PRIVACY POLICY

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.goodwrk.design (the "Site").

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.

Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site.

We refer to this automatically-collected information as "Device Information."We collect Device Information using the following technologies:

"Cookies" are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

"Log files" track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

"Web beacons,""tags," and "pixels" are electronic files used to record information about how you browse the Site.

Additionally, when you partner with us or attempt to partner with us through the Site, we collect certain information from you, including your name, billing address, payment information (including credit card numbers), email address, and phone number. We refer to this information as "Partnership Information."When we talk about "Personal Information" in this Privacy Policy, we are talking both about Device Information and Partnership Information.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Partnership Information that we collect generally to fulfill our design partnership services (including processing your payment information and providing you with invoices and/or confirmations).

Additionally, we use this Partnership Information to: Communicate with you; Screen our partnerships for potential risk or fraud; and when in line with the preferences you have shared with us, provide you with information or advertising relating to our services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), for retargeting advertisements, and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above.

We use Google Analytics to help us understand how our customers use the Site–you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We also use Facebook to help us understand how our customers use theSite—you can read more about how Facebook uses your Personal Information here: https://www.facebook.com/privacy/explanation. You can also opt-out of Facebook Ads following the instructions here: https://www.facebook.com/settings/?tab=ads.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

BEHAVIOURAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.You can opt out of targeted advertising as per the following links:FACEBOOK – https://www.facebook.com/settings/?tab=ads GOOGLE– https://www.google.com/settings/ads/anonymousAdditionally, you can opt out of some of these services by visiting theDigital Advertising Alliance's opt-out portal at: http://optout.aboutads.info/.

DO NOT TRACK

Please note that we do not alter our Site's data collection and usepractices when we see a Do Not Track signal from your browser.

YOUR RIGHTS

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you partner with us through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including toCanada and the United States.

DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including ensuring clients can seamlessly continue their partnership with our services as needed, and to comply with legal, accounting, or reporting obligations. Once data is no longer needed, it is securely deleted or anonymized.

‍Data Archival and Removal Inactive accounts or historical data may be moved to secure archival storage after 2 years of inactivity. Archived data is accessible only to authorized personnel and is periodically reviewed for deletion or anonymizationin accordance with our retention schedule.

‍Data Storage Policy All personal data is stored on secure servers located in the UnitedStates. We implement industry-standard encryption both in transit and at rest to protect your data against unauthorized access, disclosure, alteration, or destruction.

Data Deletion RequestsYou have the right to request deletion of your personal data at any time.

Upon receiving a verified request at info@goodwrk.design, we will: Confirm receipt of the request within 3 business days. Verify your identity to prevent unauthorized access. Permanently delete or anonymize your data within 10business days, unless we are legally required to retain certain records.Provide written confirmation once your data has been deleted.

To make a data deletion request, please contact us at info@goodwrk.design

PROFESSIONAL PARTNER PRIVACY ADDENDUM

This Professional Partner Privacy Addendum ("Addendum") applies when a Customer purchases a Professional Partner or Agency Partner level partnership. It supplements, and should be read together with, the remainder of this Privacy Policy.

In case of conflict, this Addendum controls forProfessional and Agency Partner processing.

‍Categories of data we process for Professional and Agency Partners. In addition to the personal information described in the Privacy Policy (Device Information, PartnershipInformation, etc.), we process:Account & Team Data (names, work emails, roles of team members using Wrike);Workspace Collaboration Data (comments/attachments/briefs shared via Wrike and approved 3rd-party channels you enable, e.g., Slack);Operational Comms (messages with your account manager, monthly check-in notes);Payment/Admin Data (billing contacts and PO numbers, if used).

‍Sources. We collect Professional and Agency Partner data from you/your users; from your enabled integrations (e.g., Slack, Wrike); and from our services/platforms consistent with our site's analytics and advertising disclosures.

‍Purposes of processing. To deliver Professional and Agency Partner features (priority handling, dedicated account manager, monthly or weekly check-ins, tailored onboarding),operate integrations, provide support via Slack, and improve our services(usage analytics, quality assurance) as already permitted in this PrivacyPolicy.

‍Lawful bases. We rely on contract performance (providing Professional and AgencyPartner services), legitimate interests (service improvement, security/fraud detection), and consent where required for marketing cookies/ads.

‍Sharing & processors. We share Professional and Agency Partner data with service providers as described in this Privacy Policy (e.g., analytics, advertising). If you enableSlack, you instruct us to process necessary data through those platforms on your behalf. You remain responsible for your admin settings and third-party terms.

‍International transfers. Transfers occur as outlined in this Privacy Policy; we use appropriate safeguards where required.

‍Security. We apply technical and organizational measures appropriate to risk and restrict internal access to Professional and Agency Partner workspaces to authorized personnel supporting your partnership (e.g., your account manager and assigned team).

‍Retention. Professional and Agency Partner data is retained per our standard retention practices and the "Data Retention & Removal" section.You may submit deletion requests; legal/regulatory obligations may require retention.

‍Your choices. Account administrators can request workspace exports/deletions and manage integrations. End-user ad/cookie choices remain as described in thisPrivacy Policy (e.g., Google/Facebook controls, DAA opt-out).

CHANGES

We may update this privacy policy from time to time inorder to reflect, for example, changes to our practices or for otheroperational, legal or regulatory reasons.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@goodwrk.design.