Privacy Policy

1 Data Controller

The data controller responsible for your personal information is:

2 Data We Collect

We only collect the data necessary to operate the Site and respond to your inquiries. The categories of personal data we may collect include:

Category	Examples	Source
Identity Data	First name, last name	Contact form
Contact Data	Email address	Contact form
Professional Data	Company / startup name, stage of development	Contact form
Communication Data	Content of messages sent through the contact form	Contact form
Technical Data	IP address, browser type, device type, pages visited, time on site	Cookies / analytics tools
Usage Data	How you interact with the Site, click paths, referral source	Analytics tools

We do not collect sensitive personal data (e.g., health data, racial or ethnic origin, political opinions, or financial account information) through the Site.

3 How We Collect Your Data

3.1 Directly from You

When you fill out and submit the contact form on the Site, you voluntarily provide us with identity, contact, professional, and communication data.

3.2 Automatically

When you visit the Site, we automatically collect technical and usage data through cookies and similar tracking technologies. This information helps us understand how the Site is being used and improve it over time. Please refer to our Cookie Policy for full details.

3.3 From Third Parties

We may receive limited data about you from analytics providers (such as Google Analytics) based on your interactions with the Site.

4 Purpose & Legal Basis for Processing

We process your personal data only when we have a valid legal basis to do so. The table below outlines our processing purposes and their corresponding legal bases:

Purpose	Legal Basis
Responding to contact form submissions and inquiries	Legitimate interest / Performance of pre-contractual steps
Evaluating potential business collaborations or partnerships	Legitimate interest
Improving the Site and user experience	Legitimate interest
Sending communications related to our services (newsletters, updates)	Consent (opt-in)
Analytics and site performance measurement	Consent (via cookie banner) / Legitimate interest
Compliance with legal obligations	Legal obligation

5 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and no longer than required by applicable law.

• Contact form submissions: Retained for up to 2 years from the date of submission, or until the underlying business relationship is resolved, whichever is later.
• Analytics and technical data: Retained in accordance with the settings of the relevant analytics tool (typically 14–26 months).
• Marketing communications: Retained until you withdraw consent or unsubscribe.

Once the applicable retention period has expired, your data will be securely deleted or anonymized.

6 Data Sharing & Disclosure

3LOX does not sell, rent, or trade your personal data to third parties.

We may share your data in the following limited circumstances:

• Service providers: Third-party vendors who assist us in operating the Site or conducting our business (e.g., email delivery, CRM tools, analytics providers). These parties act as data processors and are bound by confidentiality agreements and data processing terms.
• Legal requirements: When required to do so by law, court order, or government authority, or to protect the rights, property, or safety of 3LOX, its users, or the public.
• Business transfers: In connection with a merger, acquisition, reorganization, or sale of all or substantially all of 3LOX's assets. In such cases, we will notify you before your data is transferred and becomes subject to a different privacy policy.
• With your consent: For any other purpose, with your prior explicit consent.

7 International Data Transfers

3LOX is based in the United States. If you are accessing the Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the U.S., where data protection laws may differ from those in your country.

Where we transfer personal data from the European Economic Area (EEA), the United Kingdom, or other jurisdictions with data transfer restrictions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.

8 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at legal@3lox.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

California residents (CCPA): You have the right to know what personal information we collect, to delete it, to opt out of its sale (we do not sell personal data), and to non-discrimination for exercising these rights. To submit a request, contact legal@3lox.com.

9 Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• HTTPS encryption for all data transmitted through the Site.
• Access controls limiting data access to authorized personnel only.
• Regular review of our data collection, storage, and processing practices.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

10 Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at legal@3lox.com and we will promptly delete the information.

11 Third-Party Services & Links

The Site may contain links to or integrate with third-party websites or services (e.g., social media platforms, analytics tools). This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

Third-party services we may use include Google Analytics, and CRM tools such as Clientify. Each of these services has its own privacy policy and data processing practices.

12 Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will update the "Last updated" date at the top of this page.

For significant changes, we may provide additional notice through the Site or by email. We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

© 2026 3LOX LLC — All Rights Reserved.