Privacy Policy

We deliberately keep data collection to a minimum. The Site does not offer user accounts, and we do not collect sensitive personal information (such as health, financial, or biometric data) through it.

We do not knowingly collect personal information from any other source, and we do not use the Site to profile visitors or make automated decisions that have legal or similarly significant effects.

We do not use your information for marketing unless you explicitly ask us to (for example, requesting information about our products), and we do not sell personal information or share it for cross-context behavioral advertising.

The Site uses two kinds of cookies and similar technologies:

• Essential cookies. Required for the Site to function properly (for example, load balancing and security). These cannot be switched off and do not require consent.
• Analytics cookies. Help us understand, in aggregate, how visitors use the Site — which pages are popular, where visitors come from, and how long they stay. Analytics data is used for statistical purposes only.

Your choices:

• Where required by law (including in the EEA and UK), analytics and other non-essential cookies are set only with your consent, via the cookie banner shown on your first visit. You can withdraw or change your consent at any time through the cookie settings link on the Site.
• You can also block or delete cookies through your browser settings. Blocking essential cookies may affect how the Site functions.
• Where legally required (for example, under certain US state laws), we honor Global Privacy Control (GPC) signals as a valid opt-out. The Site does not otherwise respond to "Do Not Track" browser signals, as no common industry standard exists.

We do not sell personal information, and we do not share it with third parties for their own marketing. We share personal information only with:

• Service providers who process data on our behalf — such as website hosting, analytics, email, and form-handling providers — under contracts that restrict their use of your data to providing services to us
• Professional advisors such as lawyers, auditors, and insurers, where reasonably necessary
• Authorities and regulators where we are required to by law, court order, or legal process, or where disclosure is necessary to protect our rights, safety, or property
• A successor entity in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case this policy will continue to apply to your information until amended

We may process and store your information in countries other than the one you live in, including countries that may not provide the same level of data protection as your home jurisdiction. Where we transfer personal information internationally from regions that restrict such transfers (such as the EEA, UK, or Switzerland), we rely on appropriate safeguards, such as:

• Transfers to countries covered by an adequacy decision
• Standard contractual clauses (or the UK equivalent) with the receiving party
• Other lawful transfer mechanisms recognized in your jurisdiction

You may contact us (Section 12) for more information about the safeguards applied to a specific transfer.

We keep personal information only as long as needed for the purposes described in this policy:

We may retain information longer where required by law, to resolve disputes, or to enforce our agreements. When information is no longer needed, we delete or anonymize it.

Privacy laws in many jurisdictions give you rights over your personal information. Depending on where you live, these may include the right to:

• Access the personal information we hold about you and receive a copy
• Correct inaccurate or incomplete information
• Delete your personal information
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent (this does not affect processing before withdrawal)
• Data portability — receive your data in a structured, commonly used, machine-readable format
• Non-discrimination — we will not treat you differently for exercising your rights

Region-specific notes:

• EEA, UK & Switzerland. You have all of the rights above under the GDPR and equivalent laws, and the right to lodge a complaint with your local supervisory authority (for example, your national data protection authority, or the UK ICO).
• United States. Residents of California and other states with comprehensive privacy laws have rights of access, deletion, correction, and portability. We do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). California residents may also exercise rights through an authorized agent, and may appeal a refusal by contacting us.
• Canada. You have rights of access and correction under PIPEDA and applicable provincial laws, and may complain to the Office of the Privacy Commissioner of Canada.
• Asia-Pacific. Residents of jurisdictions such as Japan (APPI), Singapore (PDPA), Australia (Privacy Act), and South Korea (PIPA) have comparable rights of access and correction under their local laws.

How to exercise your rights. Email us at privacy@capablyhuman.com. We may need to verify your identity before acting on a request — usually by confirming control of the email address associated with your information. We respond within the timeframe required by applicable law (generally within 30 days, or 45 days in some US states, extendable where permitted). If we refuse a request, we will explain why, and you may appeal or complain to your local regulator.

The Site is intended for a general business audience and is not directed at children under 16 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at privacy@capablyhuman.com and we will delete it promptly.

We use reasonable technical and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, or destruction — including encryption in transit (HTTPS), access controls, and vendor due diligence. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant authorities where required by law.

We do not use personal information collected through the Site for automated decision-making or profiling that produces legal or similarly significant effects.

The Site may contain links to third-party websites and services. We are not responsible for their privacy practices, and this policy does not apply to them. We encourage you to review the privacy policy of any site you visit.

We may update this policy from time to time to reflect changes in our practices or the law. We will post the updated version on this page with a revised effective date, and — for material changes — provide more prominent notice on the Site. Your continued use of the Site after an update means the revised policy applies.

Capably Human Inc.
Attn: Privacy
Email: privacy@capablyhuman.com

If you are in the EEA or UK and are not satisfied with our response, you may contact your local data protection authority.