Privacy Policy

Effective Date: September 29, 2025
Last Updated: September 29, 2025
Contact: privacy@skeletonkeystrategies.com

1. Introduction

Skeleton Key Strategies LLC (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://skeletonkeystrategies.com (the “Site”) or interact with us through other channels.

This policy applies to all visitors and users of our Site and services. By using our Site or services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information You Provide Directly

We collect information you voluntarily provide to us, including:

  • Contact Information: When you submit a contact form, we collect your name, organization name, email address, and phone number
  • Email Subscription Information: When you sign up for email alerts, we collect your email address
  • Event Registration Information: When you register for events or request follow-up conversations through social media platforms, we collect information you provide through those interactions

Information Collected Automatically

When you visit our Site, we automatically collect certain information through analytics tools:

  • Analytics Data: We use Google Analytics, which collects information such as your IP address, browser type, operating system, referring URLs, pages viewed, and time spent on pages
  • Cookies: Google Analytics uses cookies to collect this information. Cookies are small data files stored on your device that help us understand how visitors interact with our Site

3. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and requests for information
  • Send newsletters and marketing communications (with your consent)
  • Provide and improve our consulting services
  • Analyze Site usage and improve user experience
  • Comply with legal obligations
  • Protect our rights and prevent fraud or illegal activities

4. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA) or United Kingdom, we process your personal data based on:

  • Consent: When you provide explicit consent for marketing communications
  • Legitimate Interests: For analytics and improving our services
  • Contract Performance: When necessary to provide requested services
  • Legal Obligations: When required by law

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

  • Service Providers: Third-party companies that help us operate our business, such as cloud storage providers, customer relationship management systems, and email marketing platforms (when implemented)
  • Legal Requirements: When required by law or to respond to legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Protection of Rights: To protect our rights, privacy, safety, or property

6. Data Storage and Retention

Your information is stored in secure cloud infrastructure maintained by our service providers. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

We retain personal information described under Section 2, Information You Provide Directly, for up to 5 years, unless a longer retention period is required by law or you request deletion sooner.

We retain personal information described under Section 2, Information Collected Automatically, for up to 2 years, unless a longer retention period is required by law or you request deletion sooner.

7. Your Rights and Choices

Rights Under GDPR (EEA Residents) and UK GDPR (UK Residents)

If you are in the EEA or UK, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data
  • Restriction: Request restriction of processing
  • Portability: Receive your data in a portable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time

Rights Under CCPA (California Residents)

California residents have the right to:

  • Know what personal information we collect, use, and disclose
  • Request deletion of personal information
  • Opt-out of the sale of personal information (we do not sell personal information)
  • Non-discrimination for exercising privacy rights

Rights Under Other State Laws

Residents of Colorado, Connecticut, Utah, Virginia, and other states with privacy laws have similar rights including access, correction, deletion, and portability of personal information. We will honor these requests in accordance with applicable law.

Marketing Communications

We use double opt-in for email subscriptions. You can unsubscribe from marketing emails at any time by:

Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Site.

8. International Data Transfers

As we serve clients internationally, your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

9. Children’s Privacy

Our Site and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly.

10. Data Security

We implement robust technical and organizational security measures to protect your personal information, including requiring team members to use multi-factor authentication, encryption of digital communications and other data at rest and in transit, access controls, and regular security assessments. We monitor and update our security practices to address evolving threats.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any websites for which you provide personal information.

12. Do Not Track Signals

Our Site does not currently respond to Do Not Track browser signals or similar mechanisms.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: privacy@skeletonkeystrategies.com

For GDPR inquiries, EU/UK residents may also contact their local data protection authority.

15. Accessibility

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you need this policy in an alternative format, please contact us.

By using our Site or services, you acknowledge that you have read and understood this Privacy Policy.