Egg Strategy, Inc. Privacy Policy

Effective as of April 1, 2025.

This Privacy Policy describes how Egg Strategy, Inc. (“Egg Strategy”, “we”, “us”, or “our”) handles personal information that we collect through our digital properties (including websites) that link to this Privacy Policy (collectively, the “Service”), as well as through our marketing, business communications, and other activities described in this Privacy Policy. This Privacy Policy does not apply to personal information about Egg Strategy personnel or job candidates, or to personal information Egg Strategy processes through the course of conducting research studies, including selecting and engaging participants.

Individuals in the EEA/UK/Switzerland: See our Notice to European users for information about your personal information and data protection rights.

Individuals in Canada: See our Notice to Canadian users for information about your personal information and data protection rights.

Individuals in Brazil: See our Notice to Brazilian users for information about your personal information and data protection rights.

If you have any questions or concerns about our use of your personal information, please contact us.

Index

You can click the links below to jump to specific sections, but we recommend that you read this Privacy Policy in its entirety.

Personal information we collect
How we use your personal information
How we share your personal information
Your choices
Other sites and services
Security
International data transfers
Children
Changes to this Privacy Policy
How to contact us
Notice to European users

Notice to Canadian users

Notice to Brazilian users

Personal information we collect

The personal information we collect from you, either directly or indirectly, will depend on how you interact with us and with our Service. In general, we collect personal information about you from the following sources:

Information you provide to us. Personal information you may provide to us includes:

Contact data, such as your first and last name, email address, phone number, office address, professional title, company, and other contact details.
Referral data. Contact details of contacts that you refer to us or that refer you, such as when you invite them or are invited by them to use the Service. You should not share your contacts’ information with us unless you have permission to do so.
Communications data. Information in your communications with us, including when you communicate with us through the Service, email, social media, events, or otherwise. This includes both the content of these communications and the contact details and metadata associated with it, such as social media handles and profile photos associated with your social or email accounts.
Marketing preference data, such as your preferences for receiving our marketing and other communications.
Other information that we may collect which is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

If we collect personal information not specifically listed above, we will use it consistent with this Privacy Policy or as otherwise explained at the time of collection.

Automatic collection. As you navigate the Service, our communications, and other online services, we, and our service providers and advertising partners may automatically collect identifiable information about you, your computer or device, and your browsing actions and use patterns, such as:

Device data, such as your computer’s or mobile device’s operating system type and version number, manufacturer and model, device type (e.g., phone, tablet), browser type, screen resolution, language settings, IP address, unique identifiers (including identifiers used for advertising purposes), the website you visited before browsing to our website, and general location information such as city, state or geographic area.
Online activity data, such as referring URL, pages you viewed, how long you spent on a page, navigation paths between pages, information about your activity on a page, access times, duration of access, whether you have opened emails from us or clicked links within them, and other functional information on Service performance.

Cookies and other technologies. Please see our Cookie Policy for details on our use of cookies and other web technologies.

Third party sources. We obtain personal information from other sources, such as:

Our business contacts. Our professional contacts share with us contact details about individuals in their networks, including prospective customers, vendors, and partners.
Public sources. Such as publicly-accessible social media platforms and websites.
Data providers, such as information services and data licensors that provide professional and other information.

How we use your personal information

We use your personal information for the following purposes or as otherwise described at the time we collect it:

Service delivery. We use your personal information to:

provide, operate, and improve the Service and our business;
communicate with you, including by sending announcements, updates, and support and administrative messages;
understand your needs and interests, and personalize your experience with the Services and our communications; and
provide support for the Service, and respond to your requests, questions, and feedback.

Business operations. We use your personal information to administer and maintain our Service and our IT systems (including monitoring, troubleshooting, data analysis, testing, system maintenance, repair and support, reporting and hosting of data) and to operate our business.

Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business. As part of these activities, we may create aggregated, de-identified or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business. Note that the research described herein is related specifically to providing the Service as defined by this Privacy Policy and does not contemplate research activities governed by separate terms.

