THEGEEKLINK PRIVACY POLICY

Effective Date: October 10, 2026

TheGeekLink is a brand, service line, and intellectual property of Chic Geek Enterprises, LLC ("CGE," "TheGeekLink," "we," "us," or "our"), located at 8619 Southfield Fwy., Detroit, Michigan 48228.

This Privacy Policy explains how we collect, use, disclose, process, retain, and protect personal information when you visit or interact with TheGeekLink websites, forms, client portals, CRM environments, project or delivery workspaces, consulting services, managed-infrastructure services, communications tools, assessments, AI-assisted services, digital products, or other services expressly provided through a TheGeekLink engagement (collectively, the "Services").

This Privacy Policy applies to TheGeekLink Services. Other Chic Geek Enterprises brands, products, programs, or websites may have separate or supplemental terms and privacy notices unless they are expressly incorporated into your TheGeekLink engagement.

By using the Services, you acknowledge the practices described in this Privacy Policy.

---

1. INFORMATION WE COLLECT

Depending on how you interact with TheGeekLink, we may collect the following categories of information.

Information You Provide Directly

This may include:

• name;
• business name;
• job title or role;
• email address;
• telephone number;
• mailing or business address;
• billing information;
• contact-form submissions;
• consultation or discovery information;
• account-registration information;
• support requests;
• project information;
• business-process information;
• system requirements;
• workflow information;
• files, documents, images, recordings, or other materials you provide;
• survey, assessment, or questionnaire responses;
• communications with CGE or TheGeekLink;
• information submitted through CRM, project-management, client-delivery, or other environments;
• information you choose to provide to AI-assisted functionality.

Account and Authentication Information

When you receive access to a CRM, project workspace, learning environment, client portal, or other system, we may process:

• usernames;
• account identifiers;
• permission levels;
• login history;
• security events;
• authentication information;
• workspace assignments;
• team-member access records.

You are responsible for maintaining the confidentiality of your credentials and for activity performed through accounts under your control.

Customer and CRM Data

Customers may upload or process information relating to their own prospects, customers, employees, contractors, vendors, or other contacts through TheGeekLink-provided systems.

This may include:

• names;
• contact information;
• communication history;
• lead or opportunity data;
• appointment information;
• transaction information;
• form submissions;
• pipeline information;
• notes;
• tags;
• workflow data;
• customer-service records;
• project records;
• other business information selected by the customer.

As between CGE and the customer, the customer retains ownership of its underlying business records and customer data.

CGE may process that information as necessary to provide, administer, secure, support, troubleshoot, improve, or fulfill the Services.

Payment Information

Payments may be processed by third-party payment processors.

We may receive information such as:

• transaction amount;
• payment status;
• subscription status;
• billing address;
• last four digits or tokenized payment information;
• processor transaction identifiers.

We generally do not receive or store full payment-card numbers when payment information is entered directly into a third-party payment processor.

Communications Data

If your Services include email, SMS, calling, forms, chat, automation, or related communications capabilities, we may process:

• sender and recipient information;
• communication metadata;
• message content;
• opt-in and opt-out records;
• delivery information;
• timestamps;
• call information;
• communication preferences.

Recorded Sessions

Certain consultations, implementation sessions, workshops, labs, group calls, demonstrations, training sessions, or other interactions may be recorded.

Where a session is recorded, notice may be provided through:

• these Terms;
• the meeting invitation;
• the platform interface;
• verbal notice;
• written notice;
• another reasonable method.

Recordings may be used to:

• provide the requested service;
• document decisions;
• create implementation notes or system documentation;
• provide authorized replays;
• support training or quality assurance;
• create internal records.

We do not grant public-use rights to identifiable participant recordings merely because a session was recorded.

AI Inputs and Outputs

When you use AI-assisted features, assessments, documentation tools, or services, we may process:

• prompts;
• questionnaire responses;
• business descriptions;
• uploaded materials;
• workflow information;
• generated outputs;
• generated summaries;
• recommendations;
• usage metadata.

