SET COLLECTIVE LLC

Privacy Policy

Effective Date: July 1, 2024

Last Updated: August 17, 2026

setcollective.co | info@setcollective.co | 277 E Morrill Ave, Columbus, Ohio 43207

1. About This Policy

1.1 SET Collective LLC ("SET Collective," "we," "us," or "our") is an Ohio limited liability company providing marketing strategy, brand development, website design, content, and related services to interior designers, architects, real estate firms, and other businesses.

1.2 This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit setcollective.co and any related subdomain, landing page, form, assessment, or scheduling link (collectively, the "Site"); when you purchase a digital product or engage us for services; when you communicate with us by email, phone, text, video call, or social media; and when we conduct business development and outreach.

1.3 This Policy is incorporated into our Terms of Service. By using the Site or engaging with us, you acknowledge the practices described here.

1.4 Our role. For information we collect about Site visitors, prospects, and our own clients, SET Collective is the "controller" or "business" that determines how and why the information is used. Where we handle personal information contained in a client's own systems, website, customer list, or advertising accounts in the course of providing services, we act as a "processor" or "service provider" on that client's behalf and handle that information under our agreement with the client and, where required, a separate data processing agreement. Section 18 explains this in more detail.

2. Information We Collect

2.1 Information you provide directly

Identifiers and contact details: name, business name, job title, email address, phone number, mailing or business address, website URL, and social media handles.
Inquiry and assessment content: the information you enter into a contact form, project inquiry, quiz or assessment, application, discovery questionnaire, or survey, including budget range, timeline, revenue range, team size, current challenges, goals, and project details.
Scheduling information: the details you provide when booking a call, including time zone, meeting agenda, and any notes you add.
Commercial and transaction information: products and services purchased or considered, order history, proposal and contract records, invoices, billing contact details, and billing address. Payment card and bank details are collected and processed by our payment processors. We do not store full payment card numbers.
Engagement content: materials you share with us during a project, including brand assets, copy, photography, project data, analytics access, platform credentials, and files. This may include personal information about your own clients, employees, or contacts. See Section 18.
Communications: emails, text messages, direct messages, call notes, and the contents of video meetings you attend with us, including recordings and transcripts where we have notified you and, where required, obtained consent.
Marketing preferences: subscription status, opt-ins, opt-outs, and communication preferences.
Testimonial and portfolio content: reviews, quotes, images, and approvals you provide for use in our marketing.
Applicant and contractor information: resumes, portfolios, work samples, rates, and onboarding and tax information where you apply to work with us. See Section 19.

2.2 Information collected automatically

When you visit the Site, we and our service providers collect certain information automatically through cookies, pixels, tags, software development kits, server logs, and similar technologies:

Device and connection data: IP address, approximate location derived from IP address (typically city or region level), browser type and version, operating system, device type, screen resolution, and language settings.
Usage data: pages viewed, time on page, scroll depth, links and buttons clicked, forms started and completed, files downloaded, search terms used on the Site, referring and exit URLs, and date and time stamps.
Session and identifier data: cookie identifiers, session identifiers, anonymous visitor identifiers assigned by our analytics and CRM tools, and unique tracking identifiers appended to links in our emails and advertisements.
Campaign attribution data: UTM parameters, click identifiers, referral source, campaign name, ad group, and keyword, used to understand which channels drive inquiries.
Email engagement data: whether you opened an email, which links you clicked, and when. This is collected using tracking pixels embedded in our marketing and outreach emails.

2.3 Information from third parties and public sources

Professional networking and prospecting platforms: we use LinkedIn and LinkedIn Sales Navigator to identify and research businesses and professionals who may be a fit for our services. Information obtained may include name, job title, employer, company size, industry, location, career history, and publicly posted content. We may combine this with publicly available business information such as company websites, press coverage, directory listings, and business registries.
Social media platforms: when you follow, message, comment on, or engage with our accounts on Instagram, LinkedIn, or other platforms, we receive the information those platforms make available to us, including your profile name, handle, public profile details, message content, and aggregated audience insights.
Referral partners and introductions: where you are introduced to us by a referral partner, client, or professional contact, we receive the contact and context information they share with us. Section 5.4 explains how we handle information exchanged with referral partners, including 829 Studios.
Service providers: our analytics, CRM, advertising, payment, and enrichment providers may supply us with derived or supplemental data such as company firmographics, engagement scores, or deliverability status.
Clients: where a client provides us with contact lists, customer data, or access to their systems in connection with a project. See Section 18.

