Privacy Policy

grIP Venture Collective LLC

Effective Date: September 21, 2026 Last Updated: September 21, 2026

This Privacy Policy is a single, combined notice. It describes our privacy practices for all visitors and users, and it includes supplemental disclosures that apply only to residents of California (see Notice to California Residents) and to individuals in the European Economic Area, the United Kingdom, and Switzerland (see Notice to Individuals in the EEA, the UK, and Switzerland). Where a supplemental section conflicts with the general sections of this Privacy Policy, the supplemental section controls for the individuals it covers.

The Short Version

This summary is here to be useful, not to be the whole story. It does not replace the rest of this policy, and it is not part of it for legal purposes. Where the summary and the full text differ, the full text governs.

• What we collect. Your contact and professional details, what you tell us about your company and the problem you are facing, your participation in our programs and events, your subscription preferences, and basic device and usage data from our website.
• Why we collect it. To understand your problem, match you with the right operator, deliver the engagement, run grIP Office Hours, send you what you subscribed to, and operate and secure our business.
• Who sees it. The operators and mentors working on your engagement, the vendors that run our website, email, forms, scheduling, and storage, and our professional advisers. Nobody else, unless you ask us to or the law requires it.
• What we never do. We do not sell your personal data. We do not share it for advertising. We do not use your venture information to train AI models or to compete with you.
• Your idea. We take confidentiality seriously, but a web form is not a confidentiality agreement. Please do not send us trade secrets or other sensitive material until we have one in place. See Your Venture Information below.
• Your choices. You can unsubscribe at any time, and you can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing info@gripventure.com.

Who We Are and What This Policy Covers

grIP Venture Collective LLC, a Maryland limited liability company ("grIP," "Company," "we," "our," or "us"), respects your privacy and is committed to protecting it through our compliance with this policy. grIP matches growth-stage founders with experienced operators who have navigated the same problem, across go-to-market, strategy and capital, and protection and compliance. This policy describes how we collect, process, retain, and disclose personal data about you when providing services to you through our website at www.gripventure.com (and any predecessor or successor domain we operate), and any related applications, communications, programs, and services that link to this policy (our "Services"), and our practices for using, maintaining, protecting, and disclosing that information.

This policy applies only to information we collect:

• Through the Services, including our intake, engagement, and "Work With grIP" forms.
• Through registrations for grIP Office Hours and other events, sessions, and programs we host.
• Through subscriptions to our newsletter, briefings, and other communications, including "Our Brief."
• In communications, including email, text, chat, video conference, and other electronic messages, between you and grIP.
• From founders, operators, mentors, investors, and other participants in the grIP collective who provide information about you to us, including referrals and introductions.

It does not apply to information collected by:

• Us offline or through any other means, including on any other website operated by grIP or any third party (including our affiliates and the independent operators and mentors in our network) that does not link to this policy;
• Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Services; or
• Us in our capacity as an employer, from our own personnel, job applicants, and independent contractors, which is addressed separately.

Independent operators, mentors, advisors, service providers, and investors introduced through grIP are separate businesses and act as independent controllers of the information you share directly with them. Their handling of your information is governed by their own privacy policies and by the engagement terms you enter into with them, not by this policy.

We may provide additional or different privacy policies or notices that are specific to certain features, programs, services, or activities.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy. Where applicable law requires consent as the basis for processing, we will obtain that consent separately. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children's and Minors' Data

Our Services are directed to businesses and business professionals. They are not intended for, and we do not knowingly collect any personal data from, children or minors under the age of 18. If we learn we have collected or received personal data from a person under 18 years old without verification of parental consent, we will delete that information. If you believe we may have any information from or about a person under 18, please contact us using the details in Contact Information.

The Personal Data That We Collect or Process

"Personal data" is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, business address, or professional background.

