Privacy Policy

We collect information in three main ways: information you provide directly, information collected automatically when you use our website, and information we may receive from business tools or public sources.

We ask that you not submit sensitive personal information through our website unless we specifically request it. This includes Social Security numbers, personal financial information, medical records, protected health information, precise location data, or other highly sensitive information. If an engagement requires sensitive, regulated, or confidential client data, we will address that data through appropriate contracts, security terms, and project-specific processes.

We use information for legitimate business purposes, including to operate our website, respond to inquiries, evaluate potential engagements, provide consulting services, improve our content, and communicate with prospective and current clients.

If you receive marketing emails from us, you may opt out at any time by using the unsubscribe link in the email or contacting us directly. Even if you opt out of marketing communications, we may still send non-marketing messages related to an active inquiry, project, transaction, security matter, or legal obligation.

Our website may use cookies, pixels, tags, log files, and similar technologies to operate the site, remember preferences, understand site traffic, measure content performance, and improve visitor experience. Some cookies are necessary for basic website functionality. Others help us understand how visitors interact with our site so we can improve our content and services.

We use Vercel Analytics and Google Analyticsto collect information such as IP address, browser type, device information, pages visited, referring websites, and interactions with website content. Google Analytics is subject to Google’s privacy policy. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Most browsers allow you to control or block cookies through browser settings. If you disable cookies, some parts of the website may not function as intended.

At this time, our website may not respond to browser-based “Do Not Track” signals because there is no consistent industry standard for responding to them. If applicable law requires a different approach, we will follow that law.

We do not sell personal information. We may share information in limited circumstances where it is necessary to operate our business, provide our services, protect our rights, or comply with law.

When we use service providers, we expect them to use personal information only as needed to provide services to us and to protect it using appropriate safeguards.

Because 23Peaks provides AI, automation, data, software, and technology consulting services, prospective clients may choose to share information about their systems, workflows, data environments, vendors, internal processes, or business goals. We use this information to evaluate fit, scope potential work, prepare recommendations, and provide services.

Please do not submit confidential, regulated, proprietary, or sensitive information through a general website form unless we have agreed to receive it in that manner. Information exchanged after an engagement begins may be governed by separate agreements, including confidentiality obligations, data-processing terms, security requirements, business associate agreements, or statements of work.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to respond to inquiries, maintain business records, provide services, comply with legal obligations, resolve disputes, enforce agreements, and improve our website and operations.

Retention periods may vary depending on the type of information, the nature of the relationship, legal requirements, and business needs. When information is no longer reasonably needed, we will delete it, anonymize it, or retain it in a secure archived form where deletion is not practical or legally required.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, secure service providers, encryption where appropriate, limited access to business systems, and internal practices intended to protect client and prospect information.

No method of transmission over the internet or method of electronic storage is completely secure. For that reason, we cannot guarantee absolute security. If you believe information you provided to us may no longer be secure, please contact us using the information below.

Depending on where you live, you may have rights regarding your personal information. These rights may include the right to request access to your information, correction of inaccurate information, deletion of information, restriction or objection to certain processing, portability of information, withdrawal of consent, or opt-out of certain uses of personal information.

You may also opt out of marketing emails by using the unsubscribe link in our emails or by contacting us directly. You can control cookies through your browser settings and, where available, through any cookie-preference tools we provide.

To make a privacy request, please contact us at hello@23peaks.io or through our website contact form. We may need to verify your identity before fulfilling certain requests. We will respond to requests as required by applicable law.

23Peaks is based in Colorado. If you are a Colorado resident or a resident of another U.S. state with applicable privacy rights, you may have the right to access, correct, delete, or obtain a copy of certain personal information, and to opt out of certain processing activities such as targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

We do not sell personal information. If we use advertising or analytics technologies that applicable law treats as targeted advertising or sharing, we will provide legally required choices. You may contact us to exercise applicable rights using the contact information below.

23Peaks is based in the United States, and our website and business systems may be hosted or operated in the United States or other countries. If you access our website from outside the United States, your information may be transferred to, processed in, or stored in countries that may have privacy laws different from those in your country.

Where required, we will use appropriate safeguards for cross-border transfers of personal information.

Our website and services are intended for business users and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps to delete it.

Our website may include links to third-party websites, tools, articles, platforms, or resources. We are not responsible for the privacy practices, security, or content of third-party websites. We encourage you to review the privacy policies of any third-party websites or services you use.

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date above. If we make material changes, we may provide additional notice where appropriate. Your continued use of the website after an updated Privacy Policy is posted means that you acknowledge the updated policy.