YOUR PRIVACY RIGHTS
Effective date: September 16, 2026
Introduction
Kickdrum Technology Group, LLC (“Kickdrum” or “we” or “us”) has created this Privacy Policy in order to disclose its use of the personal data it collects about you. Any questions regarding this policy should be directed by email to privacy@kickdrum.com. The following discloses Kickdrum’s information gathering and dissemination practices for its website and its services.
Kickdrum may be the Controller or Processor of your personal data provided to us by you or collected by us from you when you visit our website or when we deliver services to you or to your employer, as outlined below. By using our website or providing personal data to us, you acknowledge the uses and disclosures of personal data described in this policy. You have the choice to opt-out of sharing your data, as described below, and control how we use and share your data.
Information Collected and Received
Kickdrum may collect or receive personal information about you, including, but not limited to:
Contact and business information. Your name, business email address, telephone number, employer, and job title, so that we can respond to your inquiries and communicate with you about our services.
Engagement correspondence and materials. Emails, meeting notes and recordings, documents, and other communications exchanged with you in the course of an engagement or a prospective engagement.
Client project data. Materials that a client provides to us, or grants us access to, for an engagement. These materials may contain personal data about the client’s own personnel, contractors, or customers. Kickdrum acts as a Processor for this data and handles it under its agreement with the client.
Recruiting information. Where you apply for a role with Kickdrum, the information in your application and resume and the records of your interviews and any background screening.
Website usage information. Information your browser sends when you visit our website, such as the pages you view, the page that referred you, and your general location and device type, together with a record of how you interact with our pages, such as navigation, clicks, and scrolling, including information collected through cookies as described below.
You can choose what information you want to share with Kickdrum, however if you choose to withhold any personal data requested by us, it may not be possible for you to gain access to certain parts of the Kickdrum website or for us to provide the services you have requested. We collect personal information from you at several different points, including but not limited to the following:
when we correspond with you as a customer or prospective customer;
when you visit our website;
when you engage us to perform services, or we perform services for your employer;
when you provide information to us, for example in an interview, assessment, or survey conducted as part of an engagement;
when you contact us with a question or request; and
when our website sends us analytics data about how it is used.
Kickdrum does not ask for or require sensitive information (e.g. racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union memberships, genetic data, biometric data, data concerning health or data concerning sexual orientation). Please do not send us information of this kind.
Lawful Basis for Processing
We will only collect and process your personal data where we have lawful basis. Our lawful basis include consent (where you have given it), where processing is necessary for the performance of a contract with you, and for the purposes of our legitimate interests or the legitimate interests of third parties, provided that such interest does not outweigh your rights and freedoms. Examples of legitimate interest include but are not limited to: (i) complying with applicable law, (ii) protecting against security or other threats, (iii) administration of our business interests, including improvements and enhancements of our business, and (iv) customer relationship issues.
Your Rights: Access, Correction, Deletion
We retain the personal data that you provide to us, and the personal data we collect about you, for as long as we need it to fulfill the purposes for which we collected it, as described in How We Use Your Information below, and for as long as required by law or by our contractual obligations to our clients. Personal data contained in client project materials is retained and disposed of in accordance with our agreement with the client.
You have the right to request access to the information that Kickdrum has on you, to ask us to correct it if you believe it is incorrect, and to request that we delete it. You can make any of these requests by contacting us at privacy@kickdrum.com. In order to comply with your request, we may have to verify your identity. Any data that is no longer needed for the purposes specified below will be deleted. Note that Kickdrum may not be able to delete any aggregated or de-identified data on you.
You may also have the right to make a General Data Protection Regulation (GDPR) complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: https://www.edpb.europa.eu/about-edpb/our-members_en. If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
How We Use Your Information
Kickdrum may use personal information that we collect about you to:
deliver the services that you or your employer have requested;
manage our relationship with you and respond to your requests;
understand and improve how our website is used;
communicate with you by e-mail, postal mail, telephone and/or mobile devices about our services;
enforce our terms and conditions and other agreements between Kickdrum and you;
manage our business;
respond to investigation, court orders, legal process, or to investigate, prevent or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person, or as otherwise required by law; and
perform functions as otherwise described to you at the time of collection.
Kickdrum occasionally uses other companies to perform services necessary to our operations. In the course of providing these services, those companies may have access to your personal information. Those companies are bound by the terms of their agreements with Kickdrum, which include confidentiality and data protection obligations. The providers that process personal data on behalf of our clients are described under Third-Party Service Providers (Sub-processors) below.
How We Share Your Information
Kickdrum shares your information with third-party service providers only as needed to operate its business and to deliver its services, for the following purposes:
To host and secure our email, files, identity, and collaboration systems;
To host the isolated cloud environments used to carry out a client engagement;
To assist our personnel in performing engagement work, including approved artificial intelligence tools used under agreements that prohibit training on our data;
To operate our website and understand how it is used;
To manage our relationships with clients and prospective clients and to send communications about our services; and
To obtain professional services for Kickdrum itself, such as legal, accounting, recruiting, and background screening.
(a) Personally Identifiable Information. Kickdrum will never sell your email address or any other personally identifiable information, to any third party without your permission. We may store personally identifiable information in locations outside the direct control of Kickdrum (for example, on servers or databases co-located with hosting providers). Except as described in this Privacy Policy, we will not disclose your personally identifiable information to any third party for that third party's own purposes without your consent. We do share personal information with service providers and subcontractors who process it on our behalf and under contract, as described above.
(b) Aggregated and De-Identified Information. Kickdrum may aggregate or de-identify information about the use of its website and services so that it no longer identifies you. Kickdrum may retain that information, including usage and activity records, and may disclose it to third parties provided it is grouped with other data and presented in aggregate form.
(c) We May Be Required to Share Your Information. Kickdrum reserves the right to disclose information when required by law, such as by a subpoena or other legal proceedings. Kickdrum may also disclose your information if we reasonably believe it necessary to (i) comply with requests of law enforcement or other applicable law; (ii) to enforce any agreement between you and us; (iii) to protect the security and integrity of our site, applications, or services; and/or (iv) to protect us, our users or others.
(d) What Happens in the Event of a Change of Control: We may be involved with an acquisition or divestiture of our business, products or services. Information we maintain including names and email addresses, and other information related to our relationship with you may be sold or transferred in connection with such transaction. We may also sell, assign or otherwise transfer such information in connection with a sale of all or substantially all of our business or assets.
Agents, technology vendors and/or contractors of Kickdrum may have access to your personal data on a need to know basis for the purpose of performing services on our behalf or providing or enabling elements of the services. All such agents, technology vendors and contractors who have access to such information are required to keep the information confidential and not use it for any other purpose than to carry out the services they are performing for us or as otherwise required by law.
Third-Party Service Providers (Sub-processors)
Kickdrum engages third-party service providers, including cloud infrastructure, productivity, and artificial intelligence service providers, to process personal data on behalf of its clients in the course of delivering its services. Kickdrum maintains a current list of these sub-processors that identifies each provider, the service it performs, the categories of personal data it processes, and the location in which it processes that data. The list is available to clients and prospective clients on request by contacting privacy@kickdrum.com. Where Kickdrum has entered into a Data Processing Addendum with a client, Kickdrum notifies that client of changes to its sub-processors in accordance with that addendum.
How We Store and Process Your Information
The information collected by Kickdrum may be processed and/or stored in the United States, Canada, India, European Union member states, or any other country in which Kickdrum or its affiliates or service providers maintain operations. Kickdrum may transfer information that we collect, including personally identifiable information, to affiliated entities, or to other third parties across borders and from your country or jurisdiction of domicile to other countries or jurisdictions.
We want to make you aware that pursuant to the EU Data Protection Laws, Kickdrum shall act as a Processor or Subprocessor, and not a Controller with respect to any personal information collected on behalf of our customers. If you are a customer who uses our services and you collect personal information on individuals within the European Economic Area, we ask that you contact privacy@kickdrum.com to request a Data Processing Addendum (“DPA”). This DPA implements the GDPR’s Article 28 terms for processors and also incorporates the Standard Contractual Clauses adopted by the European Commission in Implementing Decision (EU) 2021/914 of 4 June 2021 (the “2021 SCCs”) to facilitate the lawful transfer of Personal Data from the EU to outside of the EU, where necessary and as required.
How We Protect Your Information
Kickdrum takes commercially reasonable measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee the security of any information you provide to us. If you have any questions about security on our website, you can contact us at privacy@kickdrum.com.
Cookies
“Cookies” are small pieces of information that are stored by your browser on your computer’s hard drive. Cookies, by themselves, do not tell us your e-mail address or other personally identifiable information unless you choose to provide this information to us by, for example, registering at our website. However, once you choose to furnish the website with personal information, this information may be linked to the data stored in the cookie. We use cookies to understand website and application usage and to improve the content and service. We also may use cookies to remember your preferences. Kickdrum does not set any cookie that is not necessary to make the website work unless you consent to it. When you first visit, a banner asks whether you accept analytics cookies. If you decline, or take no action, only necessary cookies are set. If your browser sends a Global Privacy Control (GPC) signal, non-essential cookies are declined automatically and you do not need to take any further action. You can change your choice at any time using the Cookie Settings link in the footer of any page. All major browsers also allow you to block or delete cookies.
Kickdrum also uses third-party analytics and session-recording services on its website, and these services load only where you have consented to analytics cookies. These services record how visitors interact with pages, including navigation, clicks, and scrolling, so that Kickdrum can understand how its website is used and improve it. These recordings are configured to mask text, so the content of our pages and anything you enter into a form does not appear in the recordings themselves. Information you choose to submit through a form is collected as described above.
Links
Kickdrum may create links to other websites. Kickdrum will make a reasonable effort to link only to sites that meet similar standards for maintaining each individual’s right to privacy. However, many other sites that are not associated or authorized by Kickdrum may have links leading to our site. Kickdrum cannot control these links and Kickdrum is not responsible for any content appearing on these sites.