Marketing. We, our service providers, and third party advertising partners may collect and use your personal information for the following purposes:

Direct marketing. We may send you Egg Strategy-related or other direct marketing communications as permitted by law, including by email. You may opt-out of our marketing communications as described in the Opt-out of marketing or promotional communications section below.
Targeted advertising. Third party advertising partners that we work with use the technologies described in our Cookie Policy to collect personal information about your interaction with the Service (including the device data and online activity data described above), our communications, and other online services over time and with different browsers and devices. They use that information to serve online ads that they think will interest you on other online services and to measure their effectiveness. They may also use contact data we provide to try to target relevant ads on their platforms to our customers or prospective customers.

Compliance and protection. We may use your personal information to:

comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;
protect our, your, or others’ rights, privacy, safety or property (including by making and defending legal claims);
audit our internal processes for compliance with legal and contractual requirements and internal policies;
enforce the terms and conditions that govern the Service; and
prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft.

How we share your personal information

We may share your personal information with the following categories of recipients and as otherwise described in this Privacy Policy or at the time of collection.

Service providers. Third parties that provide services on our behalf or help us operate the Service or our business (such as business applications, cloud hosting and infrastructure, information technology and software, customer support, customer relationship management, telecommunications, email delivery, marketing, advertising, and analytics).
Advertising partners. Third party advertising companies may collect, and we may share with them, personal information for targeted advertising purposes as described above. Their use of personal information is subject to their own privacy policies.
Any corporate affiliates that we may control, are controlled by, or with which we are under common control, for purposes consistent with this Privacy Policy.
Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.
Business transferees. Parties (and their advisors) to transactions (or negotiations of or due diligence for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, Egg Strategy (including, in connection with a bankruptcy or similar proceedings).

Your choices

Your choices regarding the personal information we hold about you include the following:

Opt-out of marketing communications. You may opt-out of marketing emails by following the opt-out or unsubscribe instructions at the bottom of the email. Please note that if you opt-out of promotional emails, you may continue to receive service-related and other non-marketing emails. You may also contact us to ask to opt-out of marketing through other channels.
Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. See our Cookie Policy for more information.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Targeted ads. You may use the following industry opt-out tools to opt-out of targeted ads:

Other sites and services

The Service may contain links to or integrations of websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or other online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites and online services you use.

Security and retention

We use technical and organizational safeguards designed to protect the personal information we collect and process about you. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

We retain personal information where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested; to comply with applicable legal, tax or accounting requirements; to establish or defend legal claims; or for fraud prevention). Whether the retention period is sufficient to fulfill such purposes is the primary criteria for determining the duration of the retention period. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information and isolate it from any further processing until deletion is possible.

International data transfers

We are headquartered in the United States and we and our service providers may process personal information from the United States and other countries. These countries may have data protection laws that are not as protective as those where you live.

Children

The Service is not directed to children under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledgment that the modified Privacy Policy applies to your use of the Service and interaction with our business.

How to contact us

If you have questions or concerns about this Privacy Policy or our practices, please contact us at:

Egg Strategy, Inc.
18504 W Creek Drive, Suite 200,

Tinley Park, IL 60477
privacy@eggstrategy.com

Notice to European users

The information provided in this notice applies only to individuals in the United Kingdom (“UK”), the European Economic Area (“EEA”) and Switzerland (we collectively refer to these countries as “Europe”).

For purposes of this Notice, “personal information” has the same meaning as “personal data” under data protection laws in Europe. The personal information that we collect from you is identified and described in greater detail in the section of the Privacy Policy entitled Personal information we collect.

Controller. Egg Strategy, Inc. is the controller of your personal information described in this Privacy Policy. See the Contact us section above for the contact details of the organization and its data protection officer.

Legal bases for processing. European data protection law requires that we have a “legal basis” for each purpose for which we process your personal information. Depending on the purpose for collecting your information, we may rely on one of the following legal bases:

The processing is necessary to perform a contract that we are about to enter into, or have entered into, with you (“Contractual Necessity”).
The processing is necessary to pursue our legitimate interests or those of a third party and we are confident that your privacy rights will be appropriately protected (“Legitimate Interests”).
We need to comply with laws or to fulfill certain legal obligations (“Compliance with Law”).
We have your specific consent to carry out the processing for the purpose in question (“Consent”). Generally, we do not rely on Consent as a legal basis for using your personal information other than in the context of direct marketing communications where required by applicable law.

The table below identifies the legal bases we rely on in respect of the relevant purposes for which we use your personal information. For more information on these purposes and the categories of personal information involved, see the section in the Privacy Policy entitled How we use your personal information.

Processing purpose	Types of personal information processed	Legal basis
Service delivery	Contact data Communications data Device data Online activity data	Contractual Necessity. If we have not entered a contract with you, we process your personal information based our Legitimate Interests (in providing the Services)
Business operations	Contact data Communications data Device data Online activity data	Contractual Necessity. If we have not entered a contract with you, we process your personal information based our Legitimate Interests (in operating, providing, and improving our business)
Research and development	Contact data Communications data Device data Online activity data	Our Legitimate Interests (in analyzing and improving our Service and our business).
Marketing	Contact data Communications data Marketing preference data Device data Online activity data	Our Legitimate Interests (in promoting our products and services through marketing communications). In circumstances or in jurisdictions where consent is required under applicable data protection laws, we rely on your Consent to send direct marketing communications.
Targeted advertising	Contact data Device data Online activity data	Our Legitimate Interests (in promoting our products and services through targeted advertisements). In circumstances or in jurisdictions where consent is required under applicable data protection laws, we rely on your Consent to send direct marketing communications.
Sharing your personal information as described in this Privacy Policy	Contact data Communications data Marketing preference data Device data Online activity data	We use the original legal basis relied upon if the relevant further use is compatible with the initial purpose for which the personal information was collected. Otherwise, we rely on your Consent.
Compliance and Protection	All data relevant in the circumstances.	Compliance with Law (where processing is necessary to comply with our legal obligations). Otherwise, we rely on our Legitimate Interests (in protecting our, your or others’ rights, privacy, safety, or property).

Use for new purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.

Sensitive personal information. We do not require sensitive personal information in connection with the Service (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) and ask that you do not provide us with any such information.

Your rights. European data protection laws give individuals in Europe the following rights regarding their personal information:

Right of access. You can ask us to provide you with information about our processing of your personal information and give you access to your personal information.
Right to rectification. If the personal information we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified.
Right to erasure. You can ask us to delete or remove your personal information where there is no lawful reason for us continuing to store or process it, where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully, or where we are required to erase your personal information to comply with local law.
Right to restrict processing. You can ask us to suspend the processing of your personal information: if you want us to establish the information’s accuracy; where our use of the information is unlawful but you do not want us to erase it; where you need us to hold the information even if we no longer require it as you need it to establish, exercise or defend legal claims; if you have objected to our use of your information but we need to verify whether we have overriding legitimate grounds to use it.
Right to object. You can object to our processing of your personal information where we are relying on a legitimate interest (or those of a third party) and you believe it impacts your fundamental rights and freedoms. You also have the right to object where we are processing your personal information for direct marketing purposes.
Right to data portability. You have the right, in certain circumstances, to ask us to provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format.
Right to withdraw consent at any time. Where we are relying on consent to process your personal information you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

Exercising those rights. Some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the personal information or where certain exemptions apply. If we decline your request, we will tell you why, subject to legal restrictions.

To exercise any of these rights, please contact us. We may request specific information from you to help us confirm your identity and process your request.

Your right to lodge a complaint with your supervisory authority. If you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.

For users in the EEA: The contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en

For users in the UK: The contact information for the UK data protection regulator is below:

The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow – Cheshire SK9 5AF
Tel. +44 303 123 1113
Website: https://ico.org.uk/make-a-complaint/

For users in Switzerland: The contact information for the Swiss data protection regulator is available at www.edoeb.admin.ch.

