Privacy Policy
This Privacy Policy describes how Alexander Interactive, Inc. d/b/a Cake & Arrow (hereinafter referred to as “Cake & Arrow,” “we,” “us,” or “our”) collects, uses, and shares personal information of visitors to our website (the “Website”) and subscribers to our services.
1. Introduction
Cake & Arrow, a user experience design agency based in New York City, is committed to protecting the privacy of your personal information. This Privacy Policy applies to all individuals who visit our Website, potential clients, and subscribers to our services. We act as the data controller for the personal data we collect and process. For any questions regarding this Privacy Policy or our data practices, please contact us at:
Cake & Arrow
121 East 24th Street
3rd Floor, New York, NY 10010
info@cakeandarrow.com
212-598-2800
This Privacy Policy is effective as of the “Last Updated” date stated above and may be updated periodically. We will notify you of any material changes by posting the new Privacy Policy on our Website.
2. Types of Personal Information We Collect
We collect different types of personal information depending on your interaction with our Website and services. This information includes:
- Contact Information: When you fill out contact forms or subscribe to our services, we may collect your name, email address, phone number, and company affiliation.
- Technical Information: We automatically collect certain information about your device and browsing activity when you visit our Website, such as your IP address, browser type, operating system, device identifiers, and browsing behavior.
- Usage Data: We collect information about how you use our Website, including the pages you visit, the time spent on those pages, and referring URLs.
- HubSpot Information: If you subscribe to our services, we collect your email address and potentially your name and company information through our HubSpot CRM. We may also track email opens and clicks to analyze the effectiveness of our marketing campaigns.
3. Methods of Collecting Personal Information
We use various methods to collect your personal information, including:
- Direct Collection: We collect information directly from you when you fill out forms on our Website, subscribe to our services, or communicate with us.
- Cookies: We use cookies, which are small text files stored on your device, to collect information about your browsing activity and preferences. We may use session cookies (temporary cookies that expire when you close your browser) and persistent cookies (cookies that remain on your device for a longer period) for purposes such as website analytics, remembering user preferences, and enabling website functionality.
- Web Beacons: We may use web beacons (also known as pixel tags or clear GIFs) in our emails and on our Website to track user activity and the effectiveness of our communications.
- Server Logs: Our web servers automatically record certain information about your visit, including your IP address and access times.
- HubSpot: We collect information through our integration with HubSpot, our CRM platform, to manage subscriber information and marketing communications. Please refer to HubSpot’s privacy policy for more information on their data practices.
4. Purposes of Processing Personal Information
We use the collected personal information for the following purposes:
- Marketing Communications: To send you newsletters, updates, and promotional materials about our services, but only if you have explicitly opted in to receive such communications. We may personalize marketing content based on your interests and engagement.
- Responding to Inquiries: To respond to your questions, address your inquiries, and follow up on project requests submitted through our Website.
- Website Improvement: To analyze website usage data and improve the functionality, content, and user experience of our Website.
- Client Relationship Management: To manage our relationships with potential and existing clients, facilitate communication, and ensure smooth service delivery.
- Legal and Administrative Purposes: To comply with applicable legal obligations, resolve disputes, enforce our agreements, and in the event of a business transfer such as a merger or acquisition.
5. Legal Basis for Processing Personal Information
Our legal basis for processing your personal information depends on the specific context in which we collect it. Generally, we rely on the following legal bases:
- Consent: We rely on your explicit consent to send you marketing communications. You have the right to withdraw your consent at any time.
- Performance of a Contract: Processing your information may be necessary for the performance of a contract we have with you or to take steps at your request prior to entering into a contract.
- Legitimate Interests: We may process your information based on our legitimate interests, such as improving our Website, conducting direct marketing where permitted by law, and preventing fraud.
- Compliance with Legal Obligations: We may process your information when necessary to comply with legal obligations to which we are subject.
6. Sharing Personal Information with Third Parties
We may share your personal information with certain third parties for the purposes described in this Privacy Policy:
- Hosting Providers: We may share your data with our website hosting provider.
- Analytics Providers: We use analytics services, such as Google Analytics, to analyze website traffic and user behavior.
- HubSpot: We share subscriber data with HubSpot for managing email subscriptions and marketing campaigns.
- Subcontractors and Partners: We may share information with subcontractors or partner firms who assist us in providing our services.
- Legal Authorities: We may disclose your personal information to legal authorities if required by law or legal process.
We do not sell your personal information to third parties for their marketing purposes.
7. International Data Transfers
Given our international client base, your personal information may be transferred to and processed in countries outside of your country of residence. We will take appropriate safeguards to ensure that your personal information is adequately protected in accordance with applicable data protection regulations. This may include using standard contractual clauses approved by relevant authorities.
8. Data Security Measures
We have implemented reasonable security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:
- Using HTTPS encryption to secure data transmitted between your browser and our Website.
- Implementing access controls to restrict access to personal information to authorized personnel only.
- Regularly updating our software and systems with security patches.
- Employing data minimization principles by collecting only the necessary data.
While we strive to protect your personal information, please understand that no method of transmission over the internet or electronic storage is completely secure.
9. Data Retention
We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will securely delete or anonymize your personal information when it is no longer needed.
10. Your Data Privacy Rights
You have certain rights regarding your personal information under applicable data protection laws:
- Right to Access: You have the right to request access to the personal information we hold about you.
- Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information.
- Right to Deletion: You have the right to request the deletion of your personal information under certain circumstances.
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information in certain situations.
- Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
- Right to Object: You have the right to object to the processing of your personal information for certain purposes, such as direct marketing.
- Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
- For California Residents: If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to opt-out of the sale or sharing of your personal information and the right to limit the use of your sensitive personal information.
To exercise any of these rights, please contact us using the contact information provided in Section 1. We will respond to your request in accordance with applicable data protection laws.
11. Cookies and Tracking Technologies
Our Website uses cookies and other tracking technologies to enhance your browsing experience and collect information about your usage. We use the following types of cookies:
- Strictly Necessary Cookies: These cookies are essential for the operation of our Website and enable you to use its features.
- Performance Cookies: These cookies collect anonymous information about how visitors use our Website, such as which pages are visited most often. This helps us improve the performance of our Website.
- Functional Cookies: These cookies allow our Website to remember choices you make (such as your language preference) and provide enhanced features.
- Targeting/Advertising Cookies: These cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for individual users.
You can manage your cookie preferences through our cookie consent banner or by adjusting the settings in your browser. Please note that blocking certain types of cookies may impact your experience on our Website.
12. Privacy Rights of Children
Our Website and services are not directed towards children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe that we have inadvertently collected personal information from a child under 13, please contact us immediately, and we will take steps to delete the information.
13. Links to Other Websites
Our Website may contain links to other websites that are not operated by us. This Privacy Policy applies only to our Website. We are not responsible for the privacy practices of these third-party websites. We recommend that you review the privacy policies of any website you visit.
14. Contact Information and Dispute Resolution
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:
Cake & Arrow
121 East 24th Street, 3rd Floor, New York, NY 10010
info@cakeandarrow.com
212-598-2800
We are committed to resolving any concerns you may have in a timely and effective manner. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe that we have not complied with applicable data protection laws.
15. Administrative Information
This Privacy Policy was last updated on April 2025. We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically for any updates.
