Website Privacy Policy

Haystack Needle LLC ("we," "our," or "us") respects your privacy and is committed to protecting the personal data we collect. This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit https://www.haystackneedle.com/ and its subpages (the "Site"), contact us about our services, or otherwise interact with us in connection with the Site.

This Privacy Policy does not cover personal information we process solely on behalf of a client under a service agreement, statement of work, or data-processing addendum.

1. Information We Collect

When you interact with our Site, we may collect information about you in the following ways:

  • Information You Provide Voluntarily: Contact information such as your name, email address, phone number, or company name when you fill out a contact form or request information about our services.

  • Information Collected Automatically: When you navigate our Site, we automatically collect basic technical data, such as your IP address, browser type, operating system, and referring URLs. On its own, this data does not natively display your name or direct contact details. However, as disclosed in Section 2, this technical data may be used by our partners to identify the business professionals visiting our site.

  • Our Identity Resolution Partner: Information you provide voluntarily and the business databases it matches against. 

We do not knowingly collect sensitive personal information through the Site or from children under 16.

2. Cookies and Tracking Technologies 

We use cookies, web beacons, and similar tracking technologies to analyze trends, administer the Site, track users’ movements around the Site, and gather demographic information about our user base as a whole.

Types of Cookies We Use: 

Strictly Necessary Cookies: These are essential for the basic technical operations of our Site. These cookies do not track your behavior or identify you for marketing.

Analytics and Performance Cookies: We utilize platform analytics (such as Squarespace metrics) to measure how visitors interact with our Site (e.g., scroll depth and clickstream activity), which pages are viewed most frequently, and how long visitors stay. This data helps us optimize performance. 

Identity Resolution and Advertising Pixels: We use RB2B, operated by Retention.com. When you visit our website from the United States, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or online profiles. We (or service providers on our behalf) may then send communications and marketing to these emails or profiles, which can include a professional profile, job title, and business contact information. We use it for internal market analysis and direct B2B networking about our own services. We do not sell the resolved record onward, and we do not give it to other clients. We treat that disclosure as a “share” under the CCPA, and it may also be a “sale” as the CCPA defines sale, even though we do not sell personal information for money. Other state laws regulate it as targeted advertising. The pixel is limited to traffic recognized as United States traffic. It is not used to identify a natural person in the EEA, the UK, or Switzerland.

3. How We Use Your Information

We may use the personal information collected via our Site for a variety of business purposes, including, without limitation, to:

  • Deliver, maintain, and improve our Site and marketing efforts

  • Respond to inquiries and offer client support

  • Identify business professionals and companies visiting our site for B2B sales and marketing outreach

  • Protect our systems and detect fraud

  • Comply with applicable legal obligations and enforce our terms

We do not text or autodial a number resolved by this tool without the consent telemarketing law requires. We do not use personal information for decisions that produce legal or similarly significant effects. We do not use sensitive personal information for purposes that require a “limit” right. We offer no financial incentive for personal information.

4. Sharing Your Information

We do not sell your personal data to third parties for their own marketing purposes. We may share information with:

  •  third-party vendors, service providers, contractors, or agents (such as identity resolution platforms) who perform services for us or on our behalf and require access to such information to do that work

  • governmental or legal authorities

  • relevant parties in corporate mergers or asset sales

5. Data Retention

We do not keep personal information indefinitely. Inquiries are kept for the conversation and then up to three years after the last meaningful contact. Analytics logs, up to 14 months. Security logs, up to 12 months. Identity-resolution matches, until opt-out or 24 months, whichever is first, unless the person is a client or an active prospect who asked us to keep talking. Opt-out records are kept long enough to honor them. Client-engagement records follow the contract and our professional retention rules.

6. Data Protection Rights

Residents of states with comprehensive privacy laws may request access, correction, deletion, and portability, and may opt out of sale, sharing, and targeted advertising. Any data subject (any natural person from whom we collect personally identifiable information) should be fully aware of all of their data protection rights, which are:

The right to access: a data subject has the right to request copies of their personal data, provided we may deny or charge a small fee for this service if a request is manifestly unfounded or excessive. 

The right to rectification: a data subject has the right to request that we correct any information which is inaccurate or incomplete.

The right to erase: a data subject has the right to request that we restrict the processing of the subject’s personal data, under certain conditions.

The right to object to processing: a data subject has the right to object to our processing of the subject’s personal data, under certain conditions.

7. How To Manage Your Preferences / Opt Out Options

You can manage or change your cookies or tracking preferences at any time through the cookie consent banner or widget available on our Site or through your browser settings. To explicitly remove your professional profile from being resolved or used within our third-party data network, you may permanently opt out at any time by visiting the secure opt-out portal at https://app.retention.com/optout. 

8. International Use and Data Transfer

We are based in the United States, and Site information is processed there. Person-level identity resolution is not used for visitors recognized as being in the EEA, the UK, or Switzerland. Where GDPR or UK GDPR applies, lawful bases are legitimate interests, steps prior to contract, consent where a tag requires it, and legal obligation. EEA, UK, and Swiss visitors may request access, correction, deletion, restriction, portability, and objection, and may complain to a supervisory authority. Transfers that require a mechanism use the Standard Contractual Clauses or the UK addendum. We do not charge a fee unless a request is manifestly unfounded or excessive.

9. Data Security

We use administrative, technical, and physical safeguards appropriate to the information and the risk. No method is perfectly secure. If a breach-notice statute applies, we will notify as that statute requires. This Privacy Policy does not waive a non-waivable duty.

10. Data Processors

We may engage Data Processors who:

  • Act under our documented instructions

  • Implement and follow security and confidentiality protocols

  • Do not sub-process without authorization or notice

  • Support User rights as required

  • Delete or return information at the end of service

Material Site vendors are Squarespace, Google if analytics is enabled, and Retention.com / RB2B. A sub-processor list is available on request.

11. Updates to This Privacy Policy

We may update this Privacy Policy without notice and provide a date of last update. Continued use after any effective date covers changes that do not require a fresh opt-in.

12. Contact

Haystack Needle LLC
2280 Eighth Avenue
New York, NY 10027
[email protected]

Opt out of identity resolution at https://app.retention.com/optout