The types and categories of personal data we collect or process include:

• Account and contact information, including your name, business email address, telephone number, mailing or business address, and other contact information you provide to us.
• Professional and company information, including your job title or role, the name and stage of your company, your LinkedIn or other professional profile, your professional background and areas of expertise, and information about your prior roles, exits, and credentials.
• Founder and venture information, including the information you submit through our intake and engagement forms about your company's problem statement, stage, traction, runway, team gaps, go-to-market, fundraising posture, and the decision you are facing, and any materials you send us in connection with an inquiry or engagement.
• Engagement and program information, including information about the scoping, matching, and delivery of engagements, your participation in grIP Office Hours and other events, notes we take in connection with our work with you, and your communications with us.
• Marketing and subscription information, including your subscription status and preferences for our newsletter and briefings, and information about how you interact with our emails.
• Device and usage information, including your IP address, device identifiers, operating system and version, preferred language, browser type and settings, referring and exit pages, and other device information.
• Content and information you elect to provide, including in emails, chats, forms, surveys, or other communications sent to us, and any recordings of sessions or meetings where we have told you in advance that the session is being recorded and, where required, obtained your consent.

We do not knowingly collect payment card numbers, Social Security numbers, driver's license or other government identification numbers, biometric information, precise geolocation, health information, or other categories of sensitive personal data through the Services. If we later collect sensitive personal data, we will collect and process it only as permitted by applicable law and, where required, only with your consent.

Information about your company, its business, its finances, and its intellectual property is usually not personal data, but we treat it as confidential in accordance with our agreements with you. See Your Venture Information below.

We also collect:

• Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate intake information to understand which categories of problems founders most often bring to us.
• Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), pages that you view, page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.

Your Venture Information

Your idea stays yours. We do not publish your venture information, we do not sell it, we do not use it to train artificial intelligence models, and we do not use it to build or back a business that competes with you.

Because of what we do, founders and operators often share business information with us that is confidential and commercially sensitive. We handle that information as follows:

• Information you submit through our intake and engagement forms, and in the course of an engagement, is used to understand your problem, to scope the work, and to identify and brief the operators best suited to it.
• We disclose your venture information to operators and mentors only as needed to scope and deliver an engagement, and we ask operators and mentors to treat it as confidential.
• Where the sensitivity of the information warrants it, we and the relevant operators will enter into a written confidentiality agreement with you. Any written agreement between you and grIP that addresses confidentiality controls over this policy with respect to the information it covers.
• Unsolicited submissions. If you send us business plans, decks, product ideas, or other materials that we did not request and that are not covered by a written confidentiality agreement, we cannot treat them as confidential, and we are free to use ideas of that kind without obligation to you, as described in our Website Terms of Use. Please do not send us confidential or proprietary materials before we have a written agreement in place.
• Referrals and introductions. Where you ask us to, or where it is a necessary part of the engagement you requested, we may introduce you to investors, partners, or potential customers, and share with them only what that introduction requires.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information about you when you interact with our Services, such as when you complete an intake or "Work With grIP" form, request or participate in an engagement, register for grIP Office Hours or another event, subscribe to our newsletter or briefings, apply or express interest in joining the collective as an operator or mentor, respond to a survey, or otherwise contact us.

Automatically Through Our Services

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information that may include personal data. Information collected automatically may include usage details, IP addresses, operating system and browser type, and information collected through cookies, web beacons, and similar technologies, including details of your interactions with our Services, such as traffic data, logs, and which resources and Services features you access and use.

We do not use these technologies to track your activity over time and across third-party websites and online services for cross-context behavioral advertising. Using automatic collection technologies helps us operate, secure, and improve the Services.

The technologies we use for this automatic data collection may include:

• Cookies. A cookie is a small file placed on your device when you interact with the Services. We use cookies that are necessary to operate and secure the Services, and analytics cookies that help us understand how the Services are used. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services.
• Web beacons. Some parts of the Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those parts or opened an email and for other related statistics, such as recording the popularity of certain content and verifying system and server integrity.
• Hosting, email, and event platform providers. Our website at www.gripventure.com is hosted and served by Vercel. We use Google Forms for intake and event registration; Zoho and HubSpot for email marketing and customer relationship management; Substack to distribute our newsletter (“Our Brief”); and Zoom to host grIP Office Hours and other events. We do not currently use a dedicated website analytics tool.

To the extent any of these automated technologies would be considered a personal data sale, targeted advertising, or profiling under applicable laws, depending on where you live, you may opt out from the use of these automated technologies for such purposes by emailing info@gripventure.com. Please note that some Services features may be unavailable as a result.

