Privacy Policy

Perrin & Co., LLC ("Perrin & Co.," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our website, our AI-assisted assessment tool, our current and future software products and platforms (including client portals), and the technology and advisory services we provide (collectively, the "Services").

By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services.

We collect the following categories of information:

• Information you provide. When you request a consultation, contact us, or register for a client portal or product, we may collect your name, business name, email address, phone number, and any information you choose to include in your message or account.
• AI assessment tool inputs. Text you enter into our AI assistant is processed to generate a response. As described below, this content is not retained by Perrin & Co. after your session ends.
• Information collected automatically. When you visit our website, we and our hosting providers may collect limited technical information such as IP address, browser type, device information, pages viewed, and general usage data through server logs and essential cookies or similar technologies.
• Client portals and products. If you access a client portal or use our software products, we may collect account credentials, configuration settings, and information you or your organization submit through those tools, subject to any separate agreement governing that engagement.

Our AI assistant provides general information only and does not provide professional advice. To generate responses, the messages you enter are transmitted to a third-party AI service provider that processes them to return a reply. That processing — including any retention or handling the provider applies — is governed by the provider's own terms and privacy practices and is outside our control.

Perrin & Co. does not itself store conversation content. It is not written to our database or server logs and is not retained by us after the session ends. Please do not enter highly sensitive, privileged, regulated, or personally identifiable information into the assistant. For more detail, see our AI Disclaimer & Privacy Notice.

When you submit a consultation request, the details you provide — such as your name, business name, email address, phone number, preferred method of contact, and the message you write — are stored securely in our system and sent to us by email so that we can respond. Only the information you intentionally enter into the form is submitted. The content of any conversation with our AI assistant is never attached to or included with your consultation request.

Separately from the website and the AI assistant, we offer a Secure Document Exchange for sharing files in connection with a consultation or engagement. Documents you submit through it are forwarded to and hosted on Microsoft's SharePoint platform using Microsoft's secure infrastructure. Files pass through our servers only transiently while being delivered to SharePoint; their contents are not permanently stored, logged, or retained on this website's servers. Access to the Secure Document Exchange is by invitation only: you must first request access — providing your name, company, email address, phone number, and the reason for your upload — which we review before issuing a personal access code. When you upload, we transmit the client name and email address associated with your code to SharePoint alongside your files so we can identify the sender. Access codes expire, have a limited number of uses, and may be revoked at our discretion.

• Uploaded documents are used solely to evaluate or perform the professional services you request.
• They are accessible only to authorized Perrin & Co. personnel and approved service providers involved in the engagement.
• They are never used for advertising, marketing, analytics, AI model training, or any unrelated business purpose.
• They remain entirely separate from any AI assistant conversation, and the AI assistant cannot access uploaded documents.
• They are retained only for as long as reasonably necessary to fulfill the engagement and to satisfy our legal, professional, and record-retention obligations, after which they are securely deleted or destroyed.
• We may decline or delete unsolicited documents that are unrelated to services you have requested.

Please upload documents only through the Secure Document Exchange — not through the AI assistant — and only if we have requested them or you have an active consultation or engagement.

We use the information we collect to:

• Respond to inquiries and consultation requests;
• Provide, operate, maintain, and improve the Services, including client portals and software products;
• Communicate with you about our Services, engagements, and relevant updates;
• Maintain the security and integrity of our systems and prevent fraud or misuse;
• Comply with legal, regulatory, and professional obligations; and
• Establish, exercise, or defend legal claims.

We do not sell personal information for money, and we do not use AI conversation content for marketing, lead generation, employee evaluation, or unrelated business purposes.

We may share information with:

• Service providers that support our operations, such as hosting, email delivery, and AI processing providers, who are permitted to use the information only to provide services to us;
• Professional advisors such as our attorneys, accountants, and auditors;
• Authorities or other parties when required by law, regulation, or legal process, or to protect our rights, our clients, or the public; and
• Successors in connection with a merger, acquisition, financing, or sale of assets.

We do not rent personal information or sell it for money. Before you choose, or if you reject optional tracking, Google may receive limited consent-aware, cookieless measurement requests containing page and technical information; see below. If you allow optional analytics and advertising, Google and LinkedIn receive information as described below. Advertising-related disclosure to these providers may qualify as “sharing” for cross-context behavioral advertising under applicable privacy laws. The same permission loads the OpenAI Ads base pixel for advertising measurement, as described below.

