1. Controller Identity & Contact
The data controller responsible for your personal information is:
AcuBooth
272 Market Sq, Lake Forest, IL 60045, United States
Email: contact@acubooth.com
AcuBooth operates under the trade name AcuBooth. We are not a registered investment adviser. For all privacy-related inquiries, including requests to exercise your rights, please contact us at the address above and include “Privacy Request” in the subject line.
2. Information We Collect
2.1 Information You Provide Directly
When you complete the “Partner With Us” contact form, we collect:
- Identity data: your first and last name
- Professional data: firm name, type of firm (RIA, broker-dealer, family office, etc.)
- Contact data: work email address
- Communication data: the content of any message you include
- Consent record: whether you checked the consent checkbox and the timestamp of your submission
Submission of the contact form is entirely voluntary. You are not required to provide any information to browse this website.
2.2 Automatically Collected Information
When you visit our website, we (or our service providers) automatically collect certain technical information, including:
- Internet Protocol (IP) address (anonymized before storage)
- Browser type and version, operating system, device type
- Pages visited, time spent on pages, referring URL
- Date and time of visit
- Approximate geographic region (country/city level, derived from anonymized IP)
- Interaction events (clicks, scrolls) where analytics are enabled
This data is collected via Google Analytics 4 (GA4) and is only activated where you have given cookie consent. See Section 4 for details.
2.3 Email Interaction Data (Amazon SES)
Where you have opted in to receive email communications from us, Amazon Simple Email Service (Amazon SES) may collect:
- Open events: whether and when you opened an email, via a 1×1 pixel tracking image embedded in the email
- Click events: which links you click within our emails, via SES-managed redirect URLs
- Bounce and complaint data: delivery failures or spam complaints associated with your email address
This tracking occurs at the email level and does not place cookies on this website. You can prevent open tracking by disabling image loading in your email client.
3. Cookies and Similar Technologies
We use the following cookies and browser storage mechanisms. You can manage your preferences at any time via the cookie banner or by clearing your browser storage.
| Name | Type | Provider | Purpose | Expiry |
|---|---|---|---|---|
ab_auth | localStorage | AcuBooth | Maintains authenticated session. Required for access to protected pages. | Session (tab close) |
_ga | Cookie | Google (GA4) | Distinguishes unique users for analytics. Requires consent. | 24 months |
_ga_* | Cookie | Google (GA4) | Persists session state for GA4 property. Requires consent. | 24 months |
acubooth_cookie_consent | localStorage | AcuBooth | Stores your cookie preference to avoid repeated prompts. | 12 months |
acubooth_cookie_consent_date | localStorage | AcuBooth | Records the date consent was given for auditing purposes. | 12 months |
We implement Google Consent Mode v2. Analytics cookies default to “denied” until you explicitly accept them. You may withdraw or change your consent at any time by clearing your browser’s local storage for this site or by contacting us.
We do not use advertising cookies, cross-site tracking cookies, or third-party retargeting technologies.
4. How We Use Your Information
We process personal information only for the following purposes and on the indicated legal bases:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Respond to contact form inquiries | Name, email, firm, message | Legitimate interests / pre-contractual steps |
| Send informational and marketing emails via Amazon SES | Email, name, consent record | Consent (opt-in checkbox) |
| Measure email engagement (open / click rates) | SES open & click events | Consent (email opt-in) |
| Website analytics (page views, session data) | GA4 cookie data, anonymized IP | Consent (cookie banner) |
| Maintain secure authenticated sessions | localStorage token | Legitimate interests (security) |
| Comply with legal obligations | All data as required | Legal obligation |
We do not sell, rent, trade, or otherwise share your personal information with third parties for their own marketing purposes.
5. Amazon SES and Email Communications
We use Amazon Simple Email Service (Amazon SES), a cloud-based email-sending service provided by Amazon Web Services, Inc. (“AWS”), to transmit email communications to individuals who have opted in through our contact form.
5.1 How Amazon SES Processes Your Data
When we send you an email via Amazon SES, AWS processes your email address and message content as a data processor on our behalf. AWS’s processing is governed by the AWS Service Terms and AWS’s Data Processing Addendum.
5.2 Email Tracking
Amazon SES may use the following email-level tracking mechanisms when enabled:
- Open tracking: a transparent 1×1 pixel image is embedded in HTML emails.
- Click tracking: links in our emails may be rewritten through an AWS redirect domain.
- Bounce & complaint tracking: SES automatically processes delivery failures and spam reports.
5.3 Unsubscribing
You may opt out of all email communications at any time by:
- Clicking the “Unsubscribe” link in the footer of any email we send
- Replying to any email with the word “UNSUBSCRIBE” in the subject
- Emailing contact@acubooth.com with a removal request
We will process unsubscribe requests within 10 business days and in any event within the timeframe required by applicable law (including CAN-SPAM Act requirements).
6. Disclosure of Your Information
We may share your information only in the following circumstances:
6.1 Service Providers (Data Processors)
We engage limited third-party service providers who process data solely on our instructions:
- Amazon Web Services (Amazon SES): email delivery and engagement tracking
- Google LLC (Google Analytics 4): website analytics (only with your consent)
6.2 Legal Requirements
We may disclose your information if required to do so by law, regulation, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or protect the safety of any person.
6.3 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
6.4 With Your Consent
We may share your information with other parties where you have given your explicit consent to do so.
7. International Data Transfers
AcuBooth is based in the United States. If you access our website from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
Where required by applicable law, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses for transfers from the European Economic Area or United Kingdom) to ensure your data receives adequate protection.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.
- Contact form submissions: retained for 3 years from the date of submission, or until you request deletion, whichever is earlier
- Email communication records (SES): retained for 3 years to support opt-out and legal compliance records
- Analytics data (GA4): retained for 24 months as configured in our GA4 property settings
- Cookie consent records: retained for 13 months to demonstrate compliance
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized.
9. Security
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, accidental loss, destruction, or alteration. These measures include:
- TLS/HTTPS encryption for all data in transit
- Access controls limiting data access to authorized personnel only
- Use of industry-leading cloud infrastructure (AWS) with SOC 2 and ISO 27001 certifications
- Regular review of security practices
Despite these measures, no method of transmission over the internet or electronic storage is 100% secure.
10. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights with respect to your personal information:
10.1 Rights Available to All Users
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to our legal obligations
- Opt-out of email: Unsubscribe from marketing communications at any time (see Section 5.3)
- Cookie withdrawal: Withdraw cookie consent at any time by clearing localStorage or contacting us
10.2 California Residents (CCPA / CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (as amended by the CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you
- Right to Delete: Request deletion of personal information we have collected, subject to legal exceptions
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise any California rights, contact us at contact@acubooth.com with “California Privacy Request” in the subject line.
10.3 EEA / UK Residents (GDPR / UK GDPR)
If you are located in the European Economic Area or United Kingdom, you have the following rights under GDPR or UK GDPR:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure — “right to be forgotten” (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object to processing based on legitimate interests (Article 21 GDPR)
- Right to withdraw consent at any time without affecting prior processing
- Right to lodge a complaint with your local supervisory authority
To exercise your GDPR rights, contact us at contact@acubooth.com. We will respond within 30 days.
11. Children’s Privacy
This website is not directed to children under the age of 18, and we do not knowingly collect personal information from individuals under 18. This website is intended for use by financial professionals and institutional advisors only.
12. Third-Party Links and Services
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party site you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website after the effective date of any update constitutes your acceptance of the revised policy.
14. Contact & Complaints
For questions, concerns, or requests related to this Privacy Policy or our data practices, please contact:
AcuBooth — Privacy
272 Market Sq, Lake Forest, IL 60045
contact@acubooth.com
We take all privacy inquiries seriously and will respond within 30 days.