When you interact with the Services, there are third parties that may use automatic collection technologies to collect information about you or your device. These third parties may include our hosting provider, our email marketing and event platform providers, your device manufacturer, and your internet or mobile service provider. We do not control these third parties' tracking technologies or how they may be used.

From Business Partners, Service Providers, and Others

We may receive personal data about you from other sources and combine it with information we collect directly from you. For example, we may receive your information from an operator, mentor, investor, or other member of our network who refers or introduces you to us; from service providers we engage to perform services on our behalf, such as email platform providers, form and scheduling providers, analytics and security providers, and event platforms; and from publicly available sources such as company websites, professional networking sites, and public business registries, which we use to verify and enrich professional information about founders and operators.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal data, to:

• Provide the Services, including reviewing intake submissions, scoping problems, matching founders with operators, and delivering and supporting engagements.
• Communicate with you, including responding to your inquiries, sending you information about an engagement, and sending administrative notices.
• Operate grIP Office Hours and other events, including registration, reminders, attendance, and follow-up.
• Send you our newsletter, briefings, and other marketing communications where you have subscribed or where otherwise permitted by law. You can unsubscribe at any time using the link in any such email or by contacting us.
• Evaluate and pursue a relationship you have initiated with us, including evaluating whether an engagement or a partnership is a fit, and conducting the diligence that evaluation requires.
• Fulfill any other purpose for which you provide the information.
• Improve, maintain, analyze, secure, and optimize the Services and our programs, including by creating aggregated and deidentified data derived from your information and measuring how the Services are used.
• Promote our Services, business, and offerings, including by publishing case studies and results. We will not identify you, your company, or the details of an engagement in any public case study, testimonial, or marketing material without your prior consent.
• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• Protect the rights, property, safety, and security of grIP, our network, our clients, and others, including for fraud prevention, security monitoring, and dispute resolution.
• Comply with applicable law, legal process, and our legal and regulatory obligations.
• In any other way we may describe when you provide the information, or for any other purpose with your consent.

The usage information we collect, whether connected to your personal data or not, helps us improve our Services and deliver a better and more relevant experience by enabling us to estimate our audience sizes and usage patterns, store information about your preferences, speed up your searches, and recognize you when you return to our Services.

Artificial Intelligence and Large Language Model Training

We do not sell personal data, and we do not use personal data or your venture information to train large language models or other generative artificial intelligence models, and we do not license or provide your personal data or venture information to third parties for that purpose. We may use artificial intelligence tools operated by vendors to assist with administrative tasks such as drafting, summarizing, and research. Where a vendor's terms permit it to use data to train its own models, we work to limit the personal data and venture information we input into that tool.

Who We Disclose Your Information To

We may disclose aggregated or deidentified information about our users, and information that does not identify any individual, without restriction.

We do not sell your personal data, and we do not share your personal data for cross-context behavioral advertising or targeted advertising. We may disclose personal data that we collect or you provide as described in this privacy policy:

• To operators, mentors, and advisors in our network, for the purpose of scoping, matching, and delivering an engagement, subject to confidentiality obligations.
• To contractors, service providers, and other third parties we use to support our business, who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them. These include hosting providers (Vercel), form providers (Google Forms), email marketing and CRM providers (Zoho, HubSpot), our newsletter platform (Substack), our event and video conference platform (Zoom), our document storage provider (Google Drive), and professional advisors such as our accountants and lawyers.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of grIP's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by grIP is among the assets transferred.
• To fulfill the purpose for which you provide it, for any other purpose disclosed by us when you provide the information, and with your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Website Terms of Use (www.gripventure.com) and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of grIP, our clients, our network, or others, including for the purposes of fraud protection and risk reduction.

The categories of personal data we may disclose include account and contact information, professional and company information, founder and venture information, engagement and program information, marketing and subscription information, device and usage information, and content and information you elect to provide to us.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information and the rights you may have under state law, depending on where you live. Residents of California and individuals in the EEA, the UK, and Switzerland should also read the supplemental sections below, which describe additional rights.

