Privacy Playbook Privacy Policy

Last Updated: September 6, 2026

This Privacy Policy ("Policy") explains the information collection, use, and sharing practices of Privacy Playbook LLC ("PPB", "Privacy Playbook," "we," "us," and "our") with respect to our website at https://privacyplaybook.com (the "Site").

We advise businesses on privacy compliance, so we have tried to hold this Site to the standard we recommend to our clients: collect only what is needed, say plainly what that is, and keep it no longer than necessary. This Policy describes what the Site actually does, not what a website of this kind might typically do.

The Site is a brochure website with a contact form. It does not use cookies, analytics, or tracking of any kind. If you never submit the contact form, we do not collect any personal information about you at all. The details are below.

PIM Sync. The PIM Sync application is covered by its own separate policy, which describes how that application handles Google account data. See the PIM Sync Privacy Policy. This Policy does not govern PIM Sync.

1. Our Principles

Privacy Playbook has designed this policy to be consistent with the following principles:

• Privacy policies should be human readable and easy to find.
• A privacy policy should describe what a service actually does. Disclosing collection that does not happen is as unhelpful as failing to disclose collection that does.
• Data collection, storage, and processing should be simplified as much as possible to enhance security, ensure consistency, and make the practices easy for users to understand.
• Data practices should meet the reasonable expectations of users.

2. Information We Collect

Information You Provide Directly to Us

The only way to submit information to us through the Site is the contact form. If you choose to use it, we collect the name, email address, and message you enter. These are the only fields the form has, and we ask for nothing else.

The contact form also contains one hidden field that is invisible to people using the Site and is ignored by us when empty. It exists solely to detect automated spam submissions, which are discarded. It does not collect any information about you, and it is not a tracking technology.

Information Collected Automatically

When you submit the contact form, our application programming interface records a standard server access log entry for that request. It contains your IP address, the date and time, the request path and method, the response status, the response size, a request identifier, and any error message. This log is generated only when the form is submitted. It is not generated when you simply read pages on the Site.

Summary

What	When it is collected	Where it is stored	How long we keep it
Name, email address, and message	Only when you submit the contact form	A private, encrypted storage bucket in the United States	Until we no longer need it, or until you ask us to delete it (see section 8)
IP address, timestamp, request and response details	Only when you submit the contact form	Server access logs in the United States	30 days, then deleted automatically
Technical execution logs (timing, errors)	Only when you submit the contact form	Server logs in the United States	30 days, then deleted automatically

3. What We Do Not Collect

Because policies of this kind often list practices that do not apply, we state the following explicitly. On this Site, we do not use:

• Cookies. The Site sets no cookies of any kind, so there is nothing to consent to or opt out of.
• Analytics. We do not use Google Analytics or any other web analytics service.
• Tracking pixels, web beacons, clear GIFs, or session recording.
• Advertising or cross-site tracking. We do not participate in advertising networks and we do not track you across other websites.
• Third-party scripts, fonts, or embeds. Every asset on the Site is served from our own domain. Loading a page does not make a request to any other company.
• Browsing logs. We do not enable or receive access logs for the pages of the Site, so we do not have a record of which pages you visited or how long you stayed.
• Accounts. There is nothing to register for and no login.
• Newsletters or marketing email. We do not operate a mailing list through this Site.
• Payments. The Site does not process payments or donations.

We also do not collect special categories of personal data, location data beyond what an IP address inherently implies, or information about you from data brokers or other third-party sources.

4. How We Use Your Information

We use the information described in section 2 only to:

• Read, respond to, and follow up on the inquiry you sent us;
• Maintain a record of our correspondence with you;
• Protect the Site against spam, abuse, and attack, and diagnose technical faults;
• Comply with the law, and establish, exercise, or defend legal claims.

We do not use your information to build a profile of you, to make automated decisions about you, or for advertising. We will not add you to a marketing list because you contacted us.

5. When We Disclose Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Service Providers. The Site runs entirely on one infrastructure provider, which stores the data described above at our direction and does not use it for its own purposes:

• Amazon Web Services (cloud hosting and storage, United States)

Legal Compliance and Protection. We may disclose your information if required to do so by law, or where we reasonably believe disclosure is necessary to comply with legal process, to enforce our agreements, to respond to your request for support, or to protect the rights, property, or safety of Privacy Playbook, our users, or the public, including for fraud and abuse prevention.

Business Transfers. If we sell or transfer our business or assets, information held at that time may be transferred as part of that transaction. We would require the recipient to honor the commitments in this Policy, and we would post notice of any material change here.

Consent. We may disclose your information to a third party where you have asked us to or agreed that we may.

