Vivarium Data Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Contact & Inquiry Information: Name, email address, company, and the contents of your message when you submit our contact form or otherwise communicate with us.
• Business Relationship Information: Contact details, billing information, and records related to proposals, contracts, and the administration of client engagements.
• Communications: Correspondence with our team, including email and meeting records related to your engagement.

1.2 Information Collected Automatically

When you visit the Site, our hosting infrastructure automatically records standard server log information, such as IP address, browser type, pages visited, and timestamps. This information is used for security, diagnostics, and Site operations.

1.3 Information from Other Sources

We may supplement the information above with publicly available business information (for example, your company's website or professional profile) to prepare for and deliver client engagements.

2. How We Use Information

We use the information we collect to:

• Respond to inquiries and requests submitted through the Site
• Provide, administer, and improve our Services
• Prepare proposals, perform contracts, and manage billing
• Send service-related communications and, where permitted, relevant updates about our offerings (you may opt out at any time)
• Maintain the security and integrity of the Site and our systems
• Comply with legal obligations and enforce our agreements

3. Client Engagements & Research Data

Research deliverables provided to clients contain aggregated and anonymized insights. Personally identifiable information about research respondents is never included in client deliverables.

Where we process information on a client's behalf as part of an engagement, we do so in accordance with the applicable client agreement. Data collected from research respondents through the Vivarium Rewards application is collected and handled under the Vivarium Rewards Privacy Policy.

4. How We Share Information

4.1 Service Providers

We share limited information with trusted third-party providers who support our operations — for example, website hosting and form processing, email services, and payment processing. These providers are permitted to use the information only to provide services to us.

4.2 Professional Advisors

We may share information with lawyers, accountants, and similar advisors where reasonably necessary.

4.3 Legal and Business Requirements

We may disclose information as required to comply with law or legal process, to protect rights and safety, to enforce agreements, or in connection with a business transaction such as a merger, financing, or acquisition.

4.4 With Your Consent

We may share information for other purposes when you explicitly consent.

5. Cookies & Third-Party Resources

The Site does not use advertising or cross-site tracking cookies. Certain Site resources (such as fonts and scripts) are loaded from third-party content delivery networks, which may receive your IP address as a technical part of serving those files.

6. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including maintaining business records for the periods required by legal, tax, and accounting obligations.

7. Data Security

We employ reasonable technical and organizational safeguards to protect information, including access controls and encryption in transit. However, no system can be guaranteed to be 100% secure.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, including under the California Consumer Privacy Act (CCPA) and the Colorado Privacy Act (CPA):

• Know what personal information we collect and how it is used
• Access, correct, or delete your personal information
• Obtain a portable copy of your personal information
• Opt out of the sale of personal information or targeted advertising (we do not engage in these practices)
• Non-discrimination for exercising your privacy rights

To exercise these rights, or to opt out of marketing communications, contact hello@vivariumdata.com. We respond to verified requests within the timeframes required by applicable law.

9. Children's Privacy

The Site and Services are intended for business audiences and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

10. International Users

The Site and Services are operated in the United States. Information is processed and stored in the United States.

11. Changes to This Privacy Policy

We may update this policy periodically. Material changes will be communicated where required.

12. Contact Us