Marketing, Cookies, and Tracking Technology Choices

• Marketing emails. You can unsubscribe from our newsletter, briefings, and other marketing emails at any time by using the unsubscribe link in any such email or by emailing info@gripventure.com. We may still send you non-marketing messages about an engagement, an event you registered for, or this policy.
• Cookies and other tracking technologies. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies, some Services features may be inaccessible or not function properly.
• Do Not Track and Global Privacy Control. Some browsers include a "Do Not Track" (DNT) setting. Because there is not a common understanding of how to interpret the DNT signal, our Services may not respond to all browser DNT signals. Some browsers and browser extensions support the Global Privacy Control ("GPC"), which sends a signal to opt out from certain types of data processing, including data "sales" and "sharing" as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices as required by applicable law.

Your State Privacy Rights

Depending on your state of residency, you may have certain rights related to your personal data, including:

• Access and data portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, data will be provided in a portable format.
• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information's nature and processing purpose.
• Deletion. You may request that we delete personal data about you that we maintain, subject to certain exceptions under applicable law.
• Opt out of the use of personal data for sales, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data, do not process personal data for targeted advertising, and do not engage in this type of profiling.

The exact scope of these rights varies by state, and there are several exceptions where we may not have an obligation to fulfill your request. To exercise any of these rights, email info@gripventure.com with the subject line "Privacy Rights Request" or write to us at the address in Contact Information. We will verify your request using the information we already hold about you, and we may ask you for additional information for that purpose. If we deny your request, you may appeal that decision by replying to our response or emailing info@gripventure.com with the subject line "Privacy Rights Appeal" within 30 days. We will respond to an appeal in writing within the period required by applicable law and, if we deny the appeal, we will provide you with a method to contact your state attorney general.

Nevada provides its residents with a limited right to opt out of certain personal data sales. Residents who wish to exercise those rights may submit a request to info@gripventure.com. We do not currently sell data triggering that statute's opt-out requirements.

Notice to California Residents

This section supplements the rest of this Privacy Policy and applies only to consumers who reside in California. It is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"). Any terms defined in the CCPA have the same meaning when used in this section.

This section does not apply to our collection and use of personal information in an employment capacity. Personnel, job applicants, contractors, and other workers seeking more information about our employment-related personal information practices should contact us at info@gripventure.com.

Personal Information We Collect

We collect and use information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal information"). Personal information does not include publicly available information, lawfully obtained truthful information that is a matter of public concern, deidentified or aggregated consumer information, or information excluded from the CCPA's scope.

The chart below identifies the categories of personal information we have collected from California consumers within the last 12 months and the expected retention period for each.

As used in the chart above and in this section, "engagement records" means information we retain about an engagement, and the retention periods stated are our current expectations. We may retain personal information for longer where necessary to comply with law, resolve disputes, or enforce our agreements.

Sensitive Personal Information

Sensitive personal information is a subtype of personal information consisting of specific categories identified by the CCPA, and the CCPA treats this information as sensitive personal information when a business collects or uses it to infer characteristics about a consumer. We do not collect or use sensitive personal information to infer characteristics about any consumer. The chart below identifies the sensitive personal information categories and confirms that we have not collected them to infer characteristics about consumers in the last 12 months.

Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from you, such as from the intake, engagement, event registration, and subscription forms you complete and the communications you send us.
• Indirectly from you, such as from your interactions with our website and our emails.
• From our service providers, such as our hosting provider (Vercel), our form provider (Google Forms), our email marketing and CRM providers (Zoho, HubSpot), our newsletter platform (Substack), and our event and video conference platform (Zoom).
• From operators, mentors, investors, and other members of our network, such as through referrals and introductions.
• From publicly available sources, such as company websites, professional networking sites, and public business registries.

