Privacy Policy

1. Who we are

Prime Factors, Inc. (“Prime Factors,” “we,” “us,” or “our”) provides applied data-protection software. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit primefactors.com (the “Site”), request information, or otherwise interact with us.

Data controller: Prime Factors, Inc., 1400 Executive Pkwy, Suite 100, Eugene, OR 97401, USA. Privacy contact: privacy@primefactors.com.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, this policy describes your rights under the EU/UK General Data Protection Regulation (GDPR). If you are a resident of a US state with a comprehensive privacy law, it describes your rights under those laws.

2. Information we collect

2.1 Information you provide

  • Contact and business details you submit through our forms (e.g., Request Info, Free Trial, Request Support, newsletter sign-up): name, business email, company, job title, phone, and the content of your message.
  • Records of your communications and support requests with us.

2.2 Information collected automatically

When you consent, we and our service providers use cookies and similar technologies to collect device and usage data such as IP address, browser type, pages viewed, referring URLs, and interactions. See Section 4 for the specific cookies.

2.3 Information from third parties

Subject to your consent where required, we use B2B identification services (e.g., ZoomInfo WebSights) that may associate a business visitor with company-level information. We may also receive data from marketing and CRM partners (e.g., HubSpot).

3. How we use information

  • Respond to inquiries, provide trials, deliver support, and fulfill requests you make.
  • Operate, secure, and improve the Site (including analytics and measurement) where you have consented.
  • Marketing and business development, including identifying interested organizations, where you have consented.
  • Protect against fraud, abuse, and security threats, and comply with legal obligations.

4. Cookies and tracking technologies

We set strictly necessary cookies without consent. All analytics and marketing technologies are loaded only after you consent through our cookie banner and are managed via Google Tag Manager with Google Consent Mode. You can change your choices at any time (see Section 8).

Tool

Cookies

Category

Duration

Purpose

Google Analytics 4

_ga, _ga_*

Analytics

Up to 2 years / 6 months

Traffic and usage analysis

HubSpot

__hstc, hubspotutk, __hssc, __hssrc

Analytics / Marketing

Session to ~6 months

Visitor analytics; link sessions to CRM

ZoomInfo WebSights

ZoomInfo cookies

Marketing

Varies

B2B visitor identification

Google reCAPTCHA

_GRECAPTCHA

Functional

Session / ~6 months

Anti-spam / form and login protection

Wordfence

wfwaf-authcookie-*

Strictly necessary

Session

Security / firewall

Cookie consent

Consent preference cookie

Strictly necessary

Up to 6 months

Stores your consent choices

 

5. Legal bases for processing (GDPR)

  • Consent (Art. 6(1)(a)): analytics and marketing cookies and B2B identification. You may withdraw consent at any time.
  • Legitimate interests (Art. 6(1)(f)): securing the Site, preventing fraud/abuse, and basic anti-spam, balanced against your rights.
  • Performance of a contract / pre-contract steps (Art. 6(1)(b)): responding to your trial, support, or information requests.
  • Legal obligation (Art. 6(1)(c)): where processing is required to comply with applicable law.

6. How we share information

  • Service providers acting on our behalf under contract (e.g., Google for analytics/tag management, HubSpot for CRM/marketing, ZoomInfo for B2B identification, hosting and security providers).
  • Professional advisers, and authorities where required by law or to protect our rights.
  • In connection with a corporate transaction (e.g., merger or acquisition), subject to appropriate safeguards.

We do not sell personal information for money. Some US state laws define “sale” or “sharing” broadly to include certain advertising/analytics cookie activity; where that applies, you may opt out.

7. International data transfers

We are based in the United States, and our providers (including Google, HubSpot, and ZoomInfo) process data in the United States and potentially other countries. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the EU-US Data Privacy Framework (and its UK and Swiss extensions) where applicable, and/or Standard Contractual Clauses. You may request more information using the contact details in Section 12.

8. Managing your consent

You can accept or decline categories of cookies when you first visit the Site and change your preferences at any time by [reopening the cookie banner / clicking “Cookie settings” in the footer]. Declining analytics and marketing cookies will not affect your ability to submit forms or contact us.

9. Your privacy rights

9.1 EEA / UK / Switzerland (GDPR)

You have the right to access, rectify, erase, restrict, or object to processing; to data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.

9.2 US state privacy rights

Depending on your state of residence, you may have the right to know, access, correct, and delete personal information, to opt out of targeted advertising and any “sale” or “sharing” of personal information, and not to be discriminated against for exercising these rights.

9.3 How to exercise your rights

Contact us at privacy@primefactors.com. We will verify your request and respond within the timeframe required by applicable law. You may use an authorized agent where permitted.

10. Data retention

We retain personal information only as long as necessary for the purposes described here, to comply with legal obligations, resolve disputes, and enforce agreements. Analytics data is retained per our configured limits (currently [2 months] in GA4). Form submissions are retained as long as communication can be sustained and then deleted or anonymized.

11. Security, children, and third-party links

  • Security: we maintain administrative, technical, and physical safeguards appropriate to the risk. No method of transmission or storage is completely secure.
  • Children: the Site is not directed to children under 16, and we do not knowingly collect their personal information.
  • Third-party links: the Site may link to third-party sites we do not control; their privacy practices are their own.

12. Changes and how to contact us

We may update this policy from time to time. Material changes will be indicated by updating the “Last updated” date and, where appropriate, by additional notice. Questions or requests: privacy@primefactors.com, or Prime Factors, Inc., 1400 Executive Pkwy, Suite 100, Eugene, OR 97401, USA.

Last updated: July 2026

linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram