Privacy Policy

1. Information we collect

Information you give us

• Contact form. Your name, email address, and message, and, if you choose to add them, your phone number and company name.
• Scheduling a call. When you book a consultation, Calendly collects your name, email address, the time you choose, and any answers you give. Calendly shares the booking with us.
• Email and phone. Anything you send us when you contact us directly.

Information collected automatically

When you visit the Site, our analytics provider, PostHog, records how the Site is used:

• pages you view, how you arrived (the referring site and any campaign tags in the link), and when;
• clicks and other interactions with page elements, such as buttons and links;
• browser, operating system, device type, and screen size;
• approximate location (city, region, and country) derived from your IP address;
• session recordings: a replay of how you use the Site's pages, made from mouse movements, clicks, scrolling, and the page content as it appeared to you, together with technical details such as page load timing and browser console messages; and
• a randomly generated identifier stored in your browser, so repeat visits can be counted.

Session recordings cover only your activity on this Site, not other tabs or apps. Anything you type into a form field is masked in your browser before it is sent, so recordings never contain your contact-form entries, and when you submit the form PostHog records only that a submission happened. Our hosting provider, Cloudflare, also processes your IP address and browser information to deliver the Site and protect it from abuse.

2. How we use information

• to reply to your message and schedule and hold the calls you book;
• to provide the services you ask us about, and to send quotes and follow-ups you request;
• to understand how the Site is used, including reviewing session recordings to find and fix problems, so we can improve it;
• to keep the Site secure and prevent spam and abuse; and
• to comply with law and protect our rights.

We do not sell personal information, we do not show ads on the Site, and we do not share personal information for cross-context behavioral advertising.

3. Cookies, analytics, and similar technologies

• Analytics and session recordings (PostHog). A first-party cookie and browser storage entries (names beginning with ph_) hold the random identifier described above and link the pages of one visit into a single recording.
• Preferences. Browser storage remembers whether you chose light or dark mode.
• Scheduling (Calendly). Calendly may set its own cookies when you open the scheduling window. See Calendly's privacy notice.
• Security (Cloudflare). Cloudflare may set cookies needed to protect the Site.

Your choices: analytics and session recordings are turned off if your browser sends a Do Not Track signal. You can also block or delete cookies in your browser settings, or use a content blocker. The Site keeps working if you do.

4. Text messages (SMS)

Whitney Guests sends transactional visit-status text messages, for example that a host approved or declined a visit. Visitors opt in themselves on the Whitney Guests check-in kiosk by entering their own mobile number and checking a box labeled "Text me updates about this visit," which is unchecked by default. Providing a number is optional, and consent is not a condition of entry or of any purchase. After opting in, the visitor receives a one-time confirmation text. See the Whitney Guests SMS program for the full opt-in process.

• Message frequency: 1-2 messages per visit; frequency may vary with visit activity.
• Message and data rates may apply.
• Reply STOP at any time to opt out. Reply HELP for help.
• We never send marketing or promotional texts through this program.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with or sold to any third parties.

Mobile numbers are shared only with the SMS provider that delivers the messages on our behalf, and only to deliver them.

5. How we share information

We share personal information only with:

• Service providers that run parts of the Site and our business for us, under contracts that limit their use of the data: Cloudflare (hosting and security), PostHog (analytics and session recordings), Calendly (scheduling), our email provider, our workflow automation system that routes contact-form messages to our team, and our SMS provider for Whitney Guests.
• The organization you visit, if you check in with Whitney Guests, so it can manage your visit.
• Authorities, when required by law or to protect the rights, property, or safety of our customers, the public, or us.
• A successor, if Whitney Solutions is involved in a merger, acquisition, or sale of assets, subject to this policy.

6. How long we keep information

We keep contact-form messages and scheduling details for as long as needed to respond to you and, if you become a client, for the length of our business relationship and our normal record-keeping after it. We keep analytics data and session recordings only as long as they are useful for understanding how the Site is used. You can ask us to delete your information at any time (see below).

7. Security

The Site is served only over encrypted HTTPS, and we limit access to personal information to the people who need it to do their jobs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your choices and rights

You can ask us to tell you what personal information we hold about you, to correct it, or to delete it, and you can opt out of analytics as described above. Depending on the state you live in, you may have additional rights under state privacy law. We will respond within the time the law requires, and we will not treat you differently for exercising these rights.

To make a request, email [email protected]. We may need to confirm your identity before acting on it.

9. Children's privacy

The Site is meant for businesses and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy. When we do, we will change the "Last updated" date at the top of this page, and for material changes we will give more prominent notice on the Site.