How We Use and Disclose Personal Information

We use and disclose the personal information we collect to advance our business and commercial purposes, specifically for the purposes described in How We Use Your Information above, and to:

• Develop, offer, scope, and deliver our matching and advisory services.
• Meet our obligations and enforce our rights arising from any contracts with you, including for billing or collections, or to comply with legal requirements.
• Fulfil the purposes for which you provided your personal information or that were described to you at collection, and as the CCPA otherwise permits.
• Administer and maintain our systems and operations, including for troubleshooting, data analysis, testing, research, statistical, security, and survey purposes.
• Engage in corporate transactions requiring review of consumer records, such as evaluating potential mergers and acquisitions.
• Exercise or defend the legal rights of grIP and its personnel, affiliates, clients, contractors, and agents, and respond to law enforcement requests and as required by applicable law or court order.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If required by law, we will also seek your consent before using your personal information for a new or unrelated purpose. We may collect, process, and disclose aggregated or deidentified consumer information for any purpose, without restriction, and we will maintain and use it in deidentified form and will not attempt to reidentify it.

Business Purpose Disclosures

In the preceding 12 months, we have disclosed the personal information categories identified in the chart below to the following categories of recipients for the business purposes described. We make these business purpose disclosures only under written contracts that describe the purposes, require the recipient to keep the personal information confidential, prohibit using the disclosed information for any purpose except performing the contract, and meet the CCPA's other contract requirements for engaging service providers or contractors.

Sales and Sharing of Personal Information

We do not sell your personal information, including sensitive personal information, to third parties, and we have not sold it in the preceding 12 months. We do not share your personal information with third parties for cross-context behavioral advertising purposes, and we have not shared it in the preceding 12 months. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age. Because we do not sell or share personal information, we do not provide a "Do Not Sell or Share My Personal Information" link, and we do not offer a financial incentive in exchange for personal information.

Automated Decision-Making Technology

We do not use automated decision-making technology to make decisions that produce legal or similarly significant effects concerning consumers, such as decisions about financial or lending services, housing, education, employment or independent contracting opportunities or compensation, or healthcare services. Matching founders with operators is performed by our team, not by automated decision-making technology. Accordingly, we do not currently provide access, opt-out, or appeal rights with respect to automated decision-making technology.

Your California Privacy Rights

If you are a California resident, the CCPA grants you the following rights regarding your personal information:

• Right to know and data portability. You have the right to request that we disclose to you the categories of personal information we collected about you, the categories of sources, the business or commercial purpose for collecting it, the categories of persons to whom we disclosed it, and the specific pieces of personal information we have collected about you. You may exercise the right to know twice in any 12-month period.
• Right to delete. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
• Right to correct. You have the right to request that we correct inaccurate personal information we maintain about you. We may require documentation to confirm your identity and to support your claim that the information is inaccurate.
• Right to limit the use and disclosure of sensitive personal information. Because we do not use or disclose sensitive personal information beyond the purposes the CCPA permits without a limitation right, we do not currently provide this right.
• Right to opt out of sales and sharing. Because we do not sell or share personal information, we do not currently provide this right. If that changes, we will update this policy and provide the required opt-out mechanisms before doing so.
• Right to non-discrimination. You have the right not to be discriminated or retaliated against for exercising any of your privacy rights under the CCPA.

How to Exercise Your California Rights

To exercise the right to know, delete, or correct, submit a verifiable consumer request to us by emailing info@gripventure.com with the subject line "California Privacy Rights Request," or by writing to us at the address in Contact Information. Please describe your request with sufficient detail so we can properly understand, evaluate, and respond to it.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. To designate an authorized agent, provide the agent with written permission signed by you, and we may require you to verify your identity directly with us and to confirm that you gave the agent permission to submit the request. We cannot respond to your request if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. We will only use personal information provided in a request to verify the requestor's identity or authority to make the request.

We will confirm receipt of your request within ten business days. We endeavor to respond substantively to a verifiable consumer request within 45 days of its receipt. If we require more time, up to another 45 days, we will inform you of the reason and extension period in writing. We will deliver our written response to the email address from which you contacted us, unless you ask us to use another method. If we cannot comply with your request in whole or in part, we will explain the reason, subject to any legal or regulatory restrictions. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded, in which case we will tell you why we made that decision and provide a cost estimate before completing your request.

If you need to access this Privacy Policy in an alternative format due to a disability, please contact us at info@gripventure.com.

