Effective date: October 24, 2026. Last updated: October 24, 2026.
1. Who we are
Zecond Shift is a GrowthHit company operated by Hit Lab Ventures LLC, 1700 Westlake Ave N, Suite #200, PMB #0745, Seattle, WA 98109 ("Zecond Shift", "we", "us"). This policy explains how we handle personal information when you visit zecondshift.com, book a call, or talk with us about our services. Questions: info@growthhit.com.
When we build and run an AI Office for a client, we handle that client's business data on the client's instructions under our client agreement. In that role we act as a service provider or processor, and the client's own privacy policy covers its customers.
2. What we collect
| Type | Examples | Where it comes from |
|---|---|---|
| Contact and business details | Name, work email, company website, annual revenue range, job title | You, when you book a call or email us |
| Call and message content | What you tell us on calls, notes we take, emails and chat messages | You |
| Usage and device data | Requested pages, IP address, browser and device type in technical hosting logs | Your browser when it requests the site |
| Public business information | Your company's website, public social profiles, job title | Public sources |
We do not ask for, and ask you not to send, sensitive personal information such as health data, government ID numbers or financial account numbers.
3. How we use it
- Schedule and hold calls, answer questions and send what you asked for.
- Decide whether our services fit your business and prepare proposals.
- Provide, support and bill for services if you become a client.
- Understand how people use our site so we can improve it.
- Send marketing emails, which you can unsubscribe from at any time with the link in every email.
- Contact you about our services in line with your communication preferences and applicable law.
- Keep our site and systems secure, prevent fraud and meet legal duties.
4. How we use AI
We use AI tools in our own work, for example to summarize call notes, draft follow-up emails and analyze site analytics. We do not let these tools use your information to train their public models where the tool offers that setting. We do not make decisions with legal or similarly significant effects about you using automated processing alone.
5. Cookies, tracking and Global Privacy Control
| Tool | Purpose | Type |
|---|---|---|
| Hosting provider | Delivers and protects the site | Strictly necessary |
| Calendly | Shows the calendar after you choose to load it and books calls | Optional functional |
| Vimeo | Plays testimonial videos when you press play | Optional functional |
| Google Tag Manager | Container that loads the analytics tools below, and only after you accept | Tag container |
| Google Analytics 4 | Measures which pages and sections are used | Optional analytics |
| Microsoft Clarity | Records anonymised interaction data to find usability problems | Optional analytics |
The Calendly booking calendar loads automatically when you scroll near the booking section, unless you have disabled optional content through “Your Privacy Choices” in the footer. Vimeo videos load only when you press play. These providers receive connection information, including your IP address, when their content loads. You can stop optional embeds through the footer and load the calendar manually if you later choose. Your preference is saved on this device.
We use Google Tag Manager to load two analytics tools: Google Analytics 4, which measures which pages and sections are used, and Microsoft Clarity, which records anonymised interaction data such as clicks and scrolling so we can see where the website is confusing. Both are off when you arrive. They load only after you select “Accept analytics” in the consent banner, which we record through Google Consent Mode; until then analytics storage is denied and no analytics cookies are set. You can change or withdraw that choice at any time through “Your Privacy Choices” in the footer. Microsoft Clarity sets Microsoft cookies that Microsoft may also use for its own purposes, including advertising, as described in Microsoft’s privacy statement, and it loads only after you accept analytics.
We do not sell personal information or run advertising tags. Advertising storage, ad user data and ad personalisation are denied at all times. If your browser sends a Global Privacy Control (GPC) signal we treat it as a refusal of analytics: nothing analytics-related loads, the choice is locked off on that device, and we show you an on-screen confirmation. If we add advertising tools later, we will update this policy and obtain consent where required before loading them.
6. Who we share it with
We do not sell personal information for money. We share it only with:
- Service providers that help us run the business, such as website hosting, Google Workspace, Calendly, Vimeo, analytics, our CRM and email tools, under contracts that limit how they use it.
- GrowthHit, our parent company, which may help deliver services or refer you to its agency services if you ask.
- This website currently has no advertising or retargeting tags. We will update this policy before introducing new advertising data-sharing practices.
- Professional advisers and authorities when the law requires it or to protect our rights.
- A buyer or successor if our business is sold or merged, under this policy's protections.
We will give you a list of the specific third parties we disclosed your information to on request where your state law provides that right.
7. How long we keep it and how we protect it
We keep booking and sales records for up to 24 months after our last contact, client records for the length of the engagement plus 7 years for tax and legal purposes. We then delete or anonymize it. We protect information with access controls, two-factor sign-in, encryption in transit and vendor reviews. No system is perfectly secure, and we will notify you of a breach as the law requires.
8. Your privacy rights
Depending on where you live, you may have the right to:
- Know what personal information we have about you and get a copy in a portable format.
- Correct information that is wrong.
- Delete information we hold about you.
- Opt out of the sale or sharing of your information, targeted advertising and profiling.
- Get a list of the specific third parties we disclosed your information to.
- Not be treated differently for using these rights.
To make a request, email info@growthhit.com or follow the contact link in "Your Privacy Choices" in the footer. We will confirm your identity using the email address on file, and we will answer within 45 days (we may extend once by 45 days if needed and will tell you why). An authorized agent may act for you with your signed permission.
If we decline your request, you can appeal by replying to our decision with "Appeal" in the subject line. We will answer within the time your state law sets, usually 45 to 60 days. If you are still not satisfied, you can contact your state attorney general.
9. Notice for California residents
The categories described in section 2 include identifiers (name and email), professional information (company and job title), and technical internet activity. We use them for the purposes in section 3 and retain them for the periods in section 7. We do not sell personal information or share it for cross-context behavioral advertising through this website. You may submit privacy requests to info@growthhit.com. We do not use sensitive personal information to infer characteristics about you.
10. Visitors from the EU, UK and Switzerland
We process your information on these legal bases: your consent (non-essential cookies, marketing emails where required); steps you ask us to take before a contract (booking a call); our legitimate interests in running and improving our business and marketing to businesses (balanced against your rights); and legal obligations. You have the rights to access, correct, delete, restrict, object to processing and port your data, and to withdraw consent at any time. Our servers and many of our providers are in the United States; we rely on the EU-US Data Privacy Framework where the provider is certified or on Standard Contractual Clauses. You can complain to your local data protection authority.
11. Children
Our site and services are for businesses and are not directed to anyone under 16. We do not knowingly collect personal information from children. If you think a child has sent us information, contact us and we will delete it.
12. Changes and contact
We will post any changes here with a new "Last updated" date, and we will tell clients by email about material changes. Contact: Hit Lab Ventures LLC, 1700 Westlake Ave N, Suite #200, PMB #0745, Seattle, WA 98109, info@growthhit.com.