Privacy Policy

The Coastal Collaborative, LLC
Effective Date: May 17, 2026
Last Updated: May 17, 2026

The Coastal Collaborative, LLC ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit thecoastalcollaborative.com (the "Site"), use our customer portal (the "Portal"), purchase our services, communicate with us, or otherwise interact with us, and how we use, share, and protect that information.

By using the Site, Portal, or Services, you agree to the practices described in this Privacy Policy.

1. Who We Are

The Coastal Collaborative, LLC is a North Carolina limited liability company located at 322 S College Rd #1159, Wilmington, NC 28403. We provide fractional operations consulting, systems implementation, AI integration, and related digital products through our website, customer portal, and direct engagements.

For privacy questions or to exercise any of the rights described below, contact erin@thecoastalcollaborative.com.

2. Information We Collect

2.1 Information You Provide Directly

  • Contact information: name, email address, mobile phone number, company name, and other details you submit through forms, scheduling tools, the Portal, or email.
  • Account credentials: username and password used to access the Portal.
  • Project information: business details, goals, workflows, credentials, onboarding responses, uploaded files, and other information shared during the course of services.
  • Payment information: handled directly by our payment processor, Stripe. We do not store full credit card numbers on our systems.
  • Signed agreements: contracts and related documents signed through our e-signature provider, Documenso, including signature data, timestamps, and audit-trail metadata.
  • Communication preferences: your selected channels (email, Slack Connect, SMS, voice) and opt-in/opt-out status for each.
  • Communication content: messages you send to us via email, Slack, SMS, the Portal, or other channels.
  • Call recordings and transcripts: audio, video, and AI-generated transcripts of meetings you join with us. See Section 6.

2.2 Information Collected Automatically

When you visit the Site or use the Portal, we and our service providers automatically collect:

  • Device and browser information: IP address, browser type, operating system, device identifiers, and referring URL.
  • Usage data: pages viewed, time on site, clicks, scroll behavior, Portal activity, and similar interaction data.
  • Cookies and tracking technologies: see Section 8 below.

2.3 Information From Third-Party Tools

  • Stripe: when you make a purchase, Stripe collects your payment method, billing details, and transaction information.
  • Twilio: when you opt in to SMS messaging, Twilio processes your phone number and message content to deliver text messages.
  • Documenso: when you sign an agreement, Documenso records signature data, timestamps, IP address, and audit-trail information to authenticate the signing event.
  • Slack and Slack Connect: when you communicate with us through a shared Slack Connect channel, your Slack profile information and message content are processed by Slack.
  • Calendly: when you book a call, Calendly collects your name, email, time zone, and any details you provide on the scheduling form.
  • Zoom, Google Meet, and Granola: video conferencing and AI transcription services may process audio, video, and meeting metadata.
  • Kit (formerly ConvertKit): if you subscribe to our email list, Kit collects your email address, subscription source, and engagement data.
  • Meta Pixel and Google Analytics: see Section 8 below.

2.4 Information From Authorized Agents

If you use a third-party AI-powered agent or other Authorized Agent to make a purchase on your behalf (including through Stripe's agentic commerce protocol), we may receive information that agent transmits to complete the transaction, such as your name, email, billing address, and payment method.

2.5 Sensitive Information

We do not intentionally collect sensitive personal information (such as Social Security numbers, government IDs, financial account numbers beyond what is required for payment, precise geolocation, biometric data, racial or ethnic origin, religious beliefs, health information, or sexual orientation). Do not send us sensitive personal information unless we have specifically requested it for a legitimate business purpose. If you provide sensitive information voluntarily, you consent to our use of it solely for the purpose you provided it.

3. How We Use Your Information

We use the information we collect to:

  • Provide access to and operate the Site and Portal.
  • Deliver the services and digital products you purchase.
  • Process payments, send receipts, and manage your account.
  • Send and authenticate contracts and electronic signatures.
  • Communicate with you through your selected channels (email, Slack Connect, SMS, voice) about your project, scheduled calls, contracts, payments, and support requests.
  • Send marketing emails or SMS only if you have separately opted in (you can opt out at any time).
  • Record and transcribe meetings for accuracy, training, and AI-assisted summarization (see Section 6).
  • Improve the Site, Portal, our services, and our marketing.
  • Detect, prevent, and respond to fraud, security incidents, abuse, and violations of our Terms of Service.
  • Comply with legal obligations, enforce our Terms of Service, defend against legal claims, and protect our rights.

4. SMS Text Messaging and Mobile Information

We use Twilio, Inc. as our SMS messaging provider for text communications sent under our A2P 10DLC registered campaign.

Consent. We send SMS messages only after you have actively opted in by providing your mobile number and selecting SMS as a preferred channel inside the Portal or another consent form. SMS consent is not a condition of purchasing any Service. By providing a mobile number you also consent under the Telephone Consumer Protection Act (TCPA) to receive autodialed and prerecorded messages from us at that number.

Types of messages. SMS messages may include project updates, appointment reminders, contract status notifications, payment reminders, onboarding prompts, and (only if you opt in separately) marketing or promotional content.

Frequency and rates. Message frequency varies. Message and data rates may apply.

Opt-out and help. You can opt out at any time by replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any message. Reply HELP for assistance. You can also update your SMS preferences inside the Portal or by emailing erin@thecoastalcollaborative.com.

No sharing for third-party marketing. Mobile phone numbers, SMS opt-in data, and SMS consent are never shared with third parties or affiliates for their marketing or promotional purposes. We share this information only with Twilio (and any successor SMS provider) solely to deliver the messages you have agreed to receive, and as otherwise described in Section 10 of this Privacy Policy.

Retention. We retain SMS records, opt-in/opt-out history, and related metadata as required for legal compliance, dispute resolution, and audit purposes.

5. Email Communications

We use your email address to send transactional messages (receipts, contract notifications, project updates, scheduled call confirmations) and, where you have opted in, marketing messages.

We comply with the federal CAN-SPAM Act and with applicable international email marketing laws. Every marketing email includes our physical mailing address and a working unsubscribe link, and we honor opt-out requests within ten (10) business days. Transactional emails related to your account or active engagements continue regardless of marketing preferences. You can update your email preferences inside the Portal at any time.

6. Call Recordings, Meeting Transcripts, and Notes

Calls, meetings, and video conferences with us (including those conducted via Zoom, Google Meet, or other platforms) may be recorded and transcribed for accuracy, accountability, internal training, and AI-assisted summarization, using tools such as Granola or comparable services.

By scheduling, joining, or participating in a call or meeting with us, you consent to being recorded and transcribed. If you do not consent, notify us in writing before the meeting and we will disable recording. This notice satisfies disclosure requirements under "two-party consent" laws in jurisdictions including California, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, and Washington.

Recordings and transcripts are treated as confidential client records. We retain them for as long as needed to deliver the Services, for our internal recordkeeping, and as required by law. You may request deletion of a specific recording or transcript by contacting us; we will honor the request unless we are legally required to preserve the record.

7. Artificial Intelligence and Automated Processing

We use artificial intelligence and machine learning tools, including large language models, transcription services, and AI-assisted automation platforms, to help deliver the Services. This may include summarizing meetings, drafting deliverables, generating ideas, classifying messages, and similar tasks.

When AI tools are used, your information may be processed by reputable third-party AI providers under their respective terms and privacy policies. We choose providers that offer reasonable data protection terms and, where available, configure them not to use your data for general model training.

We do not make solely automated decisions about you that produce legal or similarly significant effects without a human in the loop. If you require an entirely AI-free workflow, notify us in writing before engagement begins.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for several purposes:

  • Essential cookies: required for the Site and Portal to function (such as authentication and remembering form input).
  • Analytics cookies: provided through Google Analytics 4 (GA4) (Measurement ID: G-KG6D7KBEBM), which help us understand how visitors use the Site and Portal.
  • Advertising and conversion cookies: provided through the Meta Pixel (Pixel ID: 926761830343186), which helps us measure ad performance and reach relevant audiences on Meta platforms.

You can control cookies through your browser settings and opt out of certain tracking:

Do Not Track. Some browsers offer a "Do Not Track" signal. There is no industry consensus on how to honor that signal, and we currently do not respond to it. We will honor the Global Privacy Control (GPC) signal where required by applicable law.

9. How We Share Your Information

We do not sell your personal information for monetary consideration. We share information only with:

  • Service providers that help us run our business, including Stripe (payments), Twilio (SMS delivery), Documenso (e-signatures), Slack (communication and Slack Connect), Kit (email), Calendly (scheduling), Zoom and Google Meet (video conferencing), Granola (transcription), Google (analytics and workspace), Meta (advertising), Asana (project management), Toggl (time tracking), and the AI model providers used in service delivery. Each of these providers has its own privacy policy.
  • Authorized Agents acting on your behalf, to the extent needed to complete a transaction or service you have authorized.
  • Legal and regulatory bodies when required by law, subpoena, or court order, or to protect our rights, property, or safety, or the rights, property, or safety of others.
  • Professional advisors (accountants, attorneys, insurers) bound by confidentiality obligations.
  • Successors in interest in the event of a merger, acquisition, financing, reorganization, or sale of business assets.