Notice to Individuals in the EEA, the UK, and Switzerland

This section supplements the rest of this Privacy Policy and applies to individuals located in the European Economic Area, the United Kingdom, and Switzerland. It is provided under the EU General Data Protection Regulation, the UK GDPR, and the Swiss Federal Act on Data Protection (together, "European data protection law"). Where this section conflicts with another part of this Privacy Policy, this section controls for the individuals it covers.

Controller

grIP Venture Collective LLC is the controller of the personal data described in this Privacy Policy. You can contact us at info@gripventure.com or at the address in Contact Information. We have not appointed a data protection officer, because we are not required to do so.

Legal Bases for Processing

We process personal data only where we have a legal basis to do so. The legal bases we rely on are:

• Performance of a contract. Where we process your personal data to scope, match, and deliver an engagement you have requested, to respond to your inquiry, or to take steps at your request before entering into a contract.
• Legitimate interests. Where we process your personal data to operate, secure, and improve the Services; to communicate with founders and operators about opportunities relevant to them; to maintain and develop our professional network; to prevent fraud and misuse; and to establish, exercise, or defend legal claims. We have assessed that these interests are not overridden by your interests or fundamental rights and freedoms.
• Consent. Where we send you marketing communications that require consent, use non-essential cookies or analytics technologies that require consent, or record a session. You may withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
• Compliance with a legal obligation. Where we must process your personal data to comply with our legal and regulatory obligations.

Your European Privacy Rights

Subject to the conditions and exceptions in European data protection law, you have the right to:

• Access the personal data we hold about you and receive information about how we process it.
• Request that we rectify inaccurate or incomplete personal data.
• Request that we erase your personal data.
• Request that we restrict our processing of your personal data.
• Receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and have it transmitted to another controller, where the processing is based on consent or contract and is carried out by automated means (data portability).
• Object to our processing of your personal data where we rely on legitimate interests, including profiling, and to object at any time to processing for direct marketing purposes.
• Withdraw your consent at any time where we rely on consent.
• Not be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. We do not make decisions of this kind.

To exercise any of these rights, email info@gripventure.com. We will respond within one month of receiving your request, and we may extend that period by two further months where necessary, taking into account the complexity and number of requests, in which case we will tell you within one month of receiving your request. You also have the right to lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office if you are in the United Kingdom, or with the Federal Data Protection and Information Commissioner if you are in Switzerland. We would appreciate the chance to address your concerns before you approach a supervisory authority, so please consider contacting us first.

International Transfers

We are established in the United States, and the personal data we collect is processed and stored in the United States and in other countries where our service providers operate. These countries may not provide the same level of data protection as your home country. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on an appropriate transfer mechanism, which is generally the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where the transfer is subject to the UK GDPR, and any supplementary measures that the circumstances of the transfer require. You may request a copy of the relevant transfer mechanism by emailing info@gripventure.com.

We are not currently self-certified to the EU-U.S. Data Privacy Framework, the UK Extension to that framework, or the Swiss-U.S. Data Privacy Framework, and we do not claim the benefits of those frameworks.

Providing Your Personal Data

Where we need to collect personal data by law or under a contract with you, and you do not provide it, we may be unable to provide the Services or to proceed with an engagement. We will tell you at the time if that is the case.

How We Protect Your Personal Data

We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us through these channels. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

How We Retain Your Personal Data

We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or as otherwise legally permitted or required, including maintaining the Services, operating our business, complying with our legal obligations, resolving disputes, and providing for safety, security, and fraud prevention. In deciding how long to retain personal data, we consider our legal and business obligations, the potential risks of harm, and the nature of the information. Our current retention expectations are set out in the chart in Notice to California Residents, and we apply those periods to all users, not only California residents. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

Changes to Our Privacy Policy

We may update this policy from time to time, and we will provide notice of any such changes as required by law. The date this policy was last updated is identified at the top of the page. We will notify you of changes by updating the "Last Updated" date and posting the updated policy on the Services, and, where the change is material, by additional means such as email. You should check the Services periodically to see the current policy and any changes we have made to it.

Contact Information

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us at:

grIP Venture Collective LLC

Attn: Privacy

199 East Montgomery Ave 2nd floor, Rockville, MD, 20850, USA

Email: info@gripventure.com

Website: www.gripventure.com