Privacy Policy

KAPION d.o.o. (registration number 1683438000, VAT ID SI32880227), a company registered in Slovenia at Kocljeva ulica 16, 9000 Murska Sobota, operates the website sweatyoutreach.com under the brand name SweatyOutreach ("we," "us," or "our"). This Privacy Policy explains what information we collect, how we use and share it, and your rights regarding your personal information.

This policy applies to all visitors of our website and to clients who engage our services. SweatyOutreach is a service agency, not a software platform. We do not offer user accounts, do not process payments through the website, and do not operate a SaaS product. As an EU-based company, we are directly subject to the General Data Protection Regulation (GDPR).

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or engage our services.

We collect a limited amount of information, organized by how it is obtained:

Information collected automatically. When you visit our website, Vercel Analytics collects anonymized usage data such as page views, referral sources, browser type, device type, and approximate geographic region. Vercel Speed Insights collects web performance metrics including Core Web Vitals. This data is aggregated and does not identify individual visitors. Vercel may set essential cookies required for site functionality.

Information you provide directly. When you contact us via email, we receive your email address, name (if provided), and the content of your correspondence. During project consultations, you may provide your business name, industry, geographic area, marketing goals, and target audience details. For project execution, you may share brand assets such as logos, images, copy, and other materials. Billing information (such as bank details or payment references) may be shared through project agreements and invoices outside of the website.

Information from third parties. We do not currently purchase, receive, or collect personal information from data brokers, social media platforms, or other third-party sources.

We use the information we collect for the following purposes:

• Respond to your inquiries and provide customer support
• Plan, coordinate, and execute physical marketing campaigns on your behalf
• Share necessary project details with Local Partners (independent contractors who perform the physical work)
• Process invoices and manage billing for project engagements
• Analyze website traffic and performance using aggregated, anonymized data to improve our website
• Communicate with existing clients about project status and deliverables
• Comply with applicable legal obligations, resolve disputes, and enforce our agreements

We do not use your information for automated decision-making or profiling. We do not use your data to train artificial intelligence or machine learning models.

Local Partners. When you engage our services, we share project-relevant information (such as campaign details, delivery areas, and brand assets) with the independent contractors and service providers who execute your campaigns. These Local Partners include crews, artists, print shops, sign makers, street teams, event planners, and other service providers. They are instructed to treat your information as confidential and may only use your information for the purpose of performing work on your Project.

Service providers. We use Vercel to host our website and for analytics and performance monitoring. Vercel processes data in accordance with its own privacy policy and data processing agreements.

Legal requirements. We may disclose your information if required to do so by law, subpoena, court order, or government request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Business transfers. In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. Where practicable, we will endeavor to notify affected clients of any such transfer.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your data with advertising networks, data brokers, or analytics providers beyond Vercel as described above.

Our website uses minimal tracking technologies. Vercel Analytics and Vercel Speed Insights may use essential cookies for functionality and performance measurement. These are first-party cookies necessary for the operation of our website.

We do not use Google Analytics, Meta Pixel, advertising cookies, retargeting pixels, or any third-party tracking technologies. We do not engage in cross-site tracking, behavioral advertising, or build advertising profiles based on your browsing activity.

Because we only use essential cookies, we do not display a cookie consent banner. If we add non-essential cookies in the future, we will update this policy and implement appropriate consent mechanisms.

Where required by applicable law, we recognize Global Privacy Control (GPC) signals. We do not currently sell or share personal information as defined under applicable US state privacy laws.

We retain your information only as long as reasonably necessary for the purposes described in this policy:

• Email correspondence: Retained for the duration of the business relationship and up to 3 years afterward for record-keeping and potential follow-up engagements.
• Project data: Business information, brand assets, and campaign details are retained for 3 years after project completion.
• Billing records: Invoices and payment records are retained for 7 years to comply with tax and financial reporting obligations.
• Analytics data: Vercel retains anonymized analytics data according to its own retention policies. We do not independently store analytics data.

Where required by applicable law, you may request deletion of your personal information by contacting us at the email address provided in the Contact section. We will process deletion requests within the timeframe required by applicable law, subject to any legal obligations requiring continued retention.

We implement reasonable administrative, technical, and organizational measures to protect your information. Our website is served over HTTPS with TLS encryption and is hosted on Vercel's infrastructure, which maintains SOC 2 Type 2 certification.

Email communications are subject to the security measures of the email providers involved. Project files shared during engagements are handled with reasonable care to prevent unauthorized access.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee its absolute security.

Depending on your location, you may have certain rights regarding your personal information. The rights available to you are determined by the laws of your jurisdiction.

All users. You may contact us with questions about your personal information at any time by emailing us. We will respond to requests in accordance with the timeframes required by applicable law.

European Economic Area, United Kingdom, and Switzerland (GDPR). As KAPION d.o.o. is established in the EU, GDPR applies directly to all our data processing activities. Our legal bases for processing your personal information are: legitimate interests (website analytics, service improvement, fraud prevention), performance of a contract (service delivery, billing, project communications), and compliance with legal obligations (tax records, regulatory requirements). You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing. You also have the right to withdraw consent at any time where processing is based on consent. You may lodge a complaint with your local data protection authority. Our lead supervisory authority is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec). To exercise your rights, email rok@kapion.eu with the subject line "GDPR Request."

California residents (CCPA/CPRA). You have the right to know what personal information we collect and how it is used and shared. You have the right to request deletion of your personal information. You have the right to opt out of the sale or sharing of your personal information — we do not sell or share your personal information as defined under the CCPA. You have the right to non-discrimination for exercising your privacy rights. To submit a verifiable consumer request, email rok@kapion.eu with the subject line "CCPA Request."

Other US state residents. If you reside in Colorado, Connecticut, Virginia, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Rhode Island, or another state with a comprehensive privacy law, you may have similar rights to access, correct, delete, and opt out of certain processing activities. Contact us to exercise these rights and we will respond in accordance with applicable law.

KAPION d.o.o. is established in Slovenia (EU). However, our website is hosted on Vercel's global infrastructure, which may process data in the United States and other countries. Our Services are primarily delivered in the United States through Local Partners, which means project-related data may be transferred to and processed in the US.

For transfers of personal data from the European Economic Area to countries outside the EEA that have not received an adequacy decision from the European Commission, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) and Vercel's data processing agreements. You may request a copy of the safeguards in place by contacting us.

Our website and services are directed to businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at rok@kapion.eu and we will promptly delete that information.

Our website may contain links to third-party websites, services, or resources that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit. A link to a third-party website does not constitute an endorsement of that site or its practices.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make changes, we will update the "Effective Date" at the top of this page.

Your continued use of our website or services after the updated policy is posted constitutes acceptance of the changes.

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have any questions about this Privacy Policy, please contact us at:

KAPION d.o.o.
Kocljeva ulica 16, 9000 Murska Sobota, Slovenia
Registration number: 1683438000
VAT ID: SI32880227
Email: rok@kapion.eu

Supervisory authority: Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia), Dunajska cesta 22, 1000 Ljubljana, Slovenia