Last updated: April 2026. This page supplements the Privacy Policy and applies if you are a resident of a U.S. state with a comprehensive privacy law.
The short version
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not run third-party advertising cookies. We collect only what is described in the Privacy Policy and use it only for the purposes stated there.
Categories of personal information collected
- Identifiers: name, email, phone, IP address.
- Commercial information: business name, website URL, industry, stage.
- Internet activity: page views, scroll depth, CTA clicks, diagnostic answers.
- Geolocation (approximate): derived from IP for analytics.
- Inferences: based on diagnostic answers, used to deliver your personalized result.
Sources, purposes & recipients
We collect this information directly from you (forms, diagnostics) and from your interaction with the site (analytics). We use it to deliver the result or follow-up you asked for, respond to inquiries, and improve content. We share it only with the vendors listed at /legal/subprocessors.
Retention
Lead-form and email-subscriber records: kept while you remain a contact; deleted within 30 days of unsubscribe or deletion request. Analytics data: 14 months (Google Analytics 4 default), then auto-deleted.
Sale and sharing
We do not sell personal information as defined under the CCPA/CPRA, Colorado, Virginia, Connecticut, Utah, or Texas privacy laws. We do not share personal information for cross-context behavioral advertising as defined under the CPRA. We have not done so in the preceding 12 months.
Your rights
Depending on the state where you reside, you have some or all of these rights:
- Right to know / access — what we have collected, used, disclosed, and to whom.
- Right to delete — request deletion of personal information we hold about you.
- Right to correct — fix inaccurate personal information.
- Right to portability — receive your data in a portable, machine-readable format.
- Right to opt out of sale, sharing, or targeted advertising — already the default state for our service.
- Right to limit use of sensitive personal information — we do not collect sensitive personal information for purposes that would require this control.
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
- Right to appeal (CO, VA, CT, TX) — if we deny a request, you may appeal.
How to exercise your rights
Email privacy@goodlookingco.com with the request type and the email or phone number you used. We respond within 45 days (with one 45-day extension if needed). We may need to verify your identity by confirming details that match what we have on file.
Authorized agents. You may designate an authorized agent to make a request on your behalf. We will require written authorization signed by you and may verify your identity directly.
Global Privacy Control (GPC)
We honor the Global Privacy Control browser signal. When we detect GPC, we treat it as an opt-out of sale, sharing, and analytics for that browser session.
Notice of financial incentives
We do not offer financial incentives in exchange for personal information.
California “Shine the Light”
California Civil Code § 1798.83 permits California residents to request information about disclosure of personal information to third parties for the third parties’ direct marketing purposes. We do not disclose personal information for this purpose.
Contact
Questions or appeals: privacy@goodlookingco.com.