Privacy Policy

OffshoreUp LLC Effective date: [DATE]

This Privacy Policy explains how OffshoreUp LLC (“OffshoreUp,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit offshoreup.com, furniture.offshoreup.com, and any other website, product, or service that links to this policy (together, the “Services”).

We are a business systems company. We provide consulting and systems assessments, custom software and automation builds, AI-assisted workflows, financial reporting services, and software-as-a-service (SaaS) products such as OffshoreUp Furniture. Our Services are intended for businesses and the people who work for them, not for personal, family, or household use.

By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Services.

1. Scope of This Policy

This policy covers personal information we collect for our own purposes, such as when you browse our websites, fill out a form, subscribe to our newsletter, join our affiliate program, or communicate with us.

It does not cover personal information we process on behalf of our clients while delivering services to them. That information is described in Section 13 (“Data We Process on Behalf of Clients”) and is governed by our agreements with those clients.

2. Information We Collect

Information you give us

Contact and lead form details: your name, company name, job title, work email, phone number, and the content of any message you send us.
Newsletter signups: your email address and any preferences you choose.
Account information: if you sign up for one of our SaaS products, your login details, company details, and settings.
Affiliate program information: your name, business name, contact details, website or audience details, tax information, and payment details needed to pay commissions.
Billing information: billing contact, address, and payment information. Card payments are typically handled by third-party payment processors, and we do not store full card numbers on our own systems.
Communications: emails, calls, meeting notes, support requests, and feedback you share with us.

Information we collect automatically

When you use the Services, we and our providers may automatically collect:

IP address, browser type, device type, operating system, and general location (such as city or country) derived from your IP address.
Pages viewed, links clicked, referring URLs, time spent, and similar usage data.
Information collected through cookies, pixels, and similar technologies (see Section 7).

Information from other sources

We may receive information about you from business partners, affiliates who refer you to us, event organizers, publicly available sources (such as company websites and professional networking profiles), and our service providers. We may combine this with information we already have.

Information we do not collect

We do not knowingly collect biometric identifiers or biometric information (see Section 12). We also do not ask for sensitive personal information through our website, such as Social Security numbers, health information, or precise geolocation. Please do not send us this type of information through our forms or email unless we have specifically asked for it under a signed agreement.

3. How We Use Information

We use personal information to:

Respond to inquiries, schedule calls, and prepare proposals.
Provide, operate, maintain, and support the Services.
Create and manage accounts for our SaaS products.
Send service-related messages, such as confirmations, invoices, security notices, and updates.
Send newsletters and marketing communications, where permitted by law. You can opt out at any time.
Run and manage our affiliate program, including tracking referrals and paying commissions.
Understand how people use our websites and improve our content, products, and user experience.
Detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
Comply with legal obligations, enforce our terms, and protect our rights, property, and safety and those of others.
Carry out any other purpose we describe to you when we collect the information, or with your consent.

We may also create de-identified or aggregated data that cannot reasonably be used to identify you. We may use and share that data for any lawful purpose, and we will not attempt to re-identify it except as allowed by law.

4. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:

Contract: to provide the Services you or your company requested, or to take steps before entering into a contract.
Legitimate interests: to run and grow our business, respond to business inquiries, market to business contacts, secure our Services, and improve our offerings, where those interests are not overridden by your rights.
Consent: for certain cookies, analytics, and marketing communications where consent is required. You can withdraw consent at any time without affecting processing that happened before.
Legal obligation: to comply with applicable laws, such as tax and accounting rules.

5. How We Share Information

We do not sell personal information for money. We share personal information only as described below.

Service providers: companies that help us run our business, such as website hosting, cloud infrastructure, customer relationship management (CRM), email delivery, scheduling, analytics, payment processing, customer support, and AI service providers. They may use personal information only to perform services for us, under contractual obligations.
Our delivery team: our employees and contractors, including remote team members, who need access to perform their work. They are bound by confidentiality obligations.
Affiliates and referral partners: we may share limited information with affiliate program participants as needed to confirm referrals and calculate commissions (for example, that a referred lead became a client). We may also share information with any companies under common ownership or control with OffshoreUp, who will handle it consistently with this policy.
Legal and safety reasons: when we believe in good faith that disclosure is needed to comply with law, regulation, subpoena, court order, or other legal process; to respond to lawful requests from public authorities; to enforce our agreements; or to protect the rights, property, or safety of OffshoreUp, our clients, users, or others.
Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal information may be transferred to the buyer or successor, subject to this policy or a policy with similar protections.
With your consent or direction: when you ask us to share information, or agree that we may.

6. AI-Assisted Processing

Some of our Services and internal workflows use artificial intelligence tools provided by third parties. For example, we may use AI to summarize inquiries, draft responses, analyze business data, generate reports, or power features within our SaaS products.

When we use AI tools:

We select providers that offer contractual commitments about how data is handled, and where available we use settings or agreements under which our data is not used to train the provider’s general models.
We limit the personal information we send to what is reasonably needed for the task.
AI outputs are generally reviewed by our team before being relied on for client deliverables. AI outputs may contain errors, and we do not use AI to make decisions that produce legal or similarly significant effects about you without human involvement.

If you have questions about how AI is used in a specific engagement, please contact us.

7. Cookies and Similar Technologies

We and our providers use cookies, pixels, local storage, and similar technologies to:

Make our websites work and remember your preferences (strictly necessary and functional cookies).
Understand traffic and usage so we can improve our websites (analytics cookies), for example through tools such as Google Analytics.
Measure the effectiveness of our marketing and affiliate referrals (marketing and tracking cookies).

You can control cookies through your browser settings and, where offered, through our cookie banner or preferences tool. Blocking some cookies may affect how the website works. To opt out of Google Analytics, you can use the Google Analytics Opt-out Browser Add-on.

Some of our marketing cookies may be considered “sharing” for cross-context behavioral advertising under certain US state laws. See Section 11 for how to opt out.

8. Where Your Data Is Stored and Accessed

All of our systems are cloud based. Personal information we collect, and data we process for clients, is stored and hosted on servers located in the United States.

Our team works remotely. Authorized team members and contractors access data only inside those US-hosted systems, through secure, access-controlled connections, and only as needed to do their work. Some authorized team members may be located outside the United States. Where that applies, we protect the information with measures such as:

Written agreements requiring confidentiality and appropriate security.
Role-based access limited to people who need it.
Access through our cloud systems rather than local copies, wherever practical.
Where required for data from the EEA, UK, or Switzerland, appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

You can contact us for more information about the safeguards we use.

9. Data Retention

We keep personal information for as long as reasonably needed for the purposes described in this policy, including to provide the Services, maintain business records, resolve disputes, enforce our agreements, and meet legal, tax, and accounting requirements.

As a general guide:

Leads and inquiries that do not become clients are typically kept for up to [24] months after our last interaction.
Client and contract records are kept for the length of the relationship plus the period required by law or for legitimate business purposes, typically up to [7] years.
Newsletter data is kept until you unsubscribe, after which we may keep your email on a suppression list so we do not contact you again.
Analytics data is kept according to the settings of our analytics providers.

When information is no longer needed, we delete it, de-identify it, or securely store it until deletion is possible.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including hosting our systems with US-based cloud providers, such as access controls, encryption in transit where supported, and confidentiality obligations for our team and providers.

However, no website, internet transmission, or storage system is completely secure. We cannot guarantee absolute security, and you share information at your own risk. If you believe your interaction with us is no longer secure, please contact us right away. If a security incident affects your personal information, we will notify you as required by applicable law.

11. Your Privacy Rights

Depending on where you live, you may have some or all of the rights below. These rights are not absolute and may be subject to exceptions under applicable law.

US state privacy rights (including California)

Residents of California and certain other states (such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others with comprehensive privacy laws) may have the right to:

Know and access the categories and specific pieces of personal information we have collected about you.
Correct inaccurate personal information.
Delete personal information, subject to exceptions.
Obtain a portable copy of your personal information.
Opt out of the sale of personal information, the “sharing” of personal information for cross-context behavioral advertising, and targeted advertising.
Limit the use of sensitive personal information, where applicable. We do not use sensitive personal information for purposes that would trigger this right.
Not be discriminated against for exercising your rights.
Appeal our decision on your request, where your state law provides this right. To appeal, reply to our decision or email us with “Privacy Appeal” in the subject line.

