Privacy Policy

1. Who we are and what this covers

Playboox (“Playboox,” “we,” “us,” or “our”) helps B2B technology companies operationalize value execution through expert-led services and our software, including PlaymakerAI and Bruce.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit playboox.com, contact us, subscribe to our resources, or engage us for services. It applies to our public website and marketing activities.

It does not apply to information we process on behalf of a client under a services agreement or data processing agreement. In those engagements the client is the controller of that data and their own privacy policy governs it; we act as a processor and handle the data only on the client’s documented instructions.

2. Information we collect

Information you provide directly

When you submit a form, book a call, or otherwise contact us, we collect the information you choose to give us. Our contact form asks for:

• First and last name
• Work email address
• Company name
• Sales team size
• Any message you choose to include

We also record the page you submitted the form from, so we understand the context of your enquiry. If you email or call us, we retain the contents of that correspondence.

Information collected automatically

When you visit our website, our hosting provider and the third-party services embedded in our pages may automatically receive:

• IP address and approximate location derived from it
• Browser type, device type, operating system, and screen characteristics
• Referring URL and the pages you view on our site
• Date, time, and duration of your visit

Information from third parties

We may also receive information about you from our clients, event partners, publicly available professional sources such as LinkedIn or company websites, and business-data providers.

3. How we use information

We use personal information to:

• Respond to your enquiries and schedule conversations
• Provide, deliver, and support our services
• Send you resources, product news, and marketing communications where permitted
• Understand how our website is used and improve its content and performance
• Identify businesses that may benefit from our services and conduct B2B outreach
• Maintain records, manage our client relationships, and administer contracts
• Protect the security and integrity of our website and systems
• Comply with legal obligations and enforce our terms

We do not use your personal information to make decisions that produce legal or similarly significant effects about you without human involvement.

4. Legal bases for processing

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal information on the following legal bases:

• Legitimate interests — to operate and improve our website, understand interest in our services, conduct B2B marketing, and secure our systems, balanced against your rights and expectations.
• Consent — where required, for example for certain marketing communications and non-essential cookies or tracking. You may withdraw consent at any time.
• Contract — to take steps at your request before entering an agreement and to perform our obligations under one.
• Legal obligation — where we must retain or disclose information to comply with applicable law.

5. Cookies and similar technologies

We and our service providers use cookies, local storage, scripts, and similar technologies to operate the site, remember your preferences, understand usage, and support the visitor-identification and chat features described in this policy.

Most browsers let you refuse or delete cookies through their settings. Blocking some cookies may affect how parts of the site function. Where required by law, we will ask for your consent before setting non-essential cookies.

6. Third-party services we use

We rely on the following providers to run our website and marketing. Each processes some personal information on our behalf or as an independent controller, and each has its own privacy policy.

We review our providers periodically and this list may change as our stack evolves.

7. How we share information

We share personal information only as described here:

• Service providers who perform functions on our behalf, such as those listed above, under contracts that limit their use of the information.
• Professional advisers such as accountants, auditors, and lawyers, where necessary.
• Legal and safety reasons — where we believe disclosure is required by law, or is reasonably necessary to protect our rights, our clients, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy continuing to apply.

We do not sell personal information for money. Some of the analytics and visitor-identification technologies described above may be considered “sharing” or “selling” for cross-context behavioral advertising under certain U.S. state privacy laws. If you wish to opt out, contact us using the details below and we will honor your request.

8. International data transfers

We are based in the United States and our service providers may process information in the United States and other countries whose data protection laws differ from those in your jurisdiction. Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on an appropriate safeguard such as the European Commission’s Standard Contractual Clauses, together with additional measures where needed.

9. How long we keep information

We keep personal information only as long as needed for the purposes described in this policy, then delete it or anonymize it. In practice that means:

• Enquiries that do not become engagements — retained for a limited period for follow-up and record-keeping.
• Client relationship records — retained for the life of the relationship and for as long as needed afterwards for legal, tax, and audit purposes.
• Marketing contacts — retained until you unsubscribe or ask us to remove you.
• Website and server logs — retained for a short period for security and troubleshooting.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and limiting access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, contact us immediately.

11. Your privacy rights

EEA, UK, and Switzerland

Subject to applicable law, you may request access to your personal information; correction of inaccurate data; deletion; restriction of or objection to processing, including objecting to direct marketing at any time; portability of data you provided to us; and withdrawal of consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.

California

Subject to the CCPA as amended by the CPRA, California residents may request to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom it was disclosed; request deletion; request correction; and opt out of the sale or sharing of personal information. We will not discriminate against you for exercising these rights.

Other U.S. states

Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Utah, and Texas, have similar rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale, and certain profiling.

How to exercise your rights

Contact us using the details in section 16. We will verify your request, usually by confirming control of the email address associated with the information, and respond within the timeframe required by applicable law. You may use an authorized agent where the law permits.

12. Your choices

• Marketing email — every marketing message includes an unsubscribe link, or you can email us to opt out. We will still send necessary messages about an active engagement.
• Cookies and tracking — manage these through your browser settings.
• Global Privacy Control — where required by law, we treat a GPC signal from your browser as a valid opt-out of sale or sharing.
• Do Not Track — browsers vary in how they send DNT signals and there is no common standard, so we do not currently respond to them.

13. Children’s privacy

Our website and services are intended for businesses and professionals. They are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

14. Third-party links

Our site links to third-party websites, including LinkedIn. We are not responsible for their privacy practices, and we encourage you to read the privacy policy of any site you visit.

15. Changes to this policy

We may update this policy to reflect changes to our practices, technology, or legal requirements. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice. Please review this page periodically.

16. How to contact us

For questions about this policy or to exercise your privacy rights: