Privacy Policy

Last updated: October 29, 2025

Introduction

We at OpsBridge Sprint™ ("we", "us", or "our") provide independent, vendor-agnostic advisory services. This Privacy Policy explains what we collect, how we use it, and the choices you have.

We aim for clarity and minimal data collection. If we change what we collect or how we use it (for example, if we add analytics), we'll update this Policy and, where required, ask for consent.

1) Who we are & scope

Operator & data controller: OpsBridge Sprint (“we,” “us”). Contact: <hello@opsbridgesprint.com>

Site: opsbridgesprint.com (the “Site”).

Audience: finance and operations professionals evaluating our advisory services

What this Policy covers: information we collect and process when you visit/use the Site or communicate with us directly (e.g., contact form, email). It does not cover:
- client engagements (governed by a seperate written agreement), or
- third-party pages you access from the Site (e.g., Calendly scheduling or Stripe payment pages), which are governed by those providers’ policies.

2) What we collect

We collect only what we need to respond to you and run the site.

You provide directly (e.g., contact form or email):

Identifiers and professional info: First and last name, company, work email, phone (optional), preferred contact method (optional), and the message you submit (optional).

Collected automatically (site operation):

Technical data in server logs (e.g., IP address, device/browser info) needed to load and secure the site.

If you book an intro:

If you choose to book via a scheduling link (e.g., Calendly), that service will collect your contact details and meeting preferences on its own pages.

If you pay an invoice or checkout (future):

Payments are handled by Stripe on Stripe-hosted pages. We don't see or store your full payment card details.

We do not collect sensitive categories of personal information, and we do not create profile "inferences."

3) How we use information (purposes)

Service delivery & support: respond to inquiries, schedule intro calls, provide information about our advisory sprint.

Security & site reliability: operate, troubleshoot, and protect the site (fraud prevention, abuse detection).

Business records & compliance: keep necessary records, comply with applicable laws, and enforce agreements.

We do not use your data for behavioral advertising or retargeting.

4) Legal bases (GDPR/UK-GDPR)

Where applicable, we rely on:

Contract/steps prior to contract (Art. 6(1)(b)) to respond to your request or schedule a call.

Legitimate interests (Art. 6(1)(f)) for site security, fraud prevention, and essential operations (balanced against your rights).

Consent (Art. 6(1)(a)) only where we present an explicit choice (e.g., future non-essential cookies).

(if applicable in future) Legal obligation (Art. 6(1)(c)) for record-keeping or responding to lawful requests.

5) Cookies & similar technologies

We use only strictly necessary/functional cookies provided by our platform (Wix) to keep the site secure and working (e.g., session IDs, security tokens, load-balancing/caching indicators). Example names you may see: XSRF-TOKEN, hs, svSession, bSession, ssr-caching, and session-binding cookies. Depending on your browser’s settings, some platform cookies may appear under wix.com.

We do not use analytics or advertising cookies at this time.

If we later add non-essential technologies (e.g., Google Analytics 4), we'll update this Policy and, where required, request consent before they are set.

You can manage cookies in your browser. Blocking strictly necessary cookies may affect core site functions.

6) Third-party services (processors)

We use trusted providers to operate the site and communicate with you. These providers process your data on our behalf and according to our instructions:

Wix (site hosting, essential cookies, security)

Email provider (e.g., Google Workspace) for business communications

Scheduling (e.g., Calendly), only if you choose to book via their pages

Payments (Stripe), only if you pay an invoice/checkout via Stripe-hosted pages

Each provider maintains its own privacy policy and security program. These services may set limited, essential cookies on their domains when you interact with them.

7) Sharing & disclosures

We do not sell or share personal information for cross-context behavioral advertising. We disclose personal information only:

to our service providers listed above;

if required by law, regulation, or legal process;

to protect rights, safety, or prevent fraud/abuse;

with your direction or consent.

8) International transfers

Our providers may process data in multiple countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) or adequacy decisions to protect personal data transferred internationally.

9) Security

We apply reasonable technical and organizational measures, including TLS/SSL in transit, platform firewalls and DDoS protections (via Wix), role-based access controls, least-privilege access, and regular updates. No method of transmission or storage is 100% secure, but we work to protect your information.

10) Retention

We keep personal information only as long as needed for the purposes above or as required by law. As guidelines:

Contact inquiries: typically up to 12 months after last interaction.

Business correspondence/records: kept as required for legal, tax, and compliance obligations.

No analytics profiles: we do not maintain analytics profiles because analytics are not enabled.

When data is no longer needed, we delete or de-identify it.

11) Your rights

Your rights depend on where you live. Subject to limits under applicable law, you may have the right to:

Access: know whether we process your data and obtain a copy.

Correct: request correction of inaccurate data.

Delete: request deletion of your data (subject to legal exceptions).

Restrict/Object: limit or object to certain processing (e.g., based on legitimate interests).

Portability: receive data you provided in a portable format.

Appeal (in some U.S. states): appeal a decision on your request.

California (CPRA). We do not sell or share personal information for cross-context behavioral advertising. You may request access, deletion, and correction, and obtain information about our collection and use by category.

Virginia (VCDPA). You may request access, correction, deletion, portability, and opt-out of targeted advertising (not used), sale (not applicable), and certain profiling (not used).

How to exercise your rights: email <hello@opsbridgesprint.com> We will verify your request and respond as required by law. You may use an authorized agent where permitted.

12) Children's privacy

Our site is intended for business professionals and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us to delete it.

13) Updates to this Policy

We may update this Policy to reflect changes to our practices or legal requirements. We'll post the updated version with a new "Last updated" date and, where required, provide additional notice or obtain consent.

14) Contact

Questions about this Policy: <hello@opsbridgesprint.com>

Accessibility or alternate-format requests: See our Accessibility Statement

If you're in the EU/UK and have concerns unresolved by us, you may have the right to contact your local data protection authority.