Some state laws exempt business-to-business information or apply only to businesses that meet certain thresholds. Even where a law may not strictly apply to us, we will consider and respond to reasonable requests.

California notice at collection. In the past 12 months, we may have collected the following categories of personal information: identifiers (such as name, email, phone, IP address); commercial information (such as services purchased); internet or network activity (such as browsing and usage data); professional or employment-related information (such as company and job title); general geolocation derived from IP address; and inferences drawn from the above. The sources, purposes, and recipients of this information are described in Sections 2, 3, and 5. We do not sell personal information for money. Our use of certain advertising or analytics cookies may be considered “selling” or “sharing” under California law. We do not knowingly sell or share the personal information of consumers under 16. We keep each category for the periods described in Section 9.

Opting out. You can opt out of the sale or sharing of personal information by using the cookie preferences tool on our website (if available) or by contacting us. We also honor Global Privacy Control (GPC) browser signals as an opt-out request for the browser or device sending the signal, where required by law.

EEA, UK, and Swiss privacy rights

If you are in the EEA, UK, or Switzerland, you may have the right to access, correct, delete, restrict, or object to our processing of your personal information, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concerns first, so please contact us.

How to make a request

To exercise your rights, email info@offshoreup.com or call +1 773-648-8050. We will need to verify your identity before responding, which may include asking you to confirm information we already have. You may use an authorized agent to submit a request on your behalf, and we may ask for proof of the agent’s authority and verify your identity directly. We will respond within the time required by applicable law.

Marketing choices

You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in the email or by contacting us. We may still send you non-marketing messages, such as those about your account or our ongoing business relationship.

12. Illinois Residents and Biometric Information

OffshoreUp is based in Illinois. We do not collect, capture, purchase, store, or use biometric identifiers or biometric information, as those terms are defined in the Illinois Biometric Information Privacy Act (BIPA), through our websites or for our own purposes. This includes fingerprints, voiceprints, retina or iris scans, and scans of hand or face geometry.

Our Services are not designed to process biometric data. If a client asks us to build or operate a system that would involve biometric data, we will do so only under a separate written agreement, and the client will be responsible for providing any required notices and obtaining any required written consents before that data is collected.

13. Data We Process on Behalf of Clients

When we provide consulting, custom builds, automation, AI workflows, financial reporting, or SaaS products to a client, we may process personal information that the client provides or that its systems contain. This might include information about the client’s employees, customers, or vendors.

For that information, OffshoreUp acts as a service provider, contractor, or processor, and our client is the business or controller. We process this information only on the client’s instructions and as described in our agreement with that client, which governs confidentiality, security, use of subprocessors (including our remote team), and data return or deletion.

If your personal information was provided to us by one of our clients and you want to exercise your privacy rights, please contact that client directly. If you contact us, we will forward your request to the client where appropriate and assist them as required by our agreement and applicable law.

14. Children’s Privacy

Our Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete it. If you believe a child has provided us with personal information, please contact us.

15. Do Not Track

Some browsers offer a “Do Not Track” (DNT) setting. Because there is no common industry standard for how to respond to DNT signals, our websites do not currently respond to them. As described in Section 11, we do honor Global Privacy Control signals where required by law.

16. Third-Party Links and Services

Our Services may contain links to, or integrations with, third-party websites, platforms, and tools that we do not own or control. This Privacy Policy does not apply to them. We are not responsible for their privacy practices, and we encourage you to read their privacy policies before sharing information with them.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If we make material changes, we will provide additional notice as required by law, such as a notice on our website or an email. Your continued use of the Services after an update means you acknowledge the revised policy.

18. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact us:

OffshoreUp LLC 680 North Lake Shore Drive, Suite 110-1915 Chicago, IL 60611 United States

Email: info@offshoreup.com Phone: +1 773-648-8050

[Note: This is a draft for discussion purposes only and does not constitute legal advice. It must be reviewed and approved by a licensed attorney, and checked against OffshoreUp’s actual data practices, vendors, cookie tools, and retention periods, before it is published.]