Sweep & Co Digital Privacy Policy
Effective Date: 7/31/25
Last Updated: 7/31/25

1. Introduction
Sweep & Co (“we,” “us,” or “our”) is a brand and go-to-market strategy consultancy serving B2B clients in healthcare and healthtech markets across North America, the United Kingdom, the European Union, and Switzerland.
We respect the privacy of our clients, partners, and prospects and are committed to handling business contact data with transparency, integrity, and care. This policy outlines how we collect, process, and protect your data in accordance with applicable privacy laws and best practices.
2. Scope and Applicability
This Privacy Policy applies to personal and business contact data that we collect through:

• Contact forms, newsletter sign-ups, and intake submissions on our website

• Email communication and outbound outreach

• CRM and marketing platforms (e.g., HubSpot)

• Event participation and webinar registrations

• Social platforms like LinkedIn

• Analytics and website performance tracking

We do not collect sensitive personal, consumer, or health-related data. All data processed pertains to professional interactions in a business context.
3. Types of Data We Collect
We may collect the following categories of data:

• Professional identifiers: Full name, title, company name, work email, phone number

• Organizational details: Company size, sector, location, job function

• Interaction data: Emails opened, links clicked, website form submissions

• Technical data: Browser type, IP address, referring URL, cookie identifiers (e.g., via Google Analytics or Metricool)

We collect only what is necessary for relevant business purposes.
4. How We Use Your Data
We use your professional data to:

• Respond to service inquiries and requests

• Send relevant marketing communications and newsletters (opt-out always available)

• Share insights, reports, and event invites

• Personalize outreach and improve relevance

• Deliver service projects as part of client engagements

• Analyze the performance of campaigns and website activity

5. Legal Basis for Processing (GDPR / UK GDPR / Canada PIPEDA)
Depending on your jurisdiction, we rely on the following lawful bases:

• Legitimate interests (e.g., business development, marketing to relevant professionals)

• Consent (where required by law or for newsletters, form opt-ins, cookie preferences)

• Contractual necessity (e.g., proposal, onboarding, project delivery)

• Legal compliance (e.g., data rights management, audits)

Sweep & Co does not use your data for profiling or automated decision-making.
6. Data Sharing and International Transfers
We do not sell or rent data. We may share your data with:

• Cloud and SaaS service providers: Google Workspace, HubSpot, ClickUp, Metricool

• Marketing automation platforms: LinkedIn Ads, Zapier (task automation)

• Compliance services: DataRep for GDPR representation

• Legal or regulatory bodies, if legally required

All providers are bound by confidentiality and process data under strict contractual safeguards. If data is transferred outside the EU/UK/Switzerland, we rely on Standard Contractual Clauses (SCCs) and vendor compliance frameworks.
7. GDPR/UK GDPR/FADP Representative
As required under Article 27 of the EU and UK GDPR and Swiss FADP, Sweep & Co has appointed DataRep as our representative.
To contact DataRep: https://www.datarep.com
Choose your local office or contact via the web form to submit inquiries related to personal data or data rights.
8. AI Tools and Automated Processing
Sweep & Co operates as an AI-first consultancy and uses selected AI and automation tools to improve operational efficiency. These include:

• HubSpot – CRM, marketing automation

• ClickUp – project and task management

• Metricool – website and social analytics

• Zapier – integrations and workflow automation

These tools may process business contact data in structured workflows (e.g., newsletter lists, project forms). We do not use AI to make automated decisions about individuals. Any content generated via AI is reviewed and approved by humans before being used. No client data is used to train AI models.
All third-party tools used comply with data protection obligations under GDPR, PIPEDA, and U.S. standards.
9. Data Retention
We retain data only as long as necessary for its intended purpose, typically:

• Up to 24 months for inactive contacts

• For the duration of client projects and legal obligations

• Immediately removed upon request or opt-out

We conduct periodic data reviews and system cleanups to avoid unnecessary retention.
10. Your Rights
Depending on your jurisdiction (EU, UK, CH, CA, U.S. states like CA or CO), you may have the right to:

• Request access to your data

• Correct inaccuracies

• Withdraw consent or unsubscribe

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• File a complaint with a supervisory authority

To exercise your rights, contact: privacy@sweepandco.com
11. Cookies and Tracking
We use cookies for:

• Website functionality

• Performance analytics (via Google Analytics and Metricool)

• Conversion tracking (e.g., LinkedIn Ads)

We provide a cookie consent mechanism for users in the EU, UK, and Switzerland to comply with ePrivacy regulations. You can opt out or change cookie preferences at any time.
12. Security Measures
Sweep & Co takes data security seriously and uses the following safeguards:

• Google Workspace: Encrypted storage, 2FA, admin controls

• Role-based access to project systems (ClickUp, HubSpot)

• Data minimization and encryption

• Vendor reviews and contracts for data processors

• Incident response procedures (under development for SOC 2 alignment)

We are actively working toward SOC 2 self-certification (Type I) through structured documentation, internal audits, and platform-based controls.
13. Policy Updates
We may revise this policy periodically to reflect changes in laws, tools, or data practices. All updates will be posted here with a new “Last Updated” date.
14. Contact Us
 
Sweep & Co LLC
68 Harrison Street STE605
Boston, MA 02111
United States

Email: privacy@sweepandco.com