Your privacy,
handled honestly.

Effective date: October 13, 2026 · Last updated: October 13, 2026

1. Who we are and what this policy covers

Second Hunch ("Second Hunch", "we", "us" or "our") is an independent growth marketing studio based in New Jersey, United States, serving New York City, North Jersey and clients everywhere. We are the controller of the personal information described in this policy, which means we decide how and why it is used.

This policy explains how we handle personal information when you visit secondhunch.com (the "Site"), contact us through it, or otherwise communicate with us about our services. "Personal information" means any information that identifies you or could reasonably be linked to you, such as your name, email address or the details of your inquiry.

This policy does not cover the data we may access while performing services for a client (for example, a client's advertising accounts or analytics). That work is governed by our agreement with the client, as explained in section 11.

2. What information we collect

Information you give us

When you use the contact form on our homepage, we ask for your name, your email address, the name of your brand or business, what you are looking for, and an optional note about your goals. We also receive anything you choose to include in emails, messages or calls with us afterwards, and anything you enter into a scheduling or chat feature if we add one. Please do not send us sensitive personal information (for example, health, financial account, government ID or similar details); we do not need it to talk to you.

Information collected automatically

Like almost every website, the Site is delivered by a hosting provider whose servers automatically record basic technical details of each request: the IP address of the device, the date and time, the page or file requested, the browser and operating system type, and the website that referred you, if any. We do not combine these logs with the information you send through the form and we do not use them to build profiles. They exist so the Site can be served reliably and protected against abuse.

The contact form includes a hidden "honeypot" field and submissions are filtered for spam. Spam filtering looks at the content of the submission and technical details such as the IP address in order to recognize automated junk.

If we add analytics or advertising technology to the Site in the future, additional usage information would be collected automatically. Section 3 describes exactly what that would involve and its current status.

Information from other sources

If you reach us through a third-party platform, such as LinkedIn or our Google Business Profile, we receive only what you choose to send through that platform, and the platform's own privacy policy applies to its handling of your data.

Summary

3. Cookies and tracking technologies

3.1 What we use today

Today, the Site sets no cookies and uses no tracking technologies. Specifically:

• We do not use web analytics tools such as Google Analytics.
• We do not use advertising or social media pixels, tags or conversion tracking (for example, the Meta Pixel or Google Ads tags).
• We do not use session replay, heat mapping, fingerprinting or cross-site tracking of any kind.
• We do not embed third-party content (such as videos or social feeds) that could set cookies on our behalf.
• The fonts and images on the Site are served from our own hosting, so viewing the Site does not send requests to font or image networks run by other companies.

Because nothing on the Site requires consent, you will not see a cookie banner.

3.2 Technologies we may add, and what each would mean

As Second Hunch grows, we may add tools to the Site. We will only use tools that fall into the categories in the table below. The "Status today" column is the authoritative record of what is in use: before any category goes live, we update this table and the "Last updated" date at the top of this page, and, where the law requires it, we ask for your consent first.

3.3 How these tools would handle your information

If we add any of these tools, we will configure them in the most privacy-protective way they allow: IP addresses truncated or not stored where the tool offers it, data sharing with the provider limited to what measurement requires, and data retention set to the shortest period that still lets us learn, which for analytics means no more than 14 months. Analytics and advertising providers, such as Google, Meta and LinkedIn, may also use the data for their own purposes as independent controllers, as described in their own privacy policies, and we will link to those policies from this page when the tools are in use.

3.4 Your choices

• Consent banner. Where the law requires consent (including the EEA, the UK and Switzerland), a banner will let you accept or reject non-essential technologies before they are set, and a "Cookie settings" link in the footer will let you change your mind at any time.
• Browser settings. Every major browser lets you block or delete cookies and clear site data. Blocking strictly necessary cookies may stop some features from working.
• Opt-out preference signals. We will honor Global Privacy Control and similar signals wherever the law gives them effect, which today includes California, Colorado, Connecticut and a growing number of other US states.
• Analytics opt-out. If we use Google Analytics, you can also install Google's "Analytics opt-out browser add-on", which stops Google Analytics from collecting data in that browser.
• Advertising controls. You can adjust ad preferences in your Meta, Google and LinkedIn account settings, and opt out of interest-based advertising across many companies through the Digital Advertising Alliance (YourAdChoices), the Network Advertising Initiative and, in Europe, the European Interactive Digital Advertising Alliance.
• "Do Not Sell or Share My Personal Information". We do not sell or share personal information. If we ever use advertising technology that counts as "sharing" under California law, we will add a link with that name to the footer so you can opt out with one click.

3.5 How we will tell you

Before any tool in the table goes live, we will update the table and the "Last updated" date, highlight the change at the top of this page for at least 30 days, and, where consent is required, show the consent banner described above. Nothing in this section will be used to collect information before those steps are complete.

4. How we use your information

We use personal information to:

• respond to your inquiry and schedule and hold your free consultation;
• prepare proposals, agreements and, if you become a client, provide our services and manage our relationship with you;
• communicate with you about work in progress, questions and follow-ups you have asked for;
• operate, secure and improve the Site, including detecting spam, fraud and abuse;
• understand how the Site is used and improve it, only once analytics tools are in place as described in section 3;
• measure and improve our own advertising, only once advertising tools are in place as described in section 3;
• send you newsletters or updates, only if you have opted in; every email will include an unsubscribe link, and you can also ask us to stop at any time;
• keep business records and comply with legal, accounting and regulatory obligations; and
• establish, exercise or defend legal claims where necessary.

We do not make decisions about you using automated processing or profiling, and we do not use your information for purposes unrelated to the ones above without telling you first.

5. Our legal bases

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:

• Taking steps at your request before entering into a contract, when you ask us about our services and we prepare for or hold a consultation.
• Performance of a contract, when you become a client.
• Legitimate interests, when we operate and secure the Site, keep business records and respond to communications, provided those interests are not outweighed by your rights.
• Consent, where we ask for it, for example before any marketing emails or before non-essential cookies and similar technologies are set. You can withdraw consent at any time.
• Legal obligations, when the law requires us to keep or disclose information.

6. Who we share information with

We do not sell personal information, and we do not share it with third parties for their own marketing or for targeted advertising. We share information only in these limited situations:

• Service providers that help us run the Site and our business, acting on our instructions. At present these are: Netlify, Inc. (San Francisco, USA), which hosts the Site and stores contact form submissions; Google LLC (Mountain View, USA), which provides the email service we use to receive and answer messages; and Automattic Inc., whose Akismet service filters spam from form submissions on Netlify's platform. Each provider may only use your information to provide its service to us.
• Providers we may add later, for analytics, advertising measurement, tag management, scheduling, chat, email marketing or customer relationship management (CRM). When any of these is in use, we will name the provider here and update the table in section 3. Advertising and analytics platforms may act as independent controllers for some of the data they receive, as explained in section 3.3.
• Professional advisers such as accountants, lawyers or insurers, when needed and under confidentiality.
• Legal and safety reasons, if we are required to by law, a court order or a government request, or if disclosure is necessary to protect the rights, property or safety of Second Hunch, our clients or others.
• Business transfers, if Second Hunch is reorganized, merged or sold, in which case your information may be transferred to the new owner under this policy.

7. International transfers

We are based in the United States and our service providers store information in the United States. If you contact us from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, our providers rely on recognized safeguards for such transfers, such as the EU-U.S. Data Privacy Framework or standard contractual clauses approved by the European Commission and the UK government.

8. How long we keep information

• Inquiries you send us are kept for up to 24 months after our last contact with you, so that we can pick up the conversation if you come back. After that we delete them, unless we need to keep them longer for legal or accounting reasons.
• Client records are kept for the duration of our engagement and for as long afterwards as the law requires us to keep business records, typically seven years for financial records.
• Technical log data is retained by our hosting provider for a limited period under its own retention policy and is not kept separately by us.
• Analytics and advertising data, if we add those tools, will be retained in the tool for no more than 14 months, after which only aggregated statistics that cannot identify you are kept.
• Marketing email subscriptions, if we add a newsletter, are kept until you unsubscribe, after which we keep only a record of your unsubscribe request so that we do not email you again.

You can ask us to delete your information earlier at any time; see Your rights.

9. How we protect information

The Site is served only over an encrypted (HTTPS) connection. Form submissions are stored by our hosting provider in its secured systems and are accessible only to Second Hunch through password-protected and two-factor-protected accounts. We choose reputable providers and limit access to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information against loss, misuse and unauthorized access, and we will notify you and the relevant authorities of a breach when the law requires it.

10. Your rights

Wherever you are, you can ask us what personal information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. We will reply within the time required by the law that applies to you, and normally within 30 days. To make a request, see How to contact us. We may need to verify your identity before acting on a request, and we will only ask for the minimum information needed to do so. You will not be treated differently for exercising your rights.

If you are in the EEA, the UK or Switzerland

You have the right to access your personal information, to have it corrected or erased, to restrict or object to its processing, to receive a copy in a portable format, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to address your concerns first.

If you are a California resident

Under the California Consumer Privacy Act (as amended by the California Privacy Rights Act), you have the right to know what personal information we collect, use and disclose; the right to delete it; the right to correct inaccurate information; the right to opt out of the sale or sharing of personal information; the right to limit the use of sensitive personal information; and the right not to be discriminated against for exercising these rights.

In the past 12 months we have collected the categories of personal information marked as collected in the table in section 2 (identifiers such as name and email address; commercial information such as inquiry details; and internet activity information such as technical log data) from the sources and for the purposes described there, and we have disclosed them only to the service providers listed in section 6. We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly collect sensitive personal information. You may designate an authorized agent to make a request on your behalf; we will ask for proof that you gave them permission.

If you live in another US state with a privacy law

Residents of states such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey and others may have similar rights to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising, sales and profiling. We do not engage in targeted advertising, sales or profiling. If that changes, we will provide an opt-out link in the footer and honor opt-out preference signals as described in section 3.4. If we decline a request, you may appeal by replying to our response, and we will explain our decision.

11. Client work and client data

When we provide services to a client, we may be given access to systems that contain personal information about the client's own customers, for example advertising platforms, analytics tools, customer databases or e-commerce stores. In that situation we act on the client's instructions as a service provider (or "processor"), and the client remains responsible for that data. Our handling of it is governed by our services agreement with the client, including confidentiality and data protection terms, rather than by this policy. If you are a customer of one of our clients and have a question about your data, please contact that business directly.

12. Children

The Site is intended for businesses and adults. It is not directed to children under 16 (or the higher age required by your local law), and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, please contact us and we will delete it.

13. Links and third-party platforms

The Site may link to other websites and we maintain profiles on third-party platforms such as LinkedIn and Google Business Profile. We are not responsible for the privacy practices of those websites and platforms, and this policy does not apply to them. We encourage you to read their privacy policies.

14. Changes to this policy

We may update this policy from time to time, for example if we add new tools to the Site or if the law changes. When we do, we will post the new version here and update the "Last updated" date at the top. If a change materially affects how we use your information, we will highlight it on this page for at least 30 days and, where appropriate, let you know directly.

15. How to contact us

For any question about this policy, or to exercise your rights, use the contact form on our homepage and begin your message with "Privacy request". We will reply by email to the address you provide. You can also write to us through our LinkedIn company page.

Second Hunch · New York City and North Jersey, United States