Privacy Policy

This policy applies to information collected through the Site. It does not apply to information collected offline, through third-party websites we do not control, or through separate contractual engagements that may be governed by their own terms.

By using the Site or submitting a contact inquiry, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Site or submit personal information through it.

Information you provide. When you use our contact form, we collect the information you choose to submit, which may include:

• Name
• Email address
• Phone number (optional)
• Role (for example, Broker, Owner-Operator, or Other)
• Mandate type (for example, Acquisition, Build-out, or Optimization)
• Message content and any other details you include in your inquiry

Automatically collected information. When you visit the Site, we and our service providers may automatically collect limited technical and usage information, such as:

• Pages viewed and general navigation activity on the Site
• Device type, browser type, and approximate location derived from IP address
• Referring URL and timestamps associated with your visit
• Custom analytics events related to Site usage (for example, contact form submission attempts or errors), which may include non-identifying attributes such as selected role, mandate type, or whether a phone number was provided

Anti-abuse and security data. To protect the Site and our contact form from spam and misuse, we may temporarily process your IP address and submission timing metadata. Rate-limiting data is held in server memory for a short period (currently up to 15 minutes) and is not stored in a long-term database by us.

We do not intentionally collect sensitive personal information through the Site, and we ask that you do not submit government ID numbers, financial account details, or other highly sensitive data through the contact form.

We use personal information for legitimate business purposes, including to:

• Respond to your inquiries and evaluate potential engagements
• Communicate with you about your submission, including sending a confirmation email
• Operate, maintain, secure, and improve the Site
• Monitor Site performance, diagnose technical issues, and understand visitor usage
• Detect, prevent, and address fraud, spam, abuse, and security incidents
• Comply with applicable law and enforce our legal rights

We do not use contact form submissions to send unrelated marketing communications unless you separately opt in or we have another lawful basis to do so.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process personal information on the following bases:

• Contract or pre-contractual steps: to respond to your inquiry and discuss a potential engagement
• Legitimate interests: to operate and secure the Site, understand usage, and prevent abuse, where those interests are not overridden by your rights
• Legal obligation: where processing is required by applicable law
• Consent: where required for specific processing activities and where we have obtained your consent

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.

We may share information with:

• Service providers that help us operate the Site and deliver communications, including hosting and email delivery providers
• Professional advisors such as lawyers, accountants, or insurers, when reasonably necessary
• Authorities or other parties when required by law, legal process, or to protect rights, safety, and security
• Successors in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections

Our current service providers involved in Site operations include, among others:

• Vercel for website hosting and web analytics
• Resend for transactional email delivery related to contact form submissions

These providers process information on our behalf according to their own privacy policies and contractual obligations.

We use Vercel Web Analytics to understand how visitors use the Site. Vercel states that its Web Analytics product is designed to be privacy-friendly and does not use third-party cookies for tracking purposes. Analytics data is generally aggregated and does not include the contents of your contact form message, your name, or your email address.

You may be able to limit certain analytics collection through your browser settings or privacy tools. Because the Site is informational and does not require login, we do not operate a separate cookie consent banner at this time.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Contact inquiries are retained in our business email systems for as long as needed to respond, maintain correspondence, and manage potential or active engagements
• Analytics and server logs are retained according to our providers' default retention schedules
• Short-term anti-abuse data (such as IP-based rate limiting) is discarded automatically after a brief window

When information is no longer needed, we take reasonable steps to delete, anonymize, or otherwise dispose of it.

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures include HTTPS encryption, input validation, spam and abuse controls, and limiting access to inquiry data on a need-to-know basis.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Depending on where you live, you may have rights regarding your personal information, which may include the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to legal exceptions
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Receive a portable copy of certain information you provided to us
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us using the details below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), may provide you with additional rights regarding your personal information.

Categories collected. In the past 12 months, we may have collected identifiers (such as name and email), commercial information related to your inquiry (such as mandate type), internet or other electronic network activity information (such as Site usage data), and professional or employment-related information you choose to provide (such as role).

Sources. Information is collected directly from you, automatically from your use of the Site, and from our service providers.

Business purposes. We use this information for the purposes described in Section 3, including responding to inquiries, operating the Site, security, and analytics.

Sale or sharing. We do not sell personal information and we do not share personal information for cross-context behavioral advertising.

Retention. Retention practices are described in Section 7.

California residents may submit requests to know, delete, or correct personal information by emailing hello@bondandvitalis.com. We will not discriminate against you for exercising privacy rights.

Bond & Vitalis is based in the United States. If you access the Site from outside the United States, you understand that your information may be processed and stored in the United States and other countries where our service providers operate. Those countries may have data protection laws that differ from the laws of your jurisdiction.

Where required, we rely on appropriate safeguards for international data transfers, such as standard contractual clauses or equivalent mechanisms offered by our service providers.

The Site is intended for business professionals and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, please contact us and we will take reasonable steps to delete it.

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information to them.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may also be communicated through the Site or by other appropriate means. Your continued use of the Site after an update becomes effective constitutes acknowledgment of the revised policy, to the extent permitted by law.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Bond & Vitalis
Email: hello@bondandvitalis.com