Privacy and Cookie Policy

1. Who we are

Infinitus Management Consulting LLC (“Infinitus MC,” “we,” “us”) is a B2B marketing agency based in Brooklyn, New York. We operate infinitusmc.com and the subdomains that sit under it. We built products that back our consultancy, including our free assessment tools and product portal (studio.infinitusmc.com) and our client portal (portal.infinitusmc.com). Together we call these the “Sites.”

This policy explains what personal data we collect through the Sites, why we collect it, who sees it, and what control you have. It does not cover client work we perform under a services agreement. Data we handle for a client in that context is governed by the agreement with that client.

For privacy questions, contact us at info@infinitusmc.com.

2. What we collect

Information you give us.

• Contact and inquiry details: name, work email, company, role, phone number if you provide one, and the contents of any message or form you submit.
• Booking details: when you book a discovery call, the scheduling tool collects your name, email, selected time, and any notes you add.
• Client portal details: account and contact information for people who access the portal on behalf of a client.
• Assessment tool inputs: the website address you submit to our AI readability and brand check tools, and the publicly accessible content at that address that the tool reads to produce a result.
• Correspondence: emails and other messages you send us.

Information collected automatically.

• Device and usage data: IP address, browser type, operating system, referring page, pages viewed, and approximate location derived from the IP address.
• Cookie and similar technology data, described in the Cookie Policy below.

Information from other sources. We may receive business contact information about people at companies we have reason to believe are a fit for our services, from business contact databases and public professional profiles. We use it for business-to-business outreach only.

We do not knowingly collect sensitive personal data through the Sites, and we ask that you do not submit it.

3. How we use it

We do not use personal data from the Sites to make decisions that produce legal or similarly significant effects on you through automated means.

4. Legal bases (EU and UK visitors)

If the EU or UK GDPR applies to you, we rely on these bases:

• Contract: to take steps you request before entering a contract, and to deliver services and portal access under one.
• Legitimate interests: to respond to business inquiries, send business-to-business communications, secure the Sites, and understand how they are used. We balance these interests against your rights and do not rely on them where your rights override.
• Consent: for non-essential cookies and similar technologies, and for any marketing communication where the law requires consent. You can withdraw consent at any time.
• Legal obligation: to keep records we are required by law to keep.

5. Who we share it with

We share personal data only with service providers that process it on our behalf, with professional advisers, and where the law requires it. We do not sell personal information, and we do not share it with third parties for their own advertising.

A current list of our service providers is available on request at info@infinitusmc.com.

These providers may use the data only to provide their service to us, under their terms with us. We may also disclose personal data to our lawyers, accountants, and insurers, to a successor if we are involved in a merger, acquisition, or sale of assets, and to authorities when we are legally required to or need to protect our rights, our clients, or others.

If you submit a website address to an assessment tool, the tool fetches the public content at that address from our systems. Do not submit addresses that require a login or contain information you do not want fetched.

6. International transfers

We are based in the United States, and so are or may be our providers. If you visit from the European Economic Area, the United Kingdom, or Switzerland, your data will be transferred to and processed in the United States. Where required, we rely on safeguards such as the EU-U.S. Data Privacy Framework (for providers certified under it) or Standard Contractual Clauses. You can request details of the safeguard that applies by writing to info@infinitusmc.com.

7. How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for, and to meet legal, tax, and accounting requirements. In practice:

• Inquiries and booking records: while the conversation is active, then up to 24 months after our last contact, unless you become a client.
• Client and contract records: for the life of the engagement and the period the law requires after it ends.
• Marketing preferences and opt-outs: until you ask us to delete them, so that we can honor your opt-out.
• Cookie data: for the periods listed in the Cookie Policy.
• Cookie consent records: 3 years, as proof of your choice.

When data is no longer needed, we delete it or anonymize it.

8. Your rights

Everyone. You can ask us to tell you what personal data we hold about you, correct it, or delete it. You can opt out of marketing email at any time using the link in the message or by writing to info@infinitusmc.com.

EU, UK, and Swiss visitors. You also have the right to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing that happened before. You may lodge a complaint with your local data protection authority.

California and other US state residents. Depending on where you live, you may have the right to know and access the personal information we collect, correct it, delete it, and opt out of the sale or sharing of personal information. We do not sell personal information. We do not use or disclose sensitive personal information for purposes beyond those the law permits without a right to limit. We honor opt-out preference signals, including Global Privacy Control, for the browser that sends them. We will not discriminate against you for exercising these rights.

How to exercise them. Email info@infinitusmc.com with the subject line “Privacy request.” We may need to verify your identity before acting, and we will respond within the time the law allows, generally 30 to 45 days. You may use an authorized agent; we may ask for proof of their authority.

9. Security

We use technical and organizational measures suited to the data we hold, including access controls and encrypted connections to the Sites. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

10. Children

The Sites are for business use and are not directed to anyone under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email us and we will delete it.

11. Third-party links

The Sites link to services we do not control, including LinkedIn, Cal.com, and AI assistants that open with a prefilled prompt about Infinitus. Their privacy practices are their own. Read their policies before you share data with them.

12. Changes to this policy

We will post any update on this page and change the effective date above. If a change is material, we will give more prominent notice, and ask for consent where the law requires it.

13. Contact