Privacy Policy
This Privacy Policy explains how HockeyStack, Inc. (“Bourne,” “we,” “us,” or “our”) collects, uses, and shares personal information when you visit usebourne.com (the “Site”), contact us, or otherwise interact with us. Bourne is a product of HockeyStack, Inc., which acts as the data controller for the personal information described here.
1. Information we collect
Information you give us
When you fill out a form on the Site (for example, to request access, talk to our team, or request an API token), we collect the details you provide, such as your name, work email address, company, job title, how you heard about us, and any message you send.
Information we collect automatically
When you visit the Site, we and our partners may automatically collect certain information using cookies and similar technologies, including your IP address, device and browser type, pages viewed, referring URLs, and how you interact with the Site. See our Cookie Policy for details and for the controls available to you.
Information from third-party identification partners
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.
You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.
2. How we use your information
- To respond to your inquiries and provide the information or access you request;
- To operate, maintain, secure, and improve the Site;
- To measure and improve our marketing, and to understand how visitors find and use the Site;
- To send you communications and marketing relevant to your interest in Bourne;
- To detect, prevent, and address fraud, abuse, and security issues; and
- To comply with legal obligations and enforce our terms.
3. Legal bases for processing (EEA/UK)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on the following legal bases: your consent (for example, for non-essential cookies and marketing communications, which you may withdraw at any time); our legitimate interests in operating and promoting our business in a way that does not override your rights; the performance of a contract or steps taken at your request before entering into one; and compliance with legal obligations.
4. How we share information
We do not sell your personal information for money. However, when you allow marketing cookies, we use partners such as RB2B and the LinkedIn Insight Tag that may receive your information to identify you, attribute your visit, and show you advertising. Under some US state privacy laws (such as California’s CCPA/CPRA), this can be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising. You can opt out at any time — see Section 7. We share information with the following service providers and partners that help us run the Site and our business:
- RB2B / Retention.com — website visitor identification and marketing;
- LinkedIn — the LinkedIn Insight Tag, for advertising measurement and retargeting;
- RudderStack — our customer data platform, which collects website analytics and ties your activity to your contact details once you identify yourself (e.g. by submitting a form);
- Attio — our customer relationship management (CRM) system, which stores inquiries you submit;
- Cloudflare — Turnstile, to protect our forms from spam and abuse;
- Vercel — hosting, content delivery, and privacy-friendly, cookieless Web Analytics for aggregate traffic measurement;
- Calendly — scheduling, if you book a meeting with us.
We may also disclose information where required by law, to protect our rights and safety, or in connection with a corporate transaction such as a merger or acquisition.
5. International transfers
We are based in the United States, and our service providers may process information in the United States and other countries. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
6. Data retention
We keep personal information only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. Inquiry records are retained for as long as needed to follow up and maintain our business relationship, unless you ask us to delete them.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent at any time. To exercise these rights, contact us at privacy@usebourne.com. You may use an authorized agent to make a request on your behalf. We will not discriminate against you for exercising your rights.
Do Not Sell or Share My Personal Information
To opt out of the “sale” or “sharing” of your personal information described in Section 4, set the “Marketing” category to off (or click “Reject all”). You can also opt out of RB2B and LinkedIn directly using the links in Section 1.
Global Privacy Control. We honor the Global Privacy Control (GPC) signal. If your browser or extension sends a GPC signal, we automatically treat it as a request to opt out of marketing cookies and the related sharing of your personal information.
If you are in California, you have rights under the CCPA/CPRA, including the right to know, delete, and correct your personal information, and to opt out of its sale or sharing. Residents of other US states with privacy laws, and people in the EEA, UK, and Switzerland, have comparable rights under their local laws.
8. Security
We use technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Learn more at security.hockeystack.com.
9. Children
The Site is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.
11. Contact us
If you have questions about this policy or your personal information, contact us at privacy@usebourne.com.