6. Legal Basis for Processing Personal Data

The laws in some jurisdictions require us to tell you the legal ground we rely on to process information that can identify you. Where those laws apply, our grounds are:

• Steps taken at your request. When you send us an inquiry, we process your name, email address, and message in order to respond to you, which is a step taken at your request.
• Legitimate interests. We process contact form server logs for the limited purposes of securing the Site against spam and abuse and diagnosing technical faults. We consider these interests are not overridden by your rights, given the narrow scope of the data and the 30-day retention period.
• Legal compliance. We may process information where we are legally obliged to do so.

We do not rely on consent as a legal basis on this Site, because the Site uses no cookies or tracking that would require it.

7. Your Choices and Data Subject Rights

Depending on where you live, you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, to object to or restrict our processing of it, to receive a copy of it in a portable format, and to lodge a complaint with your data protection authority.

Because the Site has no accounts, there are no settings to adjust. To exercise any of these rights, email us at . We will respond within the time required by applicable law. We may ask you to confirm the email address you used, so that we can locate your submission and avoid disclosing it to someone else.

Please note that we cannot identify you from a server access log alone. If you did not submit the contact form, we hold no information about you to retrieve or delete.

8. Data Retention

Contact form submissions. We keep the name, email address, and message you send us for as long as we need them to respond to your inquiry and to maintain a record of our correspondence, and for as long as we are legally required or permitted to do so. We do not currently apply a fixed automatic deletion schedule to these submissions. You may ask us to delete yours at any time using the email address above, and we will do so unless we are required to retain it.

Server logs. Access logs and technical execution logs, including the IP address recorded when the contact form is submitted, are deleted automatically 30 days after they are created.

Information may persist for a limited additional period in encrypted backups and prior-version copies before those are overwritten in the normal course of business.

9. Security Measures

We have implemented technical and organizational measures appropriate to the limited amount of information we hold:

• The entire Site is served over HTTPS, with insecure requests redirected, using TLS 1.2 or higher.
• Contact form submissions are encrypted at rest using AES-256.
• The storage holding submissions is private, with all public access blocked at the account and bucket level.
• No credentials or keys are exposed to your browser, and the form endpoint accepts requests only from our own domain.
• Access to stored submissions is limited to personnel who need it.

However, we cannot and do not guarantee that these measures will prevent every unauthorized attempt to access, use, or disclose your information, since no Internet or other electronic transmission can be completely secure.

10. International Transfers

Our systems are located in the United States. If you contact us from outside the United States, the information you send will be transferred to and stored in the United States, which may not offer the same level of protection as the privacy laws of your jurisdiction. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards as required by applicable law. By submitting the contact form, you understand that your information will be processed in the United States as described in this Policy.

11. Children

The Site is intended for business users over the age of 18 and is not directed at children. We do not knowingly collect personal information from children under 13, or personal data from children under 16 in the European Economic Area. If we become aware that we have done so, we will delete it as soon as practicable. To request removal, email .

12. Third-Party Links

The Site may contain links to third-party websites. We do not embed third-party content, social media buttons, or plug-ins, so simply loading our pages does not send information to those companies. If you follow a link away from the Site, the collection and use of your information will be governed by that site's privacy policy and not this one. We encourage you to read the privacy statement of every site you visit.

13. California Residents

California residents have the right to know what personal information a business collects about them and how it is used and shared, the right to delete personal information collected from them (with some exceptions), the right to correct inaccurate personal information, the right to opt out of the sale or sharing of their personal information, and the right not to be discriminated against for exercising these rights.

The categories of personal information we collect are identifiers (your name, email address, and IP address) and the contents of the message you choose to send us, as described in section 2. We collect them for the business purposes described in section 4, and we disclose them only as described in section 5.

We have not sold or shared personal information in the preceding 12 months, and we do not do so. We also do not use or disclose sensitive personal information for purposes that require a right to limit.

To exercise any of these rights, contact .

14. Changes to this Privacy Policy

We will continue to evaluate this Privacy Policy as we update and expand our services, and we may make changes accordingly. If we change what the Site collects, we will update this Policy to match before or when that change takes effect. We will post any changes here and revise the date last updated above. If we make material changes, we will provide notice as required by law.

15. Questions About this Privacy Policy

If you have any questions about this Privacy Policy or our privacy practices, you can contact us at .

The Privacy Playbook Privacy Policy is dedicated to the public domain under the Privacy Playbook CC0 Public Domain Dedication. You are free to use and adapt this Privacy Policy and any applicable Supplemental Privacy Policy Terms for your own purposes. However, please keep in mind that this Privacy Policy may not be completely suitable for your situation. Privacy Playbook strongly encourages you to seek the advice of your own attorney before repurposing this Privacy Policy on your own site.