Privacy Policy

Introduction

Sage Outdoor Advisory ("we," "our," or "us") is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website, request access to gated content or market reports, or otherwise use our services (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services. This Privacy Policy is incorporated into and subject to any applicable terms of service or other agreements between you and Sage Outdoor Advisory.

Our website, market data, and reports are provided for general informational purposes only and do not constitute investment, financial, legal, appraisal, or other professional advice. This Privacy Policy describes our data practices and does not expand any warranties or obligations beyond those set out in our other agreements.

Information We Collect

Personal Information

We collect personal information that you provide to us when you:

• Sign in via Google OAuth: If you sign in with Google, we receive your email, name, and profile photo from Google.
• Request access to gated market reports: When you request access to gated content (such as our Glamping Market Overview), we collect your name and email and send a magic sign-in link via Supabase. We retain this information to verify access and to follow up with you about relevant Sage Outdoor Advisory services.
• Create an account: We store your account information in our database, including your user ID, email address, and account status
• Contact us: If you contact us through our website, we collect the information you provide, such as your name and email address
• Use our services: We collect information about how you interact with our website and services

The specific information we collect includes:

• Email address (required for account creation)
• Name and display name (from Google OAuth or manual entry)
• Profile picture (from Google OAuth, if provided)
• Account status and authorization information

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages you visit and time spent on pages
• Referring website addresses

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Verify access to gated content and market reports
• Process and respond to your inquiries
• Send you administrative information and updates
• Send you marketing, promotional, and follow-up communications about Sage Outdoor Advisory services, where permitted by law (you may opt out at any time)
• Monitor and analyze usage patterns and trends, and create aggregated or de-identified data and insights
• Detect, prevent, and address technical issues, fraud, abuse, and security incidents
• Establish, exercise, or defend legal claims and enforce our agreements
• Comply with legal obligations

Marketing communications: You can opt out of marketing emails at any time by using the unsubscribe link in those emails or by contacting us at contact@sageoutdooradvisory.com. We may still send you non-promotional messages related to your account, access, or transactions.

Third-Party Services

We use the following third-party services that collect, monitor, and analyze information:

• Supabase: We use Supabase for databases and sign-in. Your account details live in Supabase systems. Read their policy here: Supabase Privacy Policy.
• Google OAuth: Sign-in with Google shares your email, name, and photo with us. Google's rules apply to what they collect: Google Privacy Policy.
• Google Analytics: We use Analytics to see traffic trends (for example pages viewed and time on site). See Google Privacy Policy.

These third-party service providers have their own privacy policies addressing how they use such information. We encourage you to review their privacy policies.

How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service providers: With vendors and partners who perform services on our behalf (such as hosting, authentication, email delivery, and analytics) and who are authorized to use your information only as needed to provide those services.
• Legal and regulatory: When we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, subpoena, or governmental request, or to cooperate with law enforcement.
• Protection of rights: To enforce our agreements and policies; to investigate, prevent, or address fraud, security, or technical issues; and to protect the rights, property, or safety of Sage Outdoor Advisory, our users, or others.
• Business transfers: In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, sale of assets, or other business transaction, your information may be transferred to a successor or affiliate as part of that transaction.
• With your consent: For any other purpose disclosed to you with your consent.

Aggregated and De-Identified Data

We may create and use aggregated, anonymized, or de-identified data that does not directly identify you. This includes market data, statistics, benchmarks, and insights derived from usage of our Services. We may use, retain, license, and disclose such data for any lawful business purpose, including improving and marketing our Services, without restriction under this Privacy Policy. We will not attempt to re-identify de-identified data except as permitted by law.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. Any transmission of personal information is at your own risk.

You are responsible for maintaining the confidentiality of any sign-in links, credentials, or access you receive, and for any activity that occurs through your access. Please notify us promptly if you believe your access has been compromised.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access: Request a copy of the personal information we hold about you
• The right to correct: Request correction of inaccurate or incomplete information
• The right to deletion: Request deletion of your personal information (subject to legal obligations)
• The right to object: Object to certain processing of your information
• The right to data portability: Receive your data in a structured, commonly used format
• The right to withdraw consent: Withdraw consent for processing based on consent (where applicable)

How to exercise your rights: Email contact@sageoutdooradvisory.com with your request.

We usually respond within 30 days, or sooner if the law requires. We may ask you to confirm who you are before we act.

Right to Lodge a Complaint (GDPR): If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your data protection rights.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal information based on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent: When you provide explicit consent for specific purposes, such as account creation and authentication
• Contract: To fulfill our contractual obligations to you, such as providing access to our services
• Legal obligation: To comply with applicable laws and regulatory requirements
• Legitimate interests: For our legitimate business interests, such as improving our services, preventing fraud, and ensuring security, where such interests are not overridden by your privacy rights

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

• Account information: Retained for the duration of your account's active use, and for up to 3 years after account inactivity or deletion request, except where we are required to retain it by law
• Website analytics data: Retained for 26 months (Google Analytics default retention period)
• Communication records: Retained for 3 years from the date of last contact for customer service and legal compliance purposes
• Legal/regulatory requirements: Some information may be retained longer if required by applicable law, court order, or legal process

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

Specifically, we use Supabase, a service provider based in the United States, for data storage and processing. When we transfer personal information from the European Economic Area (EEA) or United Kingdom to the United States or other countries outside the EEA/UK, we ensure appropriate safeguards are in place to protect your information, including:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers
• Technical and organizational security measures

By using our services, you consent to the transfer of your information to the United States and other countries where our service providers operate.

Do Not Sell My Personal Information (California Residents)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding the sale and sharing of personal information.

We do not sell your personal information. We do not sell, rent, or disclose your personal information to third parties for monetary or other valuable consideration.

California residents have the right to:

• Know what personal information we collect and how it's used
• Request deletion of personal information
• Opt-out of the sale or sharing of personal information (though we do not sell your information)
• Non-discrimination for exercising privacy rights

To exercise these rights, please contact us at contact@sageoutdooradvisory.com.

Children's Privacy

Our service is not for anyone under 18. We do not knowingly collect data from children.

If you believe a child shared data with us, email contact@sageoutdooradvisory.com. We will delete it when we can confirm the issue.

Data Breach Notification

If a breach affects your personal data, we notify you and regulators when the law requires us to.

Under GDPR we aim to act without undue delay and, where feasible, within 72 hours of learning of the incident.

Notifications will be sent to the email address associated with your account or through other reasonable means as appropriate under the circumstances.

Cookies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Third-Party Links and Content

Our Services may contain links to third-party websites, properties, brands, or resources that we do not own or control. This Privacy Policy does not apply to those third parties, and we are not responsible for their content, privacy practices, or accuracy. We encourage you to review the privacy policies of any third-party sites you visit.

Do Not Track

Some browsers offer a "Do Not Track" (DNT) setting. There is currently no industry-standard response to DNT signals, and our Services may not respond to them. We describe the choices available to you regarding analytics and cookies in the relevant sections of this Privacy Policy.

Governing Law

This Privacy Policy and any dispute arising out of or relating to it are governed by the laws of the United States and the State of Utah, without regard to conflict-of-laws principles, except where applicable data protection laws (such as those of your country or state of residence) provide otherwise. Nothing in this Privacy Policy limits any non-waivable rights you may have under those laws.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (if you have an account and we have your email address)
• Displaying a notice on our website for significant changes

You are advised to review this Privacy Policy periodically for any changes. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us: