Privacy Policy

We collect only what we need to respond to you and to understand how the site is used. We will not sell your information. This policy explains what we collect on ridewithsidecar.com, why, and what you can do about it.

1. Who we are

Sidecar, LLC, a Colorado limited liability company ("Sidecar," "we," "us") operates this site and decides how the information collected here is used. You can reach us about privacy at privacy@ridewithsidecar.com or by mail at 2680 18th St, Mailbox 69, Denver, CO 80211.

This policy covers the website only. If you become a client, the agreement we sign together governs how we handle the information you share during the work.

2. Information we collect

What you give us. When you use the Start a Conversation form, we collect:

Information	Required
Name	Yes
Email address	Yes
Company	Yes
What you would like to talk about	Yes
Phone number	No
Company website	No
Your role	No
How you heard about Sidecar	No

If you email us or reply to us, we also keep that correspondence.

What is collected automatically. Like most websites, our servers record basic technical information when you visit. This includes your IP address, browser type, the pages you request, and the time of the request. We use it to run and secure the site.

We also use Google Analytics, loaded through Google Tag Manager, to see how visitors use the site, subject to your choice (see section 5). It uses cookies to collect information such as the pages you view, the links you click, whether you send the contact form (not what you write in it), how long you stay, the site that referred you, your device and browser type, and your approximate location (city or region). We look at this in aggregate to improve the site, not to identify you or advertise to you.

We do not ask for sensitive information, such as health, financial account, or government ID details. Please do not send it through the form.

3. How we use it

We use the information you provide to understand your inquiry and respond to you. We also use it to:

• Follow up on a conversation you started with us
• Keep a record of our communication
• Understand how visitors use the site and improve it
• Keep the site secure and block spam or abuse
• Meet legal obligations

We will not use it for automated decision-making, and we will not add you to a mailing list unless you ask us to.

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal basis for responding to you is our legitimate interest in answering inquiries you send us. We also rely on steps you ask us to take before entering a contract, and on legal obligations where they apply. We use Google Analytics only if you agree to it, and you can withdraw that agreement at any time with Cookie settings.

4. Who we share it with

We will not sell your information or share it for advertising. We share it only with:

• Service providers who run the site and our business for us, such as hosting and content delivery, email delivery, and email and office software. They may use it only to provide their service to Sidecar.
• Google, which provides Google Analytics and Google Tag Manager. When Google Analytics is on, Google receives your IP address and the usage information described in section 2. See how Google uses information from sites that use its services.
• Professional advisers, such as lawyers and accountants, when needed and under a duty of confidentiality.
• Authorities, when the law requires it or to protect the rights and safety of Sidecar or others.
• A successor business, if Sidecar is involved in a merger, acquisition, or sale of assets. We would require the successor to handle your information consistently with this policy, or tell you before anything changes.

5. Cookies

The site uses the cookies it needs to work, plus Google Analytics cookies that show us how it is used:

Cookie	Purpose	How long it lasts
Session cookie	Keeps the site working during your visit	2 hours
XSRF-TOKEN	Protects the contact form from forged submissions	2 hours
__cf_bm	Set by our content delivery network to tell people from bots and protect the site	30 minutes
_ga	Google Analytics: tells visits from different browsers apart	2 years
_ga_<ID>	Google Analytics: keeps track of the current visit	2 years

We also save your analytics choice in your browser's local storage (sidecar-consent), so we can remember it. It stays until you clear your browser's data for the site. To tell which choice applies to you, your browser asks our content delivery network for its country once per visit; we do not store that.

We do not use advertising or social media tracking cookies, and we tell Google not to use our analytics data for advertising.

Your choice. In the European Economic Area, the United Kingdom, and Switzerland, Google Analytics stays off unless you select Allow analytics in the notice. Everywhere else, it is on unless you turn it off: the first time you visit, you can select Opt out in the notice. Either way, you can change your mind at any time with Cookie settings at the bottom of every page. Turning analytics off stops Google Tag Manager and Google Analytics from loading in that browser and deletes the Google Analytics cookies already set.

If your browser sends a Global Privacy Control signal, we treat it as an opt-out and do not load them, unless you turn analytics on in Cookie settings. Our site does not respond to browser Do Not Track signals, but it does honor Global Privacy Control as described here. We do not allow third parties to collect information about your activity across other sites through our site, other than Google Analytics as described in this policy. You can also opt out of Google Analytics on every site with Google's opt-out browser add-on.

You can block or delete cookies in your browser settings. If you block these cookies, the contact form may not work.

6. How long we keep it

We delete contact form submissions stored on our site 24 months after they are sent. We keep related email for as long as we need it to respond and for our records, and we review it at least once a year. We may keep information longer when we need it for a legal reason or because you became a client.

Server logs are kept for 1 day unless we need them to look into a security issue. Google Analytics data is kept for 14 months, then deleted by Google.

7. How we protect it

We use reasonable technical and organizational safeguards. These include encrypted connections (HTTPS), limited access to submissions, and providers who protect data on our behalf. No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission.

8. Your choices and rights

We give everyone the rights in this section, wherever they live. You can ask us to:

• Tell you what information we hold about you
• Correct information that is wrong
• Delete your information
• Stop using your information for a particular purpose
• Give you a copy of your information in a portable format

To make a request, email privacy@ridewithsidecar.com. We will confirm we received it within 10 days and respond within 45 days. We may need to confirm your identity first. We will not treat you differently for making a request.

California and other US states. In the last 12 months we collected identifiers (name, email, phone, IP address), professional information (company, role, company website), internet activity (how you use the site), and the content of your messages, for the purposes in section 3. We have not sold or shared personal information for targeted advertising, and we do not do so. We honor Global Privacy Control signals as described in section 5.

European Economic Area, United Kingdom, and Switzerland. You also have the right to object to our use of your information, to restrict how we use it, to withdraw your agreement to analytics at any time, and to complain to your local data protection authority.

9. Links to other sites

The site links to sites we do not run, such as LinkedIn and CurbSight. Their own privacy policies apply when you visit them.

10. Children

The site is meant for business owners and professionals. It is not directed to children under 16, and we do not knowingly collect their information. If you believe a child has sent us information, contact us and we will delete it.

11. Visitors outside the United States

Sidecar is based in the United States, and our service providers may store information in the United States or other countries. If you contact us from elsewhere, your information will be transferred to and handled in the United States, where privacy laws may differ from yours. Where the law requires it, we use appropriate safeguards for these transfers.

12. Changes

We will update this policy when our practices change, for example if we add a newsletter or new tools. When we do, we will change the "Last updated" date above. If a change is significant, we will also add a dated note at the top of this policy.

13. Contact

Questions or requests about your privacy can go to privacy@ridewithsidecar.com or by mail to Sidecar, LLC, 2680 18th St, Mailbox 69, Denver, CO 80211.