Privacy Policy
Effective Date: May 2 2025

Introduction

Max Tenet, LLC (Doing Business As 'Hey Becky') ("Company" or "We") respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit the website HeyBecky.org (our "Website") or use our agents (our "Services") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to the information we collect:

• On this Website.

• In audio, email, text, and other electronic messages between you and this Website.

• Through automated data collection technologies, including cookies and web beacons.

• From third parties, such as our business partners or service providers.
   

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you disagree with our policies and practices, your choice is not to use our Website. This policy may change from time to time, so please check the policy periodically for updates.

Compliance with Privacy Laws

We comply with all applicable privacy laws, including but not limited to:

• Delaware Online Privacy and Protection Act (DOPPA)

• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), where applicable.

• General Data Protection Regulation (GDPR) for visitors from the European Union.
   

Information We Collect and How We Collect It

We collect several types of information from and about users of our Website, including information:

• By which you may be personally identified, such as name, postal address, email address, telephone number, or any other identifier by which you may be contacted online or offline ("personal information");

• That is about you but individually does not identify you and/or

• About your internet connection, the equipment you use to access our Website, and usage details.
   

We collect this information:

• Directly from you when you provide it to us.

• Automatically as you navigate through the site, information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.

• From third parties, such as our business partners.
   

Information You Provide to Us

The information we collect on or through our Website may include:

• Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, posting material, or requesting further services. We also ask you for information when you participate in conversational sessions on our Website.

• Records and copies of your correspondence (including email addresses) if you contact us.

• Information you provide is to be published or displayed in public areas of the Website or transmitted to other users or third parties. Your contributions are posted on and transmitted to others at your own risk.
   

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Website, other communication data and the resources that you access and use on the Website.

• Information about your computer and internet connection, including your IP address, operating system, and browser type.
   

The information we collect automatically may include personal information, or we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and deliver a better and more personalized service by enabling us to:

• Estimate our audience size and usage patterns.

• Store information about your preferences, allowing us to customize our Website according to your individual interests.

• Speed up your searches.

• Recognize you when you return to our Website.
   

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies): Small files placed on your computer's hard drive.

• Web Beacons: Small electronic files that track user activity.

 
Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Website. This section provides detailed information on the types of cookies we use, how you can manage or disable them, the duration of cookie storage, and the purposes of third-party cookies.

Types of cookies we use 
We use the following categories of cookies on our Website:

1. Essential Cookies: These cookies are necessary for the functioning of our Website and cannot be disabled in our systems. They enable core features such as security, network management, and accessibility. Examples: Session cookies to maintain user authentication.

2. Analytical/Performance Cookies: These cookies help us understand how visitors interact with our Website by collecting and reporting information anonymously. Examples: Google Analytics cookies to track website performance and usage patterns.

3. Functional Cookies: These cookies allow us to remember your preferences and choices, such as language settings and display preferences, to provide a more personalized experience. Examples: Remembering login details and region settings.

4. Advertising/Marketing Cookies: These cookies deliver more relevant advertisements to your interests. They may also be used to track the effectiveness of advertising campaigns. Examples: Third-party advertising networks such as Google Ads or Facebook Pixel.

5. Third-Party Cookies: Some content or features on our Website may be provided by third parties who use their cookies. These cookies are governed by the privacy policies of the respective third parties.
    

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Website and its contents to you.

• To provide you with information, products, or services that you request from us.

• To fulfill any other purpose for which you provide it.

• To notify you about changes to our Website or any products or services we offer or provide through it.

• To allow you to participate in interactive features on our Website.

• For any other purpose disclosed when you provide the information.

• With your consent.
   

Legal Bases for Data Processing 

Under applicable data protection laws such as the General Data Protection Regulation (GDPR), we must identify the legal bases that justify our processing of your personal information. These include:

• Contractual Necessity: We process your personal information where it is necessary to fulfill a contract with you or to take steps at your request before entering into a contract. This includes providing the requested products or services, managing and processing payments and transactions, and delivering customer support related to your use of our Website.

• Legal Obligation: We may process your data where it is necessary to comply with a legal or regulatory obligation to which we are subject. This includes compliance with tax, employment, and accounting regulations, responding to lawful data requests from regulatory authorities, and maintaining records for auditing and compliance purposes.

