The short version. We collect what you give us through forms and the documents you share with us for an engagement. We use it to do the work and to communicate with you. We do not sell your personal information. We use cookies and tracking tools (including Google Tag Manager) that load when you visit the site. You can ask us what we hold about you, ask us to delete it, or ask us to stop sharing it for advertising, using our Data Request form.
1. Who we are
This Privacy Policy explains how Nest of Villains ("Nest of Villains," "we," "us," or "our") handles personal information collected through this website and in the course of providing our services. By using this website, you acknowledge the practices described in this policy, including the use of cookies and similar technologies described in Section 5.
2. Information we collect
We collect personal information in three ways:
- Information you submit through web forms. When you fill out a form on this site — to book a call, inquire about the pilot, request your data, or otherwise contact us — we collect the information you provide, which may include your name, email address, company, and anything you write in a message field.
- Information you provide as a client. During an engagement, you may share documents and records with us — for example, support tickets, cancellation notes, customer surveys, or other business materials. These may contain personal information about you or about individuals associated with your business.
- Information collected automatically. When you visit the site, cookies and tracking technologies may automatically collect technical and usage information such as your IP address, browser type, device information, pages viewed, and how you arrived at the site. See Section 5.
3. How we use your information
We use the personal information we collect to:
- Respond to your inquiries and communicate with you;
- Provide, perform, and improve our services;
- Analyze findings you have engaged us to analyze, where you have shared records with us;
- Understand how visitors use our site and measure the performance of our marketing;
- Maintain the security and integrity of the site; and
- Comply with legal obligations.
4. How we handle client documents
Documents and records you share with us as part of an engagement are used only to perform that engagement. We do not repurpose them for advertising, and we do not sell them. Any use of engagement findings for case studies or published materials is governed separately by your engagement agreement, not by this policy, and is subject to the permissions you grant there.
5. Cookies and tracking technologies
This site uses cookies and similar tracking technologies. These load when you visit the site. We currently deploy Google Tag Manager, a container that may load additional analytics and advertising tools from providers such as Google and Meta (Facebook). Depending on how these tools are configured, they may set cookies and collect usage information for analytics and advertising purposes, including advertising shown to you on other platforms.
How these load. At present, these technologies load automatically when the site is opened; the site does not currently offer an on-page toggle to block them before they load. By continuing to use the site, you acknowledge the use of cookies and similar technologies as described here.
Your options. You can control cookies at the browser level — most browsers let you refuse or delete cookies through their settings, though the site may not function as intended if you do. You can also opt out of certain advertising tracking through industry tools such as the Digital Advertising Alliance opt-out (opens in a new tab) and your device's ad-tracking controls. If you are a California resident, you may also submit a request through our Data Request form to opt out of the sharing of your personal information for cross-context behavioral advertising (see Section 7).
6. Whether we sell or share your information
We do not sell your personal information for money, and we have not done so.
California law (see Section 7) defines "sharing" broadly to include disclosing personal information for cross-context behavioral advertising, even when no money changes hands. Because we use advertising and analytics technologies that may disclose usage information to third parties such as Google and Meta, some of this activity may be considered "sharing" under California law. We state this plainly rather than claim an absolute that our tools might contradict. If you wish to opt out, use our Data Request form.
7. Your California privacy rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), gives you the following rights regarding your personal information:
- Right to know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to delete. You may request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.
- Right to correct. You may request that we correct inaccurate personal information we maintain about you.
- Right to opt out of sale or sharing. You have the right to opt out of the "sale" or "sharing" of your personal information. As noted in Section 6, we do not sell personal information, but our advertising technologies may constitute "sharing," and you may opt out.
- Right to limit use of sensitive personal information. To the extent we collect sensitive personal information, you may request that we limit its use to what is necessary to provide our services.
- Right to non-discrimination. We will not discriminate against you for exercising any of these rights. You will not receive different pricing, service, or quality because you made a request.
How to exercise your rights
To submit any of the requests above, use our Data Request form, or email us at the address in Section 11. We will confirm receipt and respond within the timeframes required by law. We may need to verify your identity before fulfilling certain requests, and we will only use information you provide for verification to process your request.
Authorized agents
You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of your written permission and may require you to verify your own identity directly with us.
8. How long we keep information
We keep personal information only as long as necessary for the purposes described in this policy, to provide our services, to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it.
9. How we protect information
We use reasonable administrative and technical measures to protect personal information from unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
10. Children's privacy
This site and our services are intended for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.
11. Contact us
For any question about this policy or to exercise your privacy rights, use our Data Request form or email us at:
[INSERT CONTACT EMAIL]
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page, and your continued use of the site after changes take effect constitutes acknowledgment of the updated policy.
This document is provided for general informational purposes and does not constitute legal advice. Nest of Villains recommends review by qualified legal counsel before relying on this policy.