communications
• Contractual Necessity: When required to deliver services you have engaged us for
• Legal Obligation: When required by applicable law

To exercise these rights, contact us at george@georgebthomas.com. We will respond within 30 days as required by GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS/TLS), access controls, and secure third-party service providers. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Site is not directed to children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will promptly delete it.

11. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and third-party service providers are located. If you are located outside the United States, please be aware that data protection laws in the US may differ from those in your jurisdiction. By using the Site, you consent to the transfer of your information to the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Site after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Email: george@georgebthomas.com
• Website: sidekickstrategies.com/contact
• Entity: Sidekick Strategies LLC, North Carolina, USA