• Legitimate Interests: We process personal data where it is necessary for our legitimate interests, provided that your fundamental rights and freedoms do not override such interests. Our legitimate interests include improving and optimizing the performance of our Website and services, ensuring the security of our network, systems, and users, conducting business analytics to improve our operations, and preventing fraudulent activities and unauthorized access. You have the right to object to processing based on our legitimate interests. If you wish to do so, please contact us at becky@heybecky.org.

• Consent: In cases where we rely on your consent to process your personal information, we will obtain your explicit consent before processing such data. You may withdraw your consent at any time. We rely on consent for activities such as sending marketing communications, such as newsletters and promotional offers, placing and processing cookies that track user behavior for analytics or advertising purposes, and collecting specific categories of sensitive personal information, where applicable.
   

You can withdraw your consent anytime by adjusting your cookie preferences, using the opt-out links provided in marketing communications, or by contacting us at becky@heybecky.org.
Please note that withdrawing consent may impact your experience and access to certain website features.
 
 
Your Rights

We are committed to ensuring that you can exercise your data protection rights under applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA). 
GDPR Rights
If you are located in the European Economic Area (EEA), you have specific rights under the GDPR, including the right to:

• Access Your Data: You have the right to request a copy of the personal information we hold about you.

• Rectification of Inaccurate Data: You can request the correction of any inaccurate or incomplete personal information.

• Erasure (Right to Be Forgotten): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected or processed.

• Restrict Processing: You may request a restriction on processing your data under certain circumstances, such as when you contest its accuracy or object to processing.

• Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.

• Objection to Processing: You have the right to object to processing your personal information for direct marketing purposes or based on legitimate interests.

• Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.

• Lodge a Complaint: You have the right to lodge a complaint with a data protection authority if you believe your rights have been violated.
   

To exercise these rights under GDPR, please contact us at becky@heybecky.org.

CCPA/CPRA Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You have the right to request details about the personal information we collect, including categories of data collected, sources, purposes of collection, and categories of third parties with whom data is shared.

• Right to Delete: You can request deletion of your personal information, subject to legal exceptions.

• Right to Correct: You may request correction of inaccurate or incomplete personal information we hold.

• Right to Opt-Out of Sale or Sharing of Personal Information: You have the right to opt out of the sale or share your personal data with third parties for targeted advertising purposes.

• Right to Non-Discrimination: Exercising your privacy rights will not result in discriminatory treatment, such as denial of services or different pricing.

• Right to Limit Use of Sensitive Personal Information: You can request restrictions on how we use your sensitive personal data for specific purposes.

Under California’s "Shine the Light" law, California residents may request details about personal information shared with third parties for direct marketing purposes in the preceding calendar year. If applicable, you can make such a request once a year by contacting us at becky@heybecky.org.
 
DATA TRANSFERS AND SAFEGUARDS

Your personal information may be transferred to, processed, and stored in countries outside of your place of residence, including the United States and India. These transfers are necessary for us to provide our services, and we take appropriate measures to ensure that your information is protected in accordance with applicable data protection laws.
We operate globally and may transfer personal data to our service providers and affiliates in the United States and India for hosting and data storage services, customer support and service operations, analytics and reporting services, and marketing and communication purposes.
By using our Website, you acknowledge that your personal data may be transferred to and processed in jurisdictions with data protection laws that differ from those in your country of residence.
Specific Safeguards Implemented
We implement appropriate safeguards to protect your personal data during international transfers. These safeguards include:

• Data Encryption: We use industry-standard encryption protocols to protect data in transit and at rest.

• Access Controls: Only authorized personnel with a legitimate business need can access your data.

• Data Minimization Practices: We collect and transfer only the minimum necessary data required for the intended purpose.

• Periodic Assessments: We regularly review data transfer practices to ensure compliance with legal obligations.
   

Standard Contractual Clauses or Other Mechanisms

To comply with GDPR requirements for cross-border data transfers, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs): We implement SCCs approved by the European Commission to ensure that your personal data receives an adequate level of protection equivalent to that within the EEA. These clauses impose contractual obligations on recipients to ensure the security and confidentiality of their personal data.