AI-assisted processing may involve third-party technology providers.

Do not submit information to an AI-enabled feature that you are not authorized to provide.

Device, Website, and Usage Information

We may automatically collect information such as:

• IP address;
• browser type;
• device type;
• operating system;
• referring page;
• pages visited;
• links clicked;
• session information;
• timestamps;
• approximate location derived from IP address;
• cookie identifiers;
• analytics events;
• form activity;
• campaign attribution;
• error or diagnostic information.

We may use cookies, pixels, analytics tools, CRM tracking technologies, and similar technologies for functionality, security, analytics, attribution, performance measurement, and—where implemented—advertising or remarketing.

---

2. HOW WE USE INFORMATION

We may use personal information to:

• provide the Services;
• establish and administer accounts;
• provision CRM or project environments;
• configure workflows and systems;
• fulfill consulting or implementation engagements;
• process payments;
• administer subscriptions;
• provide customer support;
• authenticate users;
• maintain security;
• prevent fraud or misuse;
• communicate about accounts, purchases, services, or projects;
• deliver email, SMS, or other communications requested by customers;
• document systems and business processes;
• create assessments, recommendations, or AI-assisted outputs;
• improve TheGeekLink Services;
• conduct internal analytics;
• understand product usage;
• maintain business records;
• enforce agreements;
• protect CGE, customers, users, and third parties;
• comply with legal obligations;
• establish, exercise, or defend legal claims;
• market relevant CGE or TheGeekLink services where permitted by law.

We may also use aggregated or de-identified information for analytics, benchmarking, research, service improvement, product development, operational planning, and similar legitimate business purposes.

We do not use de-identified information to publicly identify a specific customer without permission.

---

3. CUSTOMER RESPONSIBILITY FOR DATA

Customers control what third-party information they upload, import, collect, store, or process through their assigned environments.

Customers are responsible for:

• having lawful authority to collect and use such information;
• providing required notices;
• obtaining required consent;
• maintaining appropriate privacy policies;
• honoring applicable privacy requests;
• complying with marketing and communication laws;
• configuring their systems appropriately;
• determining whether information is appropriate to process through the Services.

This includes responsibility for compliance with applicable laws governing:

• email marketing;
• SMS and calling;
• privacy;
• data protection;
• cookies;
• direct marketing;
• consumer communications;
• international data transfers;
• industry-specific data.

Where a customer uses a TheGeekLink sub-account or workspace for individuals outside the United States, the customer is responsible for determining and satisfying the customer's own obligations under applicable local laws, including GDPR-related obligations where applicable.

Nothing in this provision eliminates any obligation that applicable law independently imposes on CGE.

---

4. EMAIL, SMS, AND COMMUNICATIONS

Customers who use communications functionality must have appropriate authority and consent to contact recipients.

Customers are responsible for:

• maintaining consent records;
• honoring opt-outs;
• complying with applicable email, telemarketing, SMS, and consumer-protection requirements;
• avoiding spam, deceptive messages, prohibited content, or unlawful communications.

Recipients may generally opt out of marketing email using the unsubscribe mechanism provided in the message.

For SMS programs, users should follow the opt-out mechanism stated in the applicable message or program instructions.

Message and data rates may apply where mobile communications are used.

CGE may suspend communications functionality where activity creates legal, compliance, deliverability, fraud, security, reputational, or third-party platform risk.

---

5. HOW WE DISCLOSE INFORMATION

We may disclose personal information to categories of recipients including:

Service Providers

Providers supporting:

• hosting;
• CRM infrastructure;
• project-management systems;
• payment processing;
• email;
• SMS;
• telephony;
• domain services;
• analytics;
• cloud infrastructure;
• security;
• support;
• AI processing;
• automation;
• integrations;
• accounting;
• professional services.

These providers may process information as necessary to perform services for CGE or our customers.

