Privacy Policy
How Spinnaker International LLC collects, uses and protects your personal information.
Last updated: April 1, 2026
This Privacy Policy explains how Spinnaker International LLC (“Spinnaker,” “we,” “us,” or “our”), a management consulting firm headquartered at 5 Concourse Parkway, Suite 3000, Atlanta, GA 30328, collects, uses, discloses and protects personal information when you visit spinnakerintl.com (the “Site”) or communicate with us. This Policy applies to all visitors, engaged organizations and individuals who interact with us and is designed to comply with applicable privacy regulations including the EU General Data Protection Regulation (GDPR), the UK GDPR and applicable US state privacy laws.
1. Information We Collect
We collect personal information in the following ways:
- Contact forms: When you submit an inquiry through our Site, we collect your name, work email address, company name and the content of your message.
- Scheduling: When you book a consultation via our Microsoft Bookings integration, we collect your name, email address and any information you provide during the booking process.
- Operational assessments: When you complete one of our operational assessments, we collect your name, work email address, company name and your assessment responses.
- Analytics: With your consent, we collect data about how you interact with the Site, including pages visited, time spent, browser type, device type and approximate geographic location. This data is collected via Google Analytics 4.
- CRM data: With your consent, we use HubSpot to manage contact information and track interactions with our Site and communications.
We do not collect sensitive personal data (such as health information, financial account details, or government identification numbers) through our Site.
2. How We Use Your Information
We use personal information for the following purposes:
- To respond to your inquiries and schedule consultations
- To deliver assessment results and personalized briefs
- To send relevant content and communications about our services (with your consent)
- To improve our Site and understand how visitors engage with our content
- To comply with legal obligations
- To protect the security and integrity of our systems
3. Legal Basis for Processing (GDPR)
For individuals in the European Economic Area, United Kingdom or Switzerland, we rely on the following legal bases:
- Consent (Art. 6(1)(a) GDPR): For analytics cookies, marketing communications and assessment data processing. You may withdraw consent at any time.
- Legitimate interests (Art. 6(1)(f) GDPR): For responding to business inquiries and maintaining basic Site security. Our legitimate interest is in operating a professional services business and communicating with prospective organizations.
- Contract (Art. 6(1)(b) GDPR): Where processing is necessary to fulfill an engagement with an organization.
4. Cookies and Tracking Technologies
We use the following types of cookies:
- Essential cookies: Required for the Site to function. These cannot be declined.
- Analytics cookies (Google Analytics 4): Used to understand Site usage patterns. Activated only with your consent.
- CRM cookies (HubSpot): Used to identify returning visitors and track engagement for sales and marketing purposes. Activated only with your consent.
- Preference cookies: Used to store your cookie consent decision.
You can withdraw cookie consent at any time by clearing your browser storage or contacting us at info@spinnakerintl.com.
5. Data Sharing and Third Parties
We do not sell your personal information. We share personal data with the following categories of service providers who process data on our behalf under appropriate data processing agreements:
- HubSpot, Inc.: CRM and marketing automation. Data may be processed in the United States under Standard Contractual Clauses for EU/UK transfers.
- Google LLC: Analytics. Data may be processed in the United States under Standard Contractual Clauses.
- Microsoft Corporation: Booking and scheduling. Subject to Microsoft’s Privacy Statement.
- Anthropic, PBC: AI-powered assessment output generation. Assessment responses are processed to generate personalized briefs. No data is retained by Anthropic beyond the processing request.
We may also disclose personal information where required by law, court order or regulatory authority.
6. International Data Transfers
Spinnaker International LLC is based in the United States. If you are located in the EU, UK or another jurisdiction with data transfer restrictions, your personal information may be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses approved by the European Commission as the legal mechanism for such transfers.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including: contact form submissions (3 years from last interaction), assessment data (2 years), analytics data (26 months as configured in Google Analytics) and engagement records (7 years for legal and accounting purposes). You may request deletion of your data at any time subject to legal retention requirements.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data (“right to be forgotten”)
- Restriction: Request that we limit processing of your data
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw any consent you have given at any time
- Lodge a complaint: File a complaint with your local data protection authority
To exercise any of these rights, contact us at info@spinnakerintl.com. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration or destruction. These measures include HTTPS encryption, access controls and periodic security reviews. No method of electronic transmission or storage is 100 percent secure. We will notify affected individuals and relevant authorities of any data breach as required by applicable law.
10. Children
Our Site is directed at business professionals and is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will post any changes on this page with an updated “Last updated” date. We encourage you to review this Policy regularly. Continued use of the Site after changes constitutes acceptance of the updated Policy.
12. Contact Us
For privacy-related inquiries, to exercise your rights or to contact our data protection point of contact:
Spinnaker International LLC
5 Concourse Parkway, Suite 3000
Atlanta, GA 30328, USA
Email: info@spinnakerintl.com
Phone: 855.771.6625
EU/UK representatives and formal DPO appointment are available upon request for organizations in those jurisdictions.