International data transfers. We may transfer your personal information to recipients in a country outside of Europe that is not recognized as providing an adequate level of protection for personal information by the relevant government body. In these cases, we take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy and applicable laws by entering into appropriate data transfer mechanisms permitted under Article 46 of the GDPR / UK GDPR (as applicable), such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum (as applicable). A copy of our data transfer mechanism can be provided on request.

Notice to Canadian users

The information provided in this notice applies only to individuals in Canada.

The personal information that we collect from you is identified and described in greater detail in the section of the Privacy Policy entitled Personal information we collect.

Controller. Egg Strategy, Inc. is the controller of your personal information described in this Privacy Policy. See the Contact us section above for contact details of the organization and the individual in charge of the protection of personal information.

Your rights. Canada data protection laws give individuals in Canada and certain provinces the following rights regarding their personal information:

Right of access. You can ask us to provide you with information about our processing of your personal information and give you access to your personal information.
Right to rectification. If the personal information we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified.
Right to deletion. You can ask us to delete, remove, or de-index your personal information where there is no lawful reason for us continuing to store or process it, where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully, or where we are required to erase your personal information to comply with local law.
Right to data portability. You have the right, in certain circumstances, to ask us to provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format.
Right to withdraw consent at any time. Where we are relying on consent to process your personal information you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

To exercise any of these rights, please contact us. We may request specific information from you to help us confirm your identity and process your request.

International data transfers. We may transfer your personal information to recipients, including those described in the How we share your personal information section, in a province or country outside of your province or Canada that is not recognized as providing an adequate level of protection for personal information by the relevant government body. In these cases, we take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy and applicable laws.

Notice to Brazilian users

The information provided in this notice applies only to individuals in Brazil.

For purposes of this Notice, “personal information” has the same meaning as “personal data” under data protection laws in Brazil. The personal information that we collect from you is identified and described in greater detail in the section of the Privacy Policy entitled Personal information we collect.

Controller. Egg Strategy, Inc. is the controller of your personal information described in this Privacy Policy. See the Contact us section above for contact details.

Your rights. Brazilian data protection law gives individuals in Brazil the following rights regarding their personal information:

Right to know. You can request information about the categories of personal information that we have collected about, including whether your personal data is shared and with whom your personal data has been shared.
Right of access. You can ask us to provide you with information about our processing of your personal information and give you access to your personal information.
Right to correction. If the personal information we hold about you is incomplete, inaccurate, or outdated, you are entitled to request to have it corrected.
Right to deletion or anonymization. You can ask us to delete, anonymize, or remove your personal information in certain circumstances where there is no lawful reason for us continuing to store or process it, where we have collected your personal information based on consent, where we may have processed your information unlawfully, or where we are required to erase your personal information to comply with local law.
Right to data portability. You have the right, in certain circumstances, to ask us to provide to you, or a third party you have chosen, your personal information according to the parameters of the National Data Protection Authority.
Right to withdraw consent at any time. Where we are relying on consent to process your personal information you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
Right to petition before the national authority. You have the right to petition against us in relation to your data before the National Data Protection Authority.

To exercise any of these rights, please contact us. We may request specific information from you to help us confirm your identity and process your request.

International data transfers. We may transfer your personal information to recipients in a country outside of Brazil that is not recognized as providing an adequate level of protection for personal information by the relevant government body. In these cases, where your express and specific consent is not the basis of the transfer, we take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy and applicable laws by entering into appropriate data transfer mechanisms permitted under Article 33 of the Lei Geral de Proteção de Dados (or “LGPD”), such as model clauses approved by the National Data Protection Authority or custom contractual provisions that guarantee the same level of data protection as under the LGPD.

Egg Strategy, Inc. Privacy Policy

Index

Personal information we collect

How we use your personal information

How we share your personal information

Your choices

Other sites and services

Security and retention

International data transfers

Children

Changes to this Privacy Policy

How to contact us

Notice to European users

work with us