2.4 Sensitive information

We do not intentionally collect sensitive personal information, including government identification numbers, precise geolocation, financial account credentials, health information, biometric data, racial or ethnic origin, religious beliefs, union membership, sexual orientation, or the contents of your private communications with others. Please do not submit that information to us. Where we collect a taxpayer identification number from a contractor or vendor for tax reporting purposes, we use it only for that purpose.

3. Cookies and Tracking Technologies

3.1 What we use

A cookie is a small text file placed on your device. We and our providers also use pixels (small transparent images), tags, local storage, and similar technologies. We use the following categories:

Strictly necessary. Required to operate the Site, load pages, maintain a session, process a purchase, secure forms, and prevent fraud. These cannot be disabled through our Site.
Analytics and performance. Help us understand how visitors find and move through the Site, which pages and content perform, where visitors drop off, and how to improve the experience. Set by Google Analytics and by our CRM tracking code.
Functional. Remember preferences such as form entries, chat state, scheduling settings, and whether you have dismissed a banner.
Advertising and targeting. Used to measure the performance of our advertising, to limit how often you see an ad, and to show relevant content to people who have visited the Site or engaged with our content. These may be set by advertising and social platforms and may involve the transfer of an identifier to those platforms.

3.2 Retention of cookies

Session cookies expire when you close your browser. Persistent cookies remain for a set period, typically between thirty (30) days and twenty-four (24) months depending on the provider. Analytics identifiers set by Google Analytics typically expire within fourteen (14) months of your last activity unless refreshed.

3.3 How to control cookies

Browser settings. Most browsers allow you to block or delete cookies. Blocking strictly necessary cookies may prevent parts of the Site from working.
Cookie banner. Where a consent banner or preference center is presented, you can accept or reject non-essential categories and change your choice at any time. [CONFIRM whether a consent management platform is installed.]
Google Analytics opt-out. You can install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
Advertising opt-outs. You can manage interest-based advertising preferences at optout.aboutads.info, youradchoices.com, and youronlinechoices.eu, and within your Google, Meta, and LinkedIn account settings.
Global Privacy Control. We honor the Global Privacy Control (GPC) and similar browser-based opt-out preference signals as a request to opt out of the sale or sharing of personal information and of targeted advertising, as described in Sections 11 and 12.

3.4 Do Not Track

Browsers may transmit a "Do Not Track" signal. There is no common industry standard for responding to it, and we do not currently respond to Do Not Track signals. We do respond to Global Privacy Control signals as described above.

4. Analytics, Advertising, and Measurement

4.1 Google Analytics. We use Google Analytics 4 to measure Site traffic, acquisition channels, content performance, and conversion events such as form submissions and purchases. Google Analytics collects IP address (which Google truncates or anonymizes), device and browser data, pages viewed, events triggered, and a randomly assigned analytics identifier. We may enable Google Signals, demographic and interest reporting, or cross-device reporting, which uses data from signed-in Google users who have enabled ads personalization. Google's practices are described at policies.google.com/privacy and at business.safety.google/privacy.

4.2 Google Tag Manager and Google Ads. We may use Google Tag Manager to deploy tags and Google Ads conversion tracking and remarketing to measure advertising performance and to reach past visitors. [CONFIRM which Google products are active.]

4.3 HubSpot. We use HubSpot as our customer relationship management, marketing automation, forms, email, and scheduling platform. HubSpot's tracking code sets cookies that assign a visitor identifier, record page views and sessions, capture form submissions, track email opens and clicks, and associate that activity with a contact record once you identify yourself by submitting a form or clicking a tracked link in our email. This means that after you submit a form, HubSpot may associate your prior anonymous browsing on our Site with your contact record. HubSpot's privacy notice is at legal.hubspot.com/privacy-policy.

4.4 Social and advertising platforms. We maintain a presence on Instagram and LinkedIn and may run advertising or promoted content on those platforms. Where advertising or conversion pixels from Meta, LinkedIn, or another platform are installed on the Site, those platforms receive information about your visit, including page URL, event data, IP address, and a hashed identifier, and may use it for measurement, audience building, and advertising. Those platforms act as independent controllers for that use under their own policies. [CONFIRM whether the Meta Pixel and LinkedIn Insight Tag are installed.]

