Privacy Policy

1. Who we are

This website, contenthook.site, is operated by BlueGrey Ventures, doing business as ContentHook.site (“Content Hook”, “we”, “us” or “our”). We provide primary research and outreach content services to businesses.

For the personal information described in this policy, we are the data controller, meaning we decide how and why it is used. You can reach us using the details in Contact us.

2. What this policy covers

This policy explains how we handle personal information when you:

• visit or browse this website;
• contact us by email, through our contact form, or on a call;
• take part in a research study we run (see Research participants); or
• are a business contact we reach out to about our services.

When we carry out research or other work for a client, we may also act on that client’s instructions under a separate written agreement. That agreement, together with any notice given to you at the time, governs that processing.

3. Information we collect

Information you give us

When you contact us, we receive the information you choose to share, such as your name, work email address, company, the type of customers you sell to, and anything you write in your message. Our contact form doesn’t send data to our servers. It opens your own email app with your details filled in, and we receive them only if you send that email.

If we speak on a call or work together, we also keep the business information you provide in that context, such as meeting notes and project correspondence.

Information collected automatically

Like most websites, our hosting provider automatically records basic technical information when you visit, such as your IP address, browser type, device type, the pages you request and the date and time. These server logs are used to deliver the site, keep it secure and diagnose problems.

Information from third parties

Our website loads fonts from Google Fonts. To deliver them, your browser connects to Google’s servers, which receive your IP address and basic browser information. Google’s use of that information is governed by Google’s Privacy Policy.

We may also collect business contact information, such as a name, job title, company and work email, from public sources and professional networks when we identify organisations that might benefit from our services.

4. Cookies and similar technologies

This website does not set cookies, and it does not use analytics, advertising or cross-site tracking tools.

We use your browser’s session storage to make page-to-page transitions run smoothly. It holds a single technical flag, contains no personal information, is never sent to us, and is cleared when you close the tab.

If we introduce analytics or other cookies in future, we will update this policy first and, where the law requires it, ask for your consent.

5. How we use information

We use personal information to:

• respond to your enquiries and arrange calls;
• prepare proposals and deliver the services you engage us for;
• design, run and analyse research studies;
• contact businesses about services that may be relevant to them, with an easy way to opt out;
• operate, secure and improve this website; and
• comply with our legal obligations and protect our rights.

We do not sell personal information, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

6. Legal bases

Where data protection laws such as the GDPR or UK GDPR apply, we rely on the following legal bases:

• Legitimate interests: to run our business, respond to enquiries, reach out to relevant business contacts and keep our site secure, balanced against your rights.
• Contract: to take steps at your request before entering a contract, and to perform it.
• Consent: where we ask for it, for example when you agree to take part in a study. You can withdraw consent at any time.
• Legal obligation: where we must keep or disclose information by law.

Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we process personal data either with your consent or for legitimate uses permitted by the Act, such as when you voluntarily provide information for a specific purpose, like an enquiry.

7. How we share information

We share personal information only as needed, with:

• Service providers who help us run our business, such as website hosting, email, scheduling, survey and respondent-recruitment platforms. They may use the information only to provide their services to us.
• Professional advisers such as lawyers and accountants, under duties of confidentiality.
• Authorities when required by law, or to protect our rights, users or the public.
• A successor business if we are involved in a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information or share it for cross-context behavioural advertising.

8. Research participants

If you take part in one of our studies, you’ll receive a participant notice explaining the study, how your answers will be used and your choices before you begin. In general:

• Participation is voluntary, and you can skip questions or stop at any time.
• We report findings in aggregate. Where we quote a response, we attribute it by role and sector only (for example, “CISO, regional bank”).
• We do not share your name or contact details with our clients unless you expressly agree.
• We use screening information only to confirm that you match the study criteria.

9. How long we keep it

We keep personal information only for as long as we need it for the purposes above. That includes keeping it as long as the law requires, and as long as we need it to resolve disputes. As a guide:

• enquiry emails and related notes are kept for up to 12 months after our last contact, unless we start working together;
• client project records are kept for the duration of the engagement and up to 7 years afterwards for legal and accounting purposes;
• identifiable research responses are kept for up to 6 months after a study closes, after which we keep only anonymised or aggregated results.

10. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls and reputable service providers. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

11. International transfers

We and our service providers may process information in countries other than the one where you live, which may have different data protection laws. Where required, we use appropriate safeguards for these transfers, such as standard contractual clauses approved by the relevant authorities.

12. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• delete your information;
• object to, or ask us to restrict, certain processing, including outreach;
• receive your information in a portable format; and
• withdraw consent at any time, where we rely on consent.

Residents of India. Under the DPDP Act, we act as a Data Fiduciary for the personal data described in this policy. You have the right to obtain a summary of your personal data and how we process it; to correct, complete, update or erase it; to withdraw consent at any time; to nominate another person to exercise your rights in the event of your death or incapacity; and to have your grievances addressed. If you aren’t satisfied with how we resolve a grievance, you may complain to the Data Protection Board of India.

California residents have the right to know what personal information we collect, use and disclose; to request deletion and correction; and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights.

To make a request, email us at hello@contenthook.site. We may need to verify your identity before responding, and we will reply within the time required by applicable law. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

To stop receiving outreach from us, simply reply to any message and ask us to stop.

13. Children

Our website and services are intended for businesses and professionals. They are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “Last updated” date above. If the changes are significant, we’ll take reasonable steps to let you know.

15. Contact us