Essential and requested functional storage is separate from optional analytics and advertising:

• Staff sign-in: the essential perrin_admin cookie is set only after staff sign-in, applies to the admin API, and expires after 12 hours.
• Insights access: when you unlock articles, perrin-insights-access in local storage remembers your email and access token until removed or cleared. It is not advertising tracking.
• Your preference: perrin-cookie-preferences in local storage records your choice for 180 days in this browser.

Google Analytics 4 (measurement ID G-EXZLKVSYF2) and Google Ads tags may load before you choose, with analytics and advertising consent set to denied. While consent is denied, Google may receive limited consent-aware, cookieless measurement requests with page URLs, IP address, and browser/device information, but Google analytics and advertising cookies and identifiers are not used. If you allow optional analytics and advertising, Google Analytics 4 measures pageviews and events generated when our server confirms a lead submission, and Google Ads measures advertising activity and confirmed lead conversions. With permission, Google may use cookies or similar identifiers. We do not send personal information, form contents, or AI conversation content in analytics events. See Google’s privacy policy.

The same permission allows Google Tag Manager to load LinkedIn’s Insight Tag to measure visits and advertising results. LinkedIn receives information such as page URLs, IP address, browser/device information and identifiers, and may associate visits with your LinkedIn account or activity across sites for advertising. The tag can store li_adsId locally and set LinkedIn-domain cookies including li_sugr, lidc, UserMatchHistory, AnalyticsSyncHistory, bcookie and bscookie. Cookies and lifetimes depend on LinkedIn and browser settings. See LinkedIn’s privacy policy.

The same permission loads the OpenAI Ads pixel for advertising measurement, including a lead-created event only after our server confirms a successful consultation or advisory inquiry. We do not include form contents or personal information in this event. See OpenAI’s privacy policy.

Use “Cookie preferences” on any public page to allow or reject optional Google Analytics, Google Ads, LinkedIn advertising, and the OpenAI Ads base pixel together. Your choice is saved for 180 days in that browser. Before you allow them, or if you reject, Google consent remains denied and only limited cookieless Google measurement requests may occur; LinkedIn and OpenAI Ads remain off. Rejecting does not prevent access to the site. Withdrawing permission reloads the page to stop already loaded optional tags and removes the local LinkedIn advertising identifier. We cannot undo information already sent or automatically delete every cookie or identifier set by Google or LinkedIn; you can clear cookies and site data in your browser. Choices apply to this browser, not all devices. If preference storage is unavailable, optional tracking stays denied, although consent-aware Google tags may still load without optional cookies or identifiers.

Tag Manager is a delivery tool, not itself a reason every site needs consent. We block this container until you allow optional tracking because it currently delivers LinkedIn advertising. Google Fonts is also requested to display our typeface and receives normal connection information; it is separate from optional analytics and advertising tags.

For more details, see our Cookie Policy.

We treat Global Privacy Control (GPC) or Do Not Track (DNT) as a rejection and keep all optional analytics and advertising off, even if this browser previously saved an allow choice. Essential and requested functional storage remains available.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to maintain business and engagement records, and to comply with legal, regulatory, and professional obligations. Consultation request details are kept for as long as reasonably needed to respond to your inquiry and to maintain our business records, and are reviewed periodically. AI conversation content is not written to our database and is not retained after your session ends.

We maintain reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. Information submitted through our website is transmitted over encrypted connections, and access to stored information is limited to those who need it to operate the Services. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA/CPRA"), grants California residents specific rights over their personal information. It applies, however, only to businesses that meet certain statutory thresholds — for example, a minimum level of annual gross revenue, the volume of consumers or households whose information is processed, or revenue derived from selling or sharing personal information.

Perrin & Co. does not currently meet those thresholds, so the CCPA/CPRA does not presently apply to us. If we later become subject to the CCPA/CPRA, California residents will have additional rights — including the rights to know, delete, and correct personal information, and to opt out of its "sale" or "sharing" — and we will update this Policy accordingly. Optional Google Ads, LinkedIn advertising, and the OpenAI Ads pixel may constitute “sharing” under the CCPA/CPRA. You can reject all optional analytics and advertising using Cookie preferences regardless of whether that law applies to us.

Regardless of whether the CCPA/CPRA applies, if you would like to access, correct, or delete information you have provided to us, please contact us at info@perrin-co.com and we will respond consistent with applicable law. We may need to verify your identity before responding.

Our Services are intended for businesses and professionals and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Our website may contain links to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing them with information.

The Services are operated in the United States. If you access the Services from outside the United States, you understand that your information may be processed in the United States, where data-protection laws may differ from those in your jurisdiction.

We may update this Policy from time to time. When we do, we will revise the effective date above. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

If you have questions about this Policy or our privacy practices, contact us at info@perrin-co.com.