01 Introduction

Gabify Creative Strategies, LLC ("Gabify," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, disclose, and safeguard personal data when you visit gabifycreative.com (the "Site") or engage our consulting services, and explains the rights available to you regarding that data.

Please read this Policy carefully. By using the Site or engaging our services, you acknowledge that you have read and understood the practices described herein.

02 Information We Collect

2.1 Identifiers

Name, email address, telephone number, and any other contact information you voluntarily provide when you contact us, schedule a session, or engage our services. Telephone number is optional and is collected only where you choose to provide it.

2.2 Commercial and Transaction Information

Records of services purchased, transaction dates, and billing history. Payment card transactions are processed by Stripe, Inc. We receive confirmation of payment, the last four digits of the payment card, and associated billing contact information. We do not collect, receive, or store complete payment card numbers.

2.3 Professional and Business Information

Information you provide during consulting engagements regarding your business operations, projects, organizational structure, and professional objectives, together with session notes, written summaries, and recommendations we prepare. We may use AI-assisted software tools to help prepare and organize session notes, summaries, and recommendations.

2.4 Audio and Visual Information

Recordings of consulting sessions, where you have consented to recording. See Section 4.

2.5 Communications

The content of email correspondence between you and Gabify, information you submit through the contact form on the Site (name, email address, optional telephone number, and your message), and scheduling information (such as requested appointment times) submitted through our scheduling tool.

Contact form submissions are processed and stored by Netlify, Inc., the provider that hosts the Site, and are forwarded to us by email. Netlify processes this information on our behalf as described in Section 5.

2.6 Internet Activity Information

The Site does not employ analytics software, advertising technology, or tracking mechanisms, and does not place cookies on your device. All fonts, images, and other resources required to display the Site are served directly from the Site itself; loading a page does not cause your browser to contact any third party, and no third party receives your IP address as a result of your visit.

Where you choose to follow a link to an external service — such as our scheduling or payment provider — that service will receive information about your visit in accordance with its own privacy policy. Submitting the contact form transmits the information you enter, together with your IP address, to our hosting provider for delivery to us. See Section 5 and our Terms & Conditions.

03 Purposes of Processing

We process personal data for the following purposes:

We limit our collection of personal data to what is adequate, relevant, and reasonably necessary for these disclosed purposes. We do not process personal data for purposes that are neither reasonably necessary to, nor compatible with, the purposes stated above without first obtaining your consent.

04 Session Recordings

We record consulting sessions for the sole purpose of preparing accurate written summaries and recommendations for your use.

Consent

We request your consent before recording any session. Consent is entirely voluntary, may be withheld or withdrawn at any time, and declining does not affect the delivery, quality, or price of services.

Retention

Where you request a copy, the recording is delivered together with your written summary. Where you do not request a copy, the recording is deleted upon delivery of the summary.

Restrictions on Use

Recordings are not disclosed to any third party, are not used for marketing, promotional, research, or model-training purposes, and are not retained beyond the periods described in Section 6.

05 Disclosure of Personal Data

We disclose personal data to service providers that perform functions on our behalf, including website hosting and contact form processing, payment processing, email hosting, videoconferencing, scheduling, cloud-based file storage, and AI-assisted note preparation. These providers process personal data solely on our instructions and are contractually or by policy restricted from using it for their own purposes.

We may additionally disclose personal data where required to comply with applicable law, legal process, or governmental request; to establish, exercise, or defend legal claims; or to protect the rights, property, or safety of Gabify, our clients, or others.

06 Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this Policy or as required by applicable law.

Upon expiration of the applicable retention period, personal data is deleted or destroyed.

07 Confidentiality

All information disclosed to Gabify in the course of a consulting engagement is treated as confidential.

We do not disclose client business information, financial information, organizational details, or the substance of consulting sessions to any third party, including other clients, except as expressly provided in Section 5 or as required by law.

We do not reference client engagements in marketing materials, case studies, testimonials, or promotional content — including in anonymized or de-identified form — without obtaining prior written consent from the client. Consent may be withheld or withdrawn at any time.

08 Your Privacy Rights

Connecticut residents have the following rights under the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.):

• Right to Confirm and Access. To confirm whether we process your personal data and to access such data.
• Right to Correct. To correct inaccuracies in your personal data, taking into account the nature of the data and the purposes of processing.
• Right to Delete. To delete personal data provided by or obtained about you.
• Right to Data Portability. To obtain a copy of your personal data in a portable and readily usable format.
• Right to Opt Out. To opt out of the sale of personal data, processing for targeted advertising, and profiling in furtherance of decisions producing legal or similarly significant effects.

Because we do not sell personal data, engage in targeted advertising, or conduct profiling, the right to opt out has no present application to our processing activities.

As a matter of policy, we extend the rights described above to all clients and Site visitors regardless of state of residence.

8.1 Submitting a Request

Requests may be submitted to hello@gabifycreative.com. To protect against unauthorized disclosure, we may require verification of your identity before acting on a request, which ordinarily consists of confirmation from the email address associated with your account.

8.2 Response Timeline

We will respond within forty-five (45) days of receipt. Where reasonably necessary due to the complexity or volume of requests, we may extend this period by an additional forty-five (45) days and will notify you of the extension and the reason for it within the initial response period.

8.3 Fees

Requests are processed free of charge once per twelve-month period. We reserve the right to charge a reasonable administrative fee for excessive, repetitive, or manifestly unfounded requests, as permitted under applicable law.

8.4 Non-Discrimination

We will not deny goods or services, charge different prices, or provide a different level of service because you exercised any right described in this Section.

8.5 Right to Appeal

If we decline to act on your request, we will notify you in writing of our decision and the reasons for it, together with instructions for appealing that decision. To appeal, reply to our written decision with "Appeal" in the subject line. We will respond in writing within sixty (60) days of receipt, setting out any action taken or not taken and the reasoning behind it.

If your appeal is denied, you may submit a complaint to the Connecticut Attorney General at portal.ct.gov/ag.

8.6 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require written authorization and verification of the agent's identity.

09 Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal data. These measures include access controls on systems containing client information, use of service providers that maintain industry-standard security practices, and restriction of access to personal data to those with a legitimate business need.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a breach of security affecting your personal data, we will provide notification in accordance with Conn. Gen. Stat. § 36a-701b and other applicable law.

10 Children's Privacy

Our services are directed to adults and are not intended for individuals under eighteen (18) years of age. We do not knowingly collect personal data from children under thirteen (13) as defined by the Children's Online Privacy Protection Act, or from minors under sixteen (16) for purposes requiring consent under the Connecticut Data Privacy Act. If we become aware that we have collected personal data from a minor, we will delete it promptly. Parents or guardians who believe we may have collected such data should contact us at the address below.

11 Changes to This Policy

We may update this Policy from time to time. Where we make material changes, we will revise the "Last Updated" date and post the updated Policy on the Site prior to the change taking effect.

Where a material change affects the processing of personal data previously collected, we will provide direct notice and, where required, an opportunity to withdraw consent to further processing that is materially different from the processing disclosed at the time of collection.

12 Contact

Questions, requests, or complaints regarding this Policy may be directed to:

We respond to email inquiries within two business days.