This Privacy Policy applies to Personal Information collected through the Site and through related communications, such as email correspondence, newsletters and introductory calls. It does not apply to information processed in the course of research services performed for clients, which is governed by the applicable client agreement, as described in Section 13. Capitalized terms not defined in this Privacy Policy have the meanings given in our Terms of Use.

Information you provide to us. We collect Personal Information that you choose to provide when you interact with the Site, including:

• Newsletter subscriptions: your email address.
• Contact inquiries: your first and last name, email address, organization, areas of interest, how you learned about us, any additional information you choose to share and your communication preferences.
• Research Report Guide requests: your first and last name, email address, organization and communication preferences.
• Scheduling requests: your name, email address, organization, responses to scheduling questions, selected appointment time and a record of any consent you provide.
• Correspondence: the contents of emails, calls and other communications you exchange with us.

Information collected automatically. When you visit the Site or open our emails, certain information is collected automatically, including:

• Device and usage information: such as your IP address, browser type, device type, referring URL, pages viewed, dates and times of access and general location derived from your IP address.
• Email engagement information: such as whether an email was delivered or opened and whether links within it were clicked, collected through pixels and tracked links.
• Cookies and similar technologies: as described in Section 4.

We do not knowingly collect sensitive Personal Information, such as health information, government identification numbers or financial account numbers, through the Site, and we ask that you not submit such information.

We may use Personal Information for the following purposes:

• to respond to inquiries, schedule and conduct introductory calls and communicate with you about our services;
• to provide materials you request, including the Research Report Guide;
• to send follow-up communications about our services to individuals who have submitted an inquiry or requested materials;
• to send the Well Charted newsletter to individuals who have subscribed;
• to operate, maintain, secure and improve the Site and to understand how visitors use it;
• to maintain business records, comply with legal obligations, enforce our Terms of Use and protect the rights, property and safety of 501 Research and others; and
• for any other purpose disclosed to you at the time of collection or with your consent.

Legal bases for processing. Where applicable data protection laws, such as the General Data Protection Regulation (“GDPR”) or the UK GDPR, require a legal basis for processing, we rely on one or more of the following: (a) your consent, such as for newsletter subscriptions and non-essential cookies, which you may withdraw at any time; (b) the performance of steps you request prior to entering into an agreement; (c) our legitimate interests in operating our business, responding to inquiries, informing interested organizations about our services and securing the Site, balanced against your rights and interests; and (d) compliance with legal obligations.

We do not sell Personal Information, use it for targeted advertising or make decisions about individuals based solely on automated processing.

The Site uses cookies and similar technologies provided by our website platform, Squarespace. We do not use advertising or social media tracking cookies.

• Strictly necessary cookies enable core functionality and security, such as protecting forms against misuse. These cookies are required for the Site to operate.
• Analytics cookies collect information about how visitors use the Site, such as the number of visitors, pages viewed and referring sources, which Squarespace compiles on our behalf. These cookies are used only with your consent where required by law.

You may accept, decline or manage non-essential cookies through the cookie banner presented when you first visit the Site or at any time through the Cookie Preferences link. Most browsers also allow you to block or delete cookies; blocking strictly necessary cookies may affect the functionality of the Site.

Do Not Track. Some browsers transmit “Do Not Track” signals. Because there is not yet a uniform industry standard for recognizing these signals, the Site does not currently respond to them. We do not permit third parties to collect information about your online activities across other websites through the Site.

We do not sell Personal Information or share it for cross-context behavioral advertising. We may disclose Personal Information in the following circumstances:

• Service providers. We engage trusted vendors that process Personal Information on our behalf and under contractual obligations to protect it, including:
  • Squarespace, for website hosting, forms and site analytics;
  • MailerLite, for email delivery and subscriber management, with data stored in its European Union data center; and
  • Microsoft 365, for business email, calendar, appointment scheduling through Microsoft Bookings and video meetings through Microsoft Teams.
• Legal requirements. We may disclose information where we believe in good faith that disclosure is required by law, regulation, subpoena or court order, or is necessary to protect the rights, property or safety of 501 Research, our clients or others.
• Business transfers. In connection with a merger, acquisition, financing, reorganization or sale of all or part of our business, Personal Information may be transferred to the successor or acquiring entity, subject to the commitments in this Privacy Policy.
• With your consent. We may disclose information for other purposes with your direction or consent.

If you subscribe to Well Charted, our research newsletter, or request the Research Report Guide, we may send you related communications, including periodic follow-up messages about our research services.

You may opt out of marketing emails at any time by clicking the unsubscribe link included in each message or by contacting us at contact@501research.com. Following an opt-out request, we will retain a limited suppression record so that we can honor your preference. Even after you opt out, we may continue to send transactional or administrative messages, such as responses to your inquiries or communications regarding an engagement.

Our emails may contain pixels and tracked links that indicate whether a message was opened or a link was clicked. We use this information to understand engagement and improve our communications.

We retain Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. In general:

• Newsletter subscriptions are retained until you unsubscribe, after which we keep a suppression record to honor your preference.
• Contact inquiries, guide requests and scheduling information are retained for up to three (3) years from our last interaction, unless the information becomes part of a client engagement governed by a Client Agreement.
• Site analytics are retained in accordance with the retention settings of our website platform.

When Personal Information is no longer needed, we delete it or de-identify it.

Depending on where you reside, you may have certain rights with respect to your Personal Information. Subject to applicable law, these may include the right to:

• request access to, or a copy of, the Personal Information we hold about you;
• request correction of inaccurate Personal Information;
• request deletion of your Personal Information;
• object to or restrict certain processing, including processing for direct marketing;
• receive your Personal Information in a portable format; and
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

United States residents. Residents of certain U.S. states may have rights under state privacy laws. We will honor applicable requests in accordance with those laws.

Residents of the European Economic Area, United Kingdom and Switzerland. You may exercise the rights listed above and have the right to lodge a complaint with your local data protection authority.

Submitting a request. To exercise any of these rights, please email contact@501research.com with the subject line “Privacy request.” We may need to verify your identity before fulfilling a request, and we will respond within thirty (30) days or within the period required by applicable law. You may designate an authorized agent to submit a request on your behalf, subject to verification. We will not discriminate against you for exercising any of your privacy rights.

501 Research is based in the United States, and our service providers process information in the United States and the European Union. If you access the Site from outside the United States, your Personal Information may be transferred to, stored in and processed in countries whose data protection laws may differ from those of your jurisdiction. Where required, we rely on appropriate safeguards for such transfers, such as Standard Contractual Clauses approved by the European Commission or an applicable data privacy framework.

We implement reasonable administrative, technical and organizational measures designed to protect Personal Information, including the use of password-protected business accounts and limiting access to personnel who need it. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

The Site is intended for professionals and is not directed to individuals under the age of eighteen (18). We do not knowingly collect Personal Information from children. If we learn that we have collected Personal Information from a child, we will delete it promptly.

The Site may contain links to websites and services operated by third parties. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

Information that clients provide to us in the course of an engagement is governed by the confidentiality and data provisions of the applicable Client Agreement. Where a Client Agreement conflicts with this Privacy Policy, the Client Agreement controls with respect to that engagement.

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page with an updated Effective Date and a summary of the changes. If we make material changes, we will provide additional notice, such as by email to subscribers. Your continued use of the Site after the Effective Date of a revised Privacy Policy constitutes acknowledgment of the updated terms.

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at: