Effective Date: 14 February 2025
1. Introduction
Salal Hub LLC, doing business as Cedar Collaborative (“Cedar Collaborative,” “we,” “us,” or “our”), is committed to protecting the privacy of individuals who visit our website at www.cedarcollab.com or engage with our services. This Privacy Policy explains what personal data we collect, how we use and share it, how long we retain it, and what rights you have regarding your data.
Cedar Collaborative is based in Seattle, Washington, United States. We serve clients and engage website visitors in multiple jurisdictions, including the United States, Canada, the United Kingdom, the European Union (including Germany, Ireland, and Croatia), Australia, and New Zealand. We have designed this policy to meet the requirements of applicable privacy laws across these jurisdictions, including the EU General Data Protection Regulation (GDPR), the UK GDPR, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25, and the Australian Privacy Act 1988.
2. Data Controller
The data controller for personal data collected through this website and our services is Salal Hub LLC, doing business as Cedar Collaborative, Seattle, Washington, United States. Contact: jesse(at)cedarcollab.com.
3. Personal Data We Collect
We may collect the following categories of personal data: contact information including name, email address, and phone number; professional information including company name, job title, industry, and seniority; usage data including IP address, browser type, device type, pages visited, time spent on pages, and referring URL; communications data including the content of emails and contact form submissions; and cookie and tracking data collected through cookies, pixels, and similar technologies as described in Section 6 below.
We do not knowingly collect personal data from individuals under the age of 18. Our website and services are directed at business professionals and organizations.
4. How We Use Personal Data
We use personal data for the following purposes: to provide and manage our consulting services to clients; to respond to inquiries and communicate with prospective and current clients; to send marketing communications to individuals who have expressed interest in our services or consented to receive such communications; to understand how our website is used and to improve its functionality and content; to measure the reach and effectiveness of our marketing and outreach campaigns; and to comply with applicable legal obligations.
5. Legal Basis for Processing (GDPR and UK GDPR)
For individuals located in the European Union, the United Kingdom, and other jurisdictions requiring a legal basis for processing, we rely on the following grounds. We rely on consent for the use of non-essential cookies and tracking technologies, and for direct marketing communications where consent is required. We rely on contract for processing necessary to perform or prepare a consulting engagement at the request of a client. We rely on legitimate interests for analytics, website improvement, and business development outreach, where those interests are not overridden by your rights. We rely on legal obligation where processing is required to comply with applicable law.
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies. We use Complianz as our consent management platform. When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies by category. Your preferences are recorded and honored by our tag management system (Google Tag Manager), which controls which third-party scripts are loaded based on your consent choices.
The following third-party tools may place cookies or collect data through our website, subject to your consent preferences.
LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company). We use the LinkedIn Insight Tag to build website audiences for potential retargeting through LinkedIn advertising, and to obtain aggregated demographic insights about website visitors. Data is processed by LinkedIn in accordance with its privacy policy. LinkedIn is a party to the EU-US Data Privacy Framework. For more information, visit linkedin.com/legal/privacy-policy.
GoHighLevel (HighLevel Inc.). We use GoHighLevel as our marketing automation and email platform. GoHighLevel may set tracking cookies in connection with email campaigns and landing page visits to measure engagement. Data is processed by HighLevel Inc. in accordance with its privacy policy.
Microsoft Advertising (Microsoft Corporation). We use Microsoft Advertising tools, including the Universal Event Tracking tag and Microsoft Clarity, to track website visits and interactions for the purposes of advertising measurement and user experience analysis. Microsoft Clarity captures session data including clicks, scrolls, and mouse movements, used for analytical purposes. Microsoft is certified under the EU-US Data Privacy Framework. For more information, visit privacy.microsoft.com.
Ahrefs (Ahrefs Pte. Ltd.). We use Ahrefs for SEO analysis and website performance monitoring. Ahrefs may collect data about website traffic and referring sources. For more information, visit ahrefs.com/privacy.
Apollo.io (Apollo.io, Inc.). We use Apollo.io intent tracking to identify companies and professionals who visit our website and to inform our sales and marketing outreach. Apollo.io may match website visitor data against its database of business contacts. For more information, visit apollo.io/privacy-policy.
7. How We Share Personal Data
We do not sell personal data. We may share personal data with service providers who process data on our behalf in connection with the tools described in Section 6, email delivery, payment processing, and website hosting — these providers are required to handle data in accordance with applicable law and our instructions. We may also share data with professional advisors including lawyers and accountants where necessary, with law enforcement and regulatory authorities where required by applicable law or court order, and with successors in the event of a business transfer, merger, or acquisition.
8. International Data Transfers
Cedar Collaborative is based in the United States. When we transfer personal data from the EU, UK, Canada, Australia, or New Zealand to the United States or other countries, we rely on appropriate transfer mechanisms including Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement or Addendum, and adequacy decisions, certifications, or other mechanisms recognized under applicable law.
9. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Client data is retained for the duration of the engagement and for a period of seven years thereafter for accounting and legal purposes, or as otherwise required by applicable law. Prospective client and marketing data is retained until you opt out or request deletion, or until we determine the data is no longer relevant to our business purposes. Website analytics data is retained in accordance with the data retention settings of the relevant third-party tools.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal data. You may have the right to request a copy of the personal data we hold about you; to request correction of inaccurate or incomplete data; to request deletion of your personal data subject to applicable legal obligations; to object to processing based on legitimate interests or for direct marketing purposes; to request restriction of processing in certain circumstances; to receive your data in a structured, machine-readable format; and to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with your local data protection authority. In the EU, this is your national supervisory authority. In the UK, this is the Information Commissioner’s Office. In Canada, this is the Office of the Privacy Commissioner. In Australia, this is the Office of the Australian Information Commissioner.
To exercise any of these rights, please contact us at jesse(at)cedarcollab.com. We will respond within the timeframe required by applicable law, generally 30 days and extendable to 60 days in complex cases.
11. Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures are reviewed and updated as necessary. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
12. Canadian Privacy Rights
For residents of Canada, including Quebec, we collect and use personal information in accordance with PIPEDA and, where applicable, Quebec’s Law 25. You have the right to access your personal information, request corrections, and withdraw consent subject to legal or contractual restrictions. Quebec residents have additional rights under Law 25 including the right to data portability and the right to be informed of automated decision-making. To exercise your rights, contact us at jesse(at)cedarcollab.com.
13. Australian and New Zealand Privacy Rights
For residents of Australia, we handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles. For residents of New Zealand, we handle personal information in accordance with the Privacy Act 2020. You have the right to access and correct your personal information. To make a request or complaint, contact us at jesse(at)cedarcollab.com.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or applicable law. We will post the updated policy on our website with a revised effective date. For material changes, we will provide notice to active clients by email. Your continued use of our website or services following notice of changes constitutes acceptance of the updated policy.
15. Contact
For questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact Salal Hub LLC, doing business as Cedar Collaborative, Seattle, Washington, United States. Email: jesse(at)cedarcollab.com.