• Adequacy Decisions: When applicable, we transfer data to jurisdictions that have been deemed by the European Commission to provide an adequate level of data protection.

• Binding Corporate Rules (BCRs): For internal transfers within our organization, we have adopted BCRs that outline our commitment to protecting personal data in compliance with GDPR standards.

• Privacy Shield Framework: Although the EU-U.S. Privacy Shield is no longer considered a valid transfer mechanism, we continue to adhere to its principles as an added layer of protection.
   

Automated Decision-Making and Profiling

Automated decision-making refers to decisions made solely by automated means without significant human involvement. We may use automated processes in the following scenarios:

• Personalized Recommendations: Our systems analyze browsing behavior, preferences, and interaction history to provide personalized content, such as recommended products or services.

• Fraud Detection and Prevention: Automated systems assess behavioral patterns and transaction history to detect potential fraudulent activities and unauthorized access.

• User Authentication and Verification: Automated decision-making may be used to verify your identity based on submitted credentials and past interactions.

• Marketing and Targeted Advertising: We use profiling techniques to analyze your interests and deliver targeted advertisements based on your preferences and engagement patterns.

• Service Eligibility Assessments: In some cases, our automated systems determine your eligibility for certain services, offers, or discounts based on the information you provide.

These automated decisions are made using algorithms and machine learning models that analyze available data to improve accuracy and efficiency.

User Rights Regarding Automated Decisions

If your personal information is subject to automated decision-making or profiling that produces legal effects or significantly affects you, you have the following rights under GDPR and other applicable privacy laws:

• Right to Obtain Meaningful Information: You have the right to request an explanation of the logic involved in automated decision-making and the significance of the decision.

• Right to Human Intervention: You can request that a human reviews any automated decision that significantly affects you, such as eligibility for services or benefits.

• Right to Contest Decisions: If you believe an automated decision is incorrect or unfair, you can object and request a manual reassessment of your case.

• Right to Opt-Out of Profiling for Marketing Purposes: You can opt out of automated profiling used for targeted advertising and marketing purposes at any time.

• Right to Restriction of Processing: You may request a restriction on the processing of your data used in automated decision-making until its accuracy or legality is verified.

 
Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. 
We determine the appropriate retention period for personal information based on the type of personal data collected, the purposes for which the data is processed, the legal and regulatory requirements that apply, and the potential need to resolve disputes and enforce our policies.
Below are the typical retention periods for different categories of personal data:

• Account Information: Retained for as long as your account remains active and up to 3 years after account closure for audit and compliance purposes.

• Transaction and Payment Data: Retained for up to 7 years to comply with tax and financial regulations.

• Customer Support and Communications: Retained up to 2 years after the last interaction to provide support history and improve services.

• Marketing and Promotional Data: Retained until you opt out or withdraw consent, after which it will be deleted within 30 days.

• Website Usage Data (Cookies and Analytics): Retained for up to 12 months, after which it is deleted or anonymized for analytical purposes.

• Legal and Compliance Data: Retained as required by applicable laws, typically up to 7 years or longer if required for legal purposes.

When personal data is no longer required for the purposes for which it was collected, we securely delete or anonymize it to prevent unauthorized access or use.
 
International Users

If you are accessing our Website from outside the United States, please note that your information may be transferred to, stored, and processed in the United States and India. By using our Website, you consent to transferring your information to the United States and India, which may have data protection laws different from those in your country.

Children Under the Age of 18

Our Website is not intended for children under 18 years of age. No one under the age of 18 may provide any personal information to or on the Website. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at becky@heybecky.org.

Changes to Our Privacy Policy

We post any changes we make to our privacy policy on this page with a notice that the privacy policy has been updated on the Website home page. If we make material changes to how we treat our users' personal information, we will notify you by email to the primary email address specified in your account. The date the privacy policy was last revised is at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you and for periodically visiting our Website and this privacy policy to check for any changes.

Accessibility

We are committed to making this policy accessible to all users, including those with disabilities. If you require this policy in an alternative format, please contact us at becky@heybecky.org.
Contact Information
To ask questions about this privacy policy or request to delete your information permanently, contact us at becky@heybecky.org.