4.5 Outreach and prospecting tools. We use LinkedIn Sales Navigator and email outreach sequencing tools to identify prospective clients and referral opportunities and to send business-to-business outreach. These tools record whether a message was delivered, opened, clicked, or replied to. Outreach is directed to business contacts in a professional capacity. You may ask us to stop at any time using the contact details in Section 21, and we will remove you from active sequences and add you to our suppression list.

4.6 Search and site performance tools. We may use search console, rank tracking, heat mapping, session replay, or page speed tools to improve Site performance and content. Where session replay is used, we configure it to mask form input and sensitive fields. [CONFIRM which of these are in use.]

5. Third-Party Platforms and Service Providers

5.1 We rely on third-party providers to operate our business. Those providers process personal information on our behalf under contract and are not permitted to use it for their own purposes except as described. Categories and representative providers include:

Function

Representative providers

Information involved

Website hosting and content delivery

Site platform and hosting provider [CONFIRM]

Server logs, IP address, page requests, form submissions

CRM, forms, email marketing, scheduling

HubSpot

Contact details, inquiry content, engagement history, cookies

Website and marketing analytics

Google Analytics, Google Tag Manager, Google Search Console

Usage data, device data, identifiers, conversion events

Advertising and social

Google Ads, Meta (Facebook, Instagram), LinkedIn

Ad interaction, conversion events, audience identifiers

Prospecting and outreach

LinkedIn Sales Navigator, email sequencing tools

Business contact and firmographic data, outreach engagement

Payment processing

Payment processors [CONFIRM: Stripe, Square, PayPal, or other]

Name, email, billing address, transaction amount, payment method token

Scheduling and video meetings

Meeting scheduler and video conferencing providers [CONFIRM: HubSpot Meetings, Calendly, Acuity, Zoom, Google Meet]

Name, email, meeting details, recordings and transcripts where applicable

Business email, files, and productivity

Google Workspace and comparable productivity, storage, and project tools

Communications, documents, project files

Contracts and e-signature

E-signature platform [CONFIRM]

Name, email, signature, IP address, timestamp

Design, content, and creative tools

Design and asset platforms

Project content and assets

Artificial intelligence tools

See Section 6

Text and files submitted for drafting, formatting, summarizing, and analysis

Accounting and tax

Bookkeeping, invoicing, and tax providers

Billing records, transaction data, tax forms

5.2 Contractors and subcontractors. We engage independent contractors, including designers, developers, copywriters, photographers, and strategists. Contractors receive only the information needed to perform their work and are bound by written confidentiality, data protection, and intellectual property obligations.

5.3 Legal and business transfers. We may disclose personal information where required by law, subpoena, court order, or governmental request; to enforce our Terms of Service or protect our rights, property, or safety or those of others; to detect or prevent fraud or security incidents; and in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, in which case the recipient will be bound to handle the information consistently with this Policy.

5.4 Referral partners. SET Collective maintains referral relationships with third-party firms, including 829 Studios. Where you express interest in an introduction, or where we believe a partner is a fit for your needs, we may share your name, business name, contact details, and a summary of your situation with that partner so they can contact you. We will tell you before making an introduction. Once shared, the partner handles your information as an independent controller under its own privacy policy, and we are not responsible for its practices. We may receive a referral fee in connection with an introduction or resulting engagement.

5.5 Aggregated and de-identified information. We may create and use aggregated or de-identified information that cannot reasonably be used to identify you, including for benchmarking, case studies, and marketing. We maintain such information in de-identified form and do not attempt to re-identify it.

6. Use of Artificial Intelligence Tools

6.1 SET Collective uses artificial intelligence and machine learning tools in the course of running the business. Uses may include drafting and editing support, formatting and document preparation, research and summarization, meeting transcription and notes, image and asset preparation, code and markup assistance, data organization and analysis, building and maintaining internal standard operating procedures and workflow automations, and preparing internal training materials.

6.2 Where an AI tool processes personal information, that tool acts as a service provider to us. We prefer business and enterprise tiers with settings that do not permit the provider to use our inputs to train its models, and we configure retention settings to the shortest practical period where the tool allows it.

6.3 We do not knowingly submit sensitive personal information, payment credentials, platform passwords, or a client's confidential information to a public consumer AI tool.

6.4 We do not use AI to make decisions that produce legal or similarly significant effects about you without human involvement. A person reviews AI-assisted output before it is used or delivered.

6.5 If you are a client and you require that no AI tool be used in connection with your engagement, tell us in writing before work begins and we will confirm whether we can accommodate the request.

7. How and Why We Use Personal Information

We use personal information for the following purposes:

Responding to you. To answer inquiries, provide quotes and proposals, schedule calls, and communicate about a potential or active engagement.
Providing services and products. To deliver strategy, brand, website, content, and marketing services; to grant and manage access to digital products and templates; and to provide support.
Transactions. To process payments, issue invoices and receipts, manage payment plans, collect past-due amounts, and maintain financial and tax records.
Contracting. To prepare, deliver, execute, and administer proposals, statements of work, agreements, and license terms.
Marketing and business development. To send newsletters, content, offers, event invitations, and business-to-business outreach; to build and manage audiences and campaigns; to measure the performance of our marketing; and to identify prospective clients and referral opportunities.
Personalization. To tailor content, recommendations, and follow-up to your stated interests, business type, and stage.
Analytics and improvement. To understand how the Site and our content perform, to test changes, to improve our services and offerings, and to develop new products.
Operations and administration. To run internal processes, maintain records, manage vendors and contractors, and prepare internal reporting.
Security and fraud prevention. To protect the Site, detect and investigate fraud and abuse, enforce our Terms, and secure our systems.
Legal compliance. To comply with applicable law, respond to lawful requests, establish or defend legal claims, and maintain required records.
Portfolio and case studies. To display completed work and describe results, subject to the portfolio rights in our Terms of Service and to any confidentiality request.

8. Legal Bases for Processing (EU, EEA, UK, and Switzerland)

Where the General Data Protection Regulation or UK GDPR applies, we rely on the following legal bases:

Purpose

Legal basis

Responding to inquiries, delivering services and products, processing payment, administering contracts

Performance of a contract, or steps taken at your request before entering a contract (Art. 6(1)(b))

Analytics, Site improvement, security, fraud prevention, business development, defending legal claims, portfolio use

Our legitimate interests in operating, protecting, and growing our business, balanced against your rights (Art. 6(1)(f))

Non-essential cookies, marketing emails where consent is required, meeting recordings, testimonials

Your consent (Art. 6(1)(a)), which you may withdraw at any time

Tax, accounting, and record-keeping obligations

Compliance with a legal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, you may request information about our balancing assessment, and you may object as described in Section 13.

9. Data Retention

9.1 We keep personal information only as long as needed for the purposes described in this Policy, to comply with legal, tax, accounting, and record-keeping obligations, to resolve disputes, and to enforce our agreements. Our general practice:

10. Security

10.1 We maintain administrative, technical, and physical safeguards designed to protect personal information, including access controls and least-privilege permissions, unique credentials and multi-factor authentication on business systems, encryption in transit, use of reputable vendors with their own security programs, written confidentiality and data protection obligations for contractors, prompt removal of access when a project or relationship ends, and periodic review of tools and permissions.

10.2 No method of transmission or storage is completely secure. We cannot warrant absolute security, and you share information with us at your own risk. If we become aware of a breach affecting your personal information, we will notify you and applicable regulators where required by law and within the timeframes the law requires.

10.3 You are responsible for keeping your own credentials confidential and for the security of the accounts and platforms you control.

11. Sale and Sharing of Personal Information

11.1 We do not sell personal information for money. We have not sold personal information for monetary consideration in the preceding twelve (12) months, and we do not sell the personal information of minors under sixteen (16) years of age.

11.2 Certain privacy laws define "sale" and "sharing" broadly enough to include the use of advertising and analytics cookies that transfer identifiers to third-party platforms for cross-context behavioral advertising. To the extent our use of advertising or analytics technologies is treated as a "sale," a "share," or "targeted advertising" under those laws, the categories involved are identifiers, internet or network activity information, commercial information, and inferences, and the recipients are advertising and analytics platforms as described in Sections 4 and 5.

11.3 You may opt out at any time by adjusting your cookie preferences, using a Global Privacy Control signal, or contacting us at info@setcollective.co with the subject line "Do Not Sell or Share My Personal Information."

12. Notice to California Residents

This Section supplements the rest of this Policy and applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").