Children’s Privacy
We do not knowingly collect any information from anyone who we know to be under the age of 13. If you are under the age of 18, you should use this website only with the involvement of a parent or guardian and should not submit any personal information to us. If we discover that a person under the age of 13 has provided us with any personal information, we will use commercially reasonable efforts to delete such person’s personal information from all Kickdrum systems.
Your California Privacy Rights
Kickdrum does not respond to browser “Do Not Track” (DNT) signals, because no common standard for interpreting them has been adopted. Kickdrum does honor the Global Privacy Control (GPC) signal: if your browser sends one, non-essential cookies are declined automatically and you do not need to take any further action. Where you consent to analytics cookies, third parties may collect personal information about your online activities over time and across sites when you visit our website.
Our website is not intended to appeal to minors.
Kickdrum does not disclose personal information to third parties for those third parties' own direct marketing purposes.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), gives you the following additional rights with respect to the personal information we collect about you:
Right to know. You may request the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for collecting it, and the categories of third parties to whom we disclose it.
Right to delete. You may request that we delete personal information we have collected from you, subject to the exceptions permitted by law.
Right to correct. You may request that we correct inaccurate personal information that we maintain about you.
Right to limit the use and disclosure of sensitive personal information. Kickdrum does not collect sensitive personal information from the individuals covered by this policy for purposes that would require us to offer this right.
Right to opt out of the sale or sharing of personal information. Kickdrum does not sell personal information and does not share personal information for cross-context behavioral advertising.
Right to non-discrimination. We will not discriminate against you for exercising any of these rights.
To exercise any of these rights, contact us at privacy@kickdrum.com. We will verify your request against the information we already hold about you, and will respond within forty-five (45) days, which we may extend as permitted by law. You may use an authorized agent to submit a request on your behalf, and we may require the agent to provide proof of your authorization.
Where Kickdrum processes personal information as a service provider on behalf of a client, requests should be directed to that client. Kickdrum will assist the client in responding as required by its agreement with the client.
Notice at Collection
The following describes the categories of personal information Kickdrum collects from website visitors, clients and prospective clients, and candidates for employment, the purposes for which it is used, and how long it is kept. Kickdrum does not sell or share any of these categories, and does not collect sensitive personal information in any of them.
Identifiers. Your name, business email address, telephone number, employer, job title, and online identifiers such as your IP address and cookie identifiers. Used to respond to your inquiries, deliver our services, operate our website, and communicate with you about our services.
Customer records. Contact and business details held in our client and prospect records. Used to manage our relationship with you.
Commercial information. Records of the services you or your employer have requested or received. Used to deliver and administer those services.
Internet or network activity. The pages you view and how you navigate our website. The detailed record of clicks, scrolling, and session activity is collected only where you consent to analytics cookies. Used to understand and improve how our website is used.
Audio and visual information. Notes, transcripts, and recordings of meetings and calls, and, where you consent to analytics cookies, recordings of your website session. Used to deliver our services and to improve our website.
Professional or employment information. Your job title and employer, and where you apply for a role with us, your application, resume, and interview records. Used to deliver our services and to assess candidates.
Approximate location. A general location such as your city and country, derived from your IP address. This is not precise geolocation. Used for website analytics and security.
Kickdrum keeps each of these categories for as long as it needs them for the purposes described above, and for as long as required by law or by its contractual obligations to its clients. Personal data contained in client project materials is retained and disposed of in accordance with the agreement with that client.
Amendments
Kickdrum may amend this policy at any time. If Kickdrum is going to use personally identifiable information collected through the Kickdrum site in a manner materially different from that stated at the time of collection, Kickdrum will notify users via email and/or by posting a notice on the Kickdrum site for thirty (30) days prior to such use. Kickdrum reviews this policy at least annually and updates the effective date shown above when it makes changes.
Successors and Assigns
This Privacy Policy inures to the benefit of successors and assigns of Kickdrum.
Contacts
If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this website, or if you want to request access to, changes to, or deletion of information we have about you, you can email us at privacy@kickdrum.com or submit a request through the form at kickdrum.com/contact. Upon request, Kickdrum will provide you with access to the information that it collects and maintains about you.
Opt-Out
The Kickdrum site provides users the opportunity to opt-out of receiving communications from Kickdrum, except transactional correspondence. To opt-out of receiving our communications, you can send email to privacy@kickdrum.com, or use the unsubscribe link in any marketing email we send.
International Transfer of your Personal Information
Our website is hosted and operated in the United States and is subject to United States law. Personal information that we collect may be stored and processed in the United States, and may be accessed by Kickdrum personnel in other countries where we operate, including India and Canada. If you are accessing our website outside of the United States, you need to understand that by accessing our website, you consent to the transfer of your personal information to the United States. Please be advised that United States law may not offer the same privacy protections as the law in your jurisdiction.