Mobile phone numbers and SMS opt-in data are never shared, sold, rented, or otherwise transferred to third parties or affiliates for their own marketing purposes. This applies regardless of any other sharing described in this Privacy Policy.

10. Data Retention

We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Typical retention periods:

  • Email marketing data: until you unsubscribe, then suppression-list retention as required to honor your opt-out.
  • SMS records and consent history: for the period required by applicable telecom regulations and our recordkeeping needs.
  • Signed contracts: for the life of the agreement plus any applicable statutory retention period.
  • Client project records and deliverables: at least seven (7) years for tax and recordkeeping purposes.
  • Call recordings and transcripts: for the duration of the engagement plus a reasonable archival period, or longer if required by law.
  • Analytics and cookie data: per the retention defaults of the underlying tool, typically not longer than 26 months.

11. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information.
  • Object to or restrict certain types of processing.
  • Request a portable copy of your information.
  • Withdraw consent for marketing communications (email or SMS) at any time.
  • Lodge a complaint with a data protection authority.

To exercise any of these rights, email erin@thecoastalcollaborative.com with your request. We will respond within the timeframes required by applicable law (typically 30-45 days). We may need to verify your identity before responding. We will not discriminate against you for exercising your rights.

12. California Privacy Rights

California residents have specific rights under the California Consumer Privacy Act and California Privacy Rights Act ("CCPA/CPRA"):

  • The right to know what categories of personal information we collect, the sources, the purposes, and the categories of third parties we share with.
  • The right to delete personal information we hold about you, subject to legal exceptions.
  • The right to correct inaccurate personal information.
  • The right to opt out of the sale or sharing of personal information. We do not sell personal information for monetary consideration. We also do not share personal information for cross-context behavioral advertising in a way that requires an opt-out mechanism, but we honor Global Privacy Control signals where applicable.
  • The right to limit the use of sensitive personal information.
  • The right to non-discrimination for exercising your rights.

Shine the Light. California Civil Code Section 1798.83 permits California residents to request information about disclosures of personal information to third parties for direct-marketing purposes. We do not make such disclosures.

13. Other US State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have rights similar to those described in Section 11, including access, correction, deletion, portability, and opt-out of targeted advertising and sale of personal information. To exercise these rights, contact us at erin@thecoastalcollaborative.com. If you are denied a request, you may have the right to appeal.

14. EU/UK Rights and Legal Bases

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information based on one or more of the following legal bases: your consent, the performance of a contract with you, our legitimate interests (such as running and improving our business), and compliance with legal obligations. You have the rights described in Section 11 plus the right to lodge a complaint with your local data protection authority.

We do not maintain an EU representative because we do not regularly target the EU market. If you have an EU/UK-specific concern, contact us directly.

15. Marketing Communications

If you opt in to marketing communications, we may send promotional emails or SMS messages about new services, content, and offers. Every marketing email includes an unsubscribe link, and every marketing SMS includes the opt-out instructions described in Section 4. You can also update your marketing preferences inside the Portal at any time. Even after unsubscribing from marketing, we may still send transactional messages related to your account, contracts, payments, or active engagements.

16. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted Portal authentication, secured third-party processors, access controls on internal systems, and least-privilege handling of credentials. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

If a data breach affects your personal information, we will notify you and applicable regulators in accordance with applicable law.

17. Children's Privacy

The Site, Portal, and our services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. SMS messaging is restricted to individuals 18 or older. If you believe a child has provided us with personal information, contact us and we will delete it.

18. International Transfers

We are based in the United States and process information here. If you access the Site or Portal from outside the US, your information will be transferred to and processed in the US, which may have data protection laws different from those of your country. By using the Site or Portal, you consent to this transfer. Where required, we rely on standard contractual clauses or other lawful transfer mechanisms with our service providers.

19. Third-Party Links

The Site and Portal may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those sites. Review their privacy policies before providing information.

20. Data From Third Parties

We may receive information about you from third parties such as referrers, social-media platforms (when you interact with our profiles), event organizers, and publicly available sources. We use this information for the same purposes described in Section 3 and protect it under the same standards.

21. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last Updated" date. Material changes will be communicated through the Site, the Portal, or by email. Your continued use of the Services after the effective date of an updated Policy constitutes acceptance of the changes.

22. Contact

Questions, requests, or concerns about this Privacy Policy or our handling of your information? Reach out:

The Coastal Collaborative, LLC
322 S College Rd #1159
Wilmington, NC 28403
erin@thecoastalcollaborative.com