12.1 Categories of personal information collected in the past 12 months

CCPA category

Collected

Examples

Disclosed for a business purpose to

A. Identifiers

Yes

Name, email, phone, postal address, IP address, cookie and account identifiers

CRM, analytics, advertising, payment, scheduling, hosting, contractors, referral partners

B. Customer records (Cal. Civ. Code 1798.80)

Yes

Name, business address, phone, billing information

CRM, payment, accounting, contractors

C. Protected classifications

Not collected

Not applicable

D. Commercial information

Yes

Products and services purchased or considered, order history, proposal records

CRM, payment, accounting

E. Biometric information

Not collected

Not applicable

F. Internet or network activity

Yes

Pages viewed, clicks, session data, email opens, referral source

Analytics, CRM, advertising platforms

G. Geolocation data

Yes, approximate only

City or region derived from IP address

Analytics, CRM, advertising platforms

H. Sensory data

Yes, limited

Video and audio recordings and transcripts of meetings, where applicable

Video conferencing and transcription providers

I. Professional or employment information

Yes

Job title, employer, industry, company size, resumes and portfolios from applicants

CRM, prospecting tools, contractors

J. Education information

Yes, limited

Where volunteered in an application or professional profile

Not routinely disclosed

K. Inferences

Yes

Fit, interest level, lifecycle stage, engagement scoring, segment membership

CRM, analytics, advertising platforms

L. Sensitive personal information

Limited

Taxpayer identification numbers collected from contractors and vendors for tax reporting only

Accounting and tax providers

12.2 Sources. Directly from you, automatically from your device and browser, from social and professional networking platforms, from referral partners and clients, from public sources, and from our service providers. See Section 2.

12.3 Purposes. See Section 7.

12.4 Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under CCPA section 1798.121(a), and we do not use it to infer characteristics. Because of this, we are not required to offer a "Limit the Use of My Sensitive Personal Information" link, though you may still contact us with any request.

12.5 Retention. See Section 9.

12.6 Your California rights

Right to know. Request the categories and specific pieces of personal information we collected about you, the sources, the purposes, and the categories of third parties to whom we disclosed it.
Right to delete. Request deletion of personal information we collected from you, subject to exceptions such as completing a transaction, security, legal compliance, and internal uses reasonably aligned with your expectations.
Right to correct. Request correction of inaccurate personal information.
Right to opt out of sale or sharing. See Section 11.
Right to limit use of sensitive personal information. See Section 12.4.
Right to non-discrimination. We will not deny goods or services, charge a different price, or provide a different level of quality because you exercised a privacy right.
Right to appeal. If we decline a request, you may appeal by replying to our decision.

12.7 How to submit a request. Email info@setcollective.co with the subject line "California Privacy Request," or write to us at the address in Section 21. We will verify your identity by matching the information you provide against our records, and we may request additional information for a specific-pieces request. We respond within forty-five (45) days and may extend by an additional forty-five (45) days with notice.

12.8 Authorized agents. You may use an authorized agent. We will require written proof of authorization and may require you to verify your identity directly.

12.9 Shine the Light. California Civil Code section 1798.83 permits California residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

13. Notice to Other United States State Residents

13.1 Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and others as those laws take effect, may have the right to:

confirm whether we process personal data about them and access that data;
obtain a portable copy of data they provided to us;
correct inaccuracies;
request deletion;
opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects; and
appeal a refusal to act on a request.

13.2 We do not engage in profiling that produces legal or similarly significant effects about you.

13.3 To exercise these rights, email info@setcollective.co with the subject line "State Privacy Request." We respond within the timeframe required by your state's law, generally forty-five (45) days, with an extension where permitted. If we decline, you may appeal by replying to our decision within a reasonable time, and we will respond to the appeal within forty-five (45) days with a written explanation. If your appeal is denied, you may contact your state attorney general.

14. Notice to Individuals in the European Economic Area, United Kingdom, and Switzerland

14.1 Controller. SET Collective LLC, 277 E Morrill Ave, Columbus, Ohio 43207, United States, info@setcollective.co.

14.2 Legal bases. See Section 8.

14.3 Your rights. Subject to conditions and exceptions under applicable law, you have the right to:

access the personal data we hold about you and receive a copy;
rectify inaccurate or incomplete data;
erase your data ("right to be forgotten");
restrict processing in certain circumstances;
data portability, receiving data you provided in a structured, commonly used, machine-readable format;
object to processing based on legitimate interests, including profiling, and to object at any time to processing for direct marketing;
withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, which we do not carry out; and
lodge a complaint with your supervisory authority, or with the UK Information Commissioner's Office at ico.org.uk.

14.4 How to exercise. Email info@setcollective.co with the subject line "GDPR Request." We respond within one (1) month, extendable by two (2) further months for complex requests, with notice to you. We may ask for information to verify your identity.

14.5 International transfers. We are based in the United States and our service providers are located in the United States and other countries. Transferring personal data outside the EEA, UK, or Switzerland means it may be processed in a country whose data protection laws differ from those in your jurisdiction. Where we transfer personal data from those regions, we rely on appropriate safeguards, which may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or the EU-U.S. Data Privacy Framework and its UK Extension and Swiss-U.S. Data Privacy Framework where a recipient is certified. You may request a copy of the relevant safeguard by contacting us. [CONFIRM whether SET Collective intends to self-certify to the Data Privacy Framework.]

14.6 EU and UK representative. SET Collective does not currently target the EEA or UK market and has not appointed an Article 27 representative. [CONFIRM with counsel whether appointment is required based on actual EEA or UK client activity.]

14.7 Marketing. Where required, we obtain consent before sending marketing communications to individuals in these regions, and every marketing message includes an unsubscribe link.

15. Your Choices

Email marketing. Unsubscribe using the link in any marketing email, or email info@setcollective.co. Transactional and engagement-related messages will continue.
Text messages. Reply STOP to opt out. Message and data rates may apply.
Outreach. Ask us to remove you from prospecting sequences and we will add you to our suppression list.
Cookies. See Section 3.3.
Meeting recordings. Tell us before or at the start of a call if you do not want it recorded or transcribed.
Portfolio use. Clients may request in writing that their name, logo, or project not appear in our portfolio or case studies.
Access, correction, and deletion. Any individual, regardless of location, may email info@setcollective.co to request access to, correction of, or deletion of their personal information. We will honor reasonable requests subject to legal and record-keeping requirements.

16. Children's Privacy

The Site is intended for business users. We do not knowingly collect personal information from anyone under sixteen (16) years of age, and we do not sell or share the personal information of minors. If you believe a child has provided us with personal information, contact us at info@setcollective.co and we will delete it.

17. Third-Party Websites and Platforms

The Site and our content may link to third-party websites, tools, portfolios, publications, and social platforms. We do not control those properties and are not responsible for their content, security, or privacy practices. Review the privacy policy of any third-party property before providing information to it.

18. Client Data and Our Role as a Service Provider

18.1 In the course of providing services, we may access, receive, or handle personal information that belongs to a client's own contacts, customers, subscribers, employees, or website visitors. Examples include CRM records, email lists, form submissions on a client's website, advertising account data, and analytics data.

18.2 With respect to that information, the client is the controller or business and SET Collective acts as a processor or service provider. We process it only on the client's documented instructions and for the purpose of providing the agreed services. We do not sell it, do not use it for our own marketing, and do not combine it with data from other clients except to produce aggregated or de-identified benchmarks.

18.3 Clients are responsible for the lawfulness of their own data collection, for their own privacy notices, cookie banners, and consent mechanisms, and for providing accurate instructions to us.

18.4 Where required by applicable law, we will enter into a data processing agreement with the client. Clients may request one by emailing info@setcollective.co.

18.5 On termination of an engagement, we return or delete client personal data in our possession within a reasonable period, subject to Section 9 and to legal retention requirements.

19. Job Applicants and Contractors

Where you apply to work with us or engage with us as a contractor, we collect the information you provide, including your name, contact details, resume, portfolio, work samples, rates, references, and, where engaged, tax and payment information. We use it to evaluate fit, communicate with you, administer the relationship, and meet tax and record-keeping obligations. We retain applicant records for twelve (12) months and contractor records for seven (7) years after the relationship ends.

20. Changes to This Policy

We may update this Policy from time to time. The updated version takes effect when posted with a revised "Last Updated" date. Where a change is material, we will provide additional notice, which may include email or a banner on the Site. Your continued use of the Site after the effective date constitutes acceptance of the updated Policy. We encourage you to review it periodically.

21. Contact Us

Questions, requests, or concerns about this Policy or about how we handle personal information:

SET Collective LLC

Attn: Privacy

277 E Morrill Ave, Columbus, Ohio 43207

info@setcollective.co | stephanie@setcollective.co

+1 (773) 578-2163

setcollective.co

Please include the relevant subject line noted in Sections 11, 12, 13, or 14 so we can route your request correctly.

This document was prepared as a draft for review by SET Collective's attorney. It is not legal advice. Bracketed items marked [CONFIRM] require verification of the actual tools installed before publication.