Contractors and Professional Advisors

We may provide information to authorized:

• employees;
• contractors;
• consultants;
• attorneys;
• accountants;
• insurance providers;
• auditors;
• business advisors;

when reasonably necessary for business or professional purposes.

Legal and Safety Disclosures

We may disclose information when reasonably necessary to:

• comply with law;
• respond to lawful process;
• enforce agreements;
• investigate fraud;
• address security threats;
• protect legal rights;
• protect users or third parties;
• respond to emergencies;
• establish or defend legal claims.

Business Transactions

Information may be transferred as part of a:

• merger;
• acquisition;
• financing;
• restructuring;
• asset sale;
• business transfer;
• bankruptcy;
• similar corporate transaction.

---

6. SALE AND SHARING OF PERSONAL INFORMATION

CGE does not sell personal information for monetary consideration as part of TheGeekLink's ordinary business model.

Certain analytics, advertising, remarketing, or similar technologies can be treated as "sale" or "sharing" under some privacy laws even where no money is exchanged.

Where applicable law gives you a right to opt out of such activity, CGE will honor applicable rights and legally required browser-based preference signals to the extent required by law.

Ordinary disclosures to service providers, processors, contractors, and vendors acting on our behalf are not intended as sales of personal information.

---

7. COOKIES AND SIMILAR TECHNOLOGIES

TheGeekLink websites may use cookies and related technologies for:

• necessary site functionality;
• authentication;
• preferences;
• fraud prevention;
• analytics;
• performance;
• CRM attribution;
• form tracking;
• marketing attribution;
• advertising or remarketing where used.

Your browser may allow you to block or delete cookies.

Some features may not function correctly if required cookies are disabled.

Where required by applicable law, additional cookie or consent controls may be provided.

---

8. AI-ASSISTED PROCESSING

Certain TheGeekLink Services may use artificial intelligence or machine-assisted processing.

AI-generated content may include:

• documentation;
• summaries;
• assessments;
• recommendations;
• workflow suggestions;
• operational materials;
• business-support outputs.

AI-generated outputs may contain errors, omissions, outdated information, or unexpected results.

Customers and users are responsible for reviewing outputs before relying on them.

AI-generated outputs are not a substitute for:

• legal advice;
• tax advice;
• financial advice;
• accounting advice;
• medical advice;
• cybersecurity certification;
• HR/legal compliance advice;
• other licensed professional advice.

CGE may use authorized third-party AI providers to process submitted information.

CGE may also use aggregated or de-identified usage information to improve services, processes, frameworks, and products.

CGE will not publicly disclose identifiable customer confidential information as part of such improvement activity without authorization or another lawful basis.

---

9. DATA RETENTION

We retain information for as long as reasonably necessary to:

• provide the Services;
• maintain accounts;
• fulfill customer engagements;
• satisfy contractual requirements;
• comply with law;
• maintain financial or tax records;
• resolve disputes;
• prevent fraud;
• enforce agreements;
• maintain security;
• preserve legitimate business records;
• support backups and disaster recovery.

Different categories of information may have different retention periods.

Some information may remain in backup systems after deletion from active systems until those backups are overwritten in the ordinary course.

We may retain de-identified information indefinitely where permitted by law.

---

10. ACCOUNT CLOSURE AND DATA EXPORT

Following termination or cancellation of an eligible CRM or workspace service, a customer may request an export of reasonably available customer data within 30 days after the applicable service ends.

Export availability is subject to:

• technical capability;
• the functionality of the applicable third-party platform;
• account standing;
• unpaid balances;
• security requirements;
• legal obligations;
• applicable retention requirements.

CGE is not obligated to maintain active platform access indefinitely after service termination.

After the applicable export period, CGE may delete, deactivate, archive, anonymize, or otherwise dispose of data in accordance with its operational and legal requirements.

Customers should maintain their own copies of important business records.

---

11. SECURITY

CGE uses reasonable administrative, technical, and organizational measures designed to protect information under our control.

No internet transmission, cloud service, software platform, or storage environment can be guaranteed completely secure.

You are responsible for:

• using strong passwords;
• protecting credentials;
• maintaining authorized-user lists;
• removing former users;
• reviewing permissions;
• securing devices;
• promptly reporting suspected unauthorized access.

CGE may suspend access where necessary to investigate or contain a suspected security event.

---

12. THIRD-PARTY SERVICES

TheGeekLink depends on third-party platforms and infrastructure.

Those providers may maintain their own privacy policies and terms.

CGE is not responsible for the independent privacy practices of a third party operating outside CGE's control.

Your use of certain features may therefore also be subject to the privacy policies and terms of the applicable provider.

---

13. PRIVACY RIGHTS

Depending on where you reside and which laws apply, you may have rights concerning your personal information.

These may include the right to request:

• access;
• correction;
• deletion;
• information about categories collected;
• information about disclosure;
• portability;
• limitation of certain processing;
• opt-out of qualifying sale, sharing, or targeted advertising;
• non-discrimination for exercising applicable privacy rights.

These rights are not absolute and may be subject to legal exceptions.

We may need to verify your identity before fulfilling certain requests.

Authorized agents may be required to provide proof of authority.

CGE will not discriminate against an individual for exercising a privacy right protected by applicable law.

---

14. UNITED STATES AND AMERICAS-FOCUSED SERVICES

TheGeekLink Services are operated from the United States and are primarily designed for businesses operating in the Americas.

Information may be stored or processed in the United States or other jurisdictions where CGE's authorized service providers operate.

If you access the Services from another jurisdiction, you are responsible for determining whether your use is lawful and appropriate.

Customers that collect or process information belonging to individuals in jurisdictions with additional privacy requirements are responsible for their own compliance obligations, including required notices, legal bases, agreements, and cross-border transfer requirements.

CGE will comply with privacy and data-protection obligations that are independently applicable to CGE.

---

15. CHILDREN

TheGeekLink Services are intended for adults and businesses.

You must be at least 18 years old to create an account, make a purchase, or enter into an engagement unless CGE expressly agrees otherwise in writing.

The Services are not directed to children under 13, and CGE does not knowingly collect personal information directly from children under 13 through public TheGeekLink Services.

If you believe a child has provided personal information improperly, contact us.

---

16. BUSINESS CUSTOMER DATA

Where CGE processes personal information on behalf of a business customer through a CRM, project environment, or related service, the business customer may be responsible for responding to requests made by the individuals whose data it controls.

If we receive a privacy request relating primarily to customer-controlled data, we may refer the requester to the applicable customer or coordinate with the customer as appropriate.

---

17. TESTIMONIALS, CASE STUDIES, AND PUBLIC IDENTIFICATION

CGE does not obtain a general right to publicly use a customer's name, logo, testimonial, identifiable results, or case study merely because the customer purchases a Service.

Identifiable testimonials, case studies, or similar promotional uses require separate permission or another documented authorization.

CGE may use de-identified or aggregated information that does not reasonably identify the customer.

---

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy as our Services, technology, providers, or legal obligations change.

The current version will display an updated effective date.

Where required by law, we will provide additional notice of material changes.

Continued use of the Services after an updated policy becomes effective is subject to the updated policy to the extent permitted by law.

---

19. CONTACT AND PRIVACY REQUESTS

Privacy requests may be submitted through the official contact form available on TheGeekLink.com.

Privacy and legal correspondence may also be mailed to:

Chic Geek Enterprises, LLC
Attn: Privacy / Legal — TheGeekLink
8610 Southfield Fwy.
Detroit, MI 48228
United States

General company correspondence may be directed to:

Chic Geek Enterprises, LLC
8619 Southfield Fwy.
Detroit, MI 48228
United States

Please include sufficient information for us to understand and process your request.

We may request additional information to verify identity, authority, account ownership, or the scope of the request.

TheGeekLink is a brand and service line of Chic Geek Enterprises, LLC.