Acme Privacy Statement

Last updated September 15, 2026

1. What This Statement Covers

This statement explains what Acme, Inc. and the companies it controls (“Acme,” “we” or “us”) do with personal information gathered through our websites, events, sales conversations, recruiting and other everyday business dealings (together, our “Business Activities”). It is referred to below as the “Statement”. It does not describe how customers handle data inside the Acme services they license; the customer’s contract with Acme sets the rules for that data, and questions about it should go to the customer first.

The Statement covers every Acme website and Business Activity that points to it. Where we show you a more specific notice at the point of collection, or a site has its own statement, that notice controls for the matter it addresses. We revise the Statement occasionally, and the date at the top of this page always shows which version is current.

2. Information We Gather

• What counts as personal information. Any detail that identifies a person or could reasonably be tied back to one, for example a name, a work or home address, an email, login credentials, stated preferences or a public social profile. Data that we connect to such details is treated the same way.
• Details you provide. Whenever you complete a form, book a demo, raise a support request, apply for a job, subscribe to a newsletter, register for a course or contact us directly, we keep what you send.
• Details gathered as you browse. Our sites, and partners working with us, rely on cookies, tags, web beacons and log files to note things like the device and browser you use, your network address, the pages you open and the links you follow. This tells us how the sites are performing and helps us show relevant material. Section 7 has more on these tools.
• Details from third parties. Partners, resellers, co-hosts of events and publicly available sources sometimes pass us business contact data, which we may merge with records we already have so they stay correct.
• Details about someone else. When you share another person’s information with us, such as when introducing a coworker, you promise you have the right to do that. That person may tell us to stop reaching out at any point.

3. Why We Use It

Typical reasons we use personal information include:

• Running, securing and improving our sites, help channels and Business Activities;
• Handling purchases, invoices, billing and payment collection;
• Setting up, verifying and managing user accounts;
• Sending notices about the service, its security or the status of your account;
• Sending promotional messages in line with the choices you have made;
• Tailoring the content and offers we show on our sites;
• Assessing job candidates and running our recruiting and hiring process;
• Arranging meetings and following up on our conversations afterwards;
• Delivering newsletters, training courses and certification tests;
• Other lawful business purposes, and meeting the legal duties that apply to us.

4. Who We Pass It To

Acme does not trade personal information for money or other valuable consideration, which is how privacy laws define a sale. We do pass it to others where our Business Activities call for it, as outlined here.

• Acme group companies. Our subsidiaries and affiliates may store or work with the information for us.
• Vendors. Companies we hire to host sites, measure traffic, take payments, ship orders, run IT, send email, help with marketing or check our books handle information only as we direct.
• Channel partners. When you reach us through a reseller or partner, we may pass your details back to them, and they may contact you about offerings of their own.
• Business deals. Information may change hands if Acme merges, is acquired, raises funds, restructures or sells some or all of its assets.
• Law and protection. We may hand information to courts, agencies or police where legally required, or where needed to shield Acme, our partners, our users or the public from harm.
• When you agree. We may share information in additional ways after explaining the plan to you and getting your permission.
• Summary data. We may share statistics or other data stripped of anything that could point back to you.

If you would rather we not pass your details to partners for their own marketing, email privacy@acme.example.

5. Retention

We hold on to personal information for as long as the original purpose requires, and beyond that only where tax, accounting, reporting or other legal rules oblige us, or where we need it to resolve disputes, protect our business or enforce contracts. Records we no longer need are deleted or anonymized on a regular schedule.

When deciding how long to keep a record, we look at how much data it holds, how sensitive it is, the harm that misuse could cause, whether the goal could be met with less, and any legal minimums. We review these periods from time to time and shorten them where we can.

6. Security

We apply a mix of physical, organizational and technical measures meant to stop personal information from being reached, used or revealed without permission, and our suppliers must do likewise. Access to systems holding personal information is limited to staff who need it for their role. Still, no network or storage system is perfectly safe, and we cannot guarantee that your information will never be exposed.

7. Cookies and Tracking Tools

Cookies, tags, embedded links and comparable tools let us read the routine details any browser shares, like its type, your network address and the pages you load, which we use to make our sites easier to use, faster and more relevant to you.

Certain pages embed widgets run by other companies. Whatever those widgets record falls under the privacy terms of the business that operates them.

At the moment our sites ignore “Do Not Track” browser settings. Should that change, this page will say so. You can still block or delete cookies through your browser settings at any time.

8. Outside Sites and Public Forums

Links on our sites can take you to services Acme does not operate. Those services follow their own privacy rules, which you should review before sharing anything with them.

Posts you make in forums, community spaces or comment sections on an Acme site can be seen by anyone. Email privacy@acme.example if you want your personal details taken down from one of those spaces. We will try, but it is not always technically feasible, for example where others have already copied or quoted your post.

9. Cross-Border Processing

Because Acme works with people in many countries, information about you may be stored or handled in the United States or elsewhere, under rules that might not match those of your home country. To the extent the law permits, using our sites means you agree to that. Wherever information travels, we protect it as this Statement describes.

• Grounds for processing. We rely on contract performance, our legitimate business interests or your consent when handling information for our websites and other Business Activities.
• Who decides. For data Acme controls, like website analytics or marketing lists, contact privacy@acme.example. For data we handle on a customer’s behalf, such as content in an Acme workspace your employer runs, the customer is in charge and requests go to them.
• Confirming it is you. We may ask for your name, email address, employer and location before acting on a request.

10. Choices and Rights by Region

A. Europe, the United Kingdom and Switzerland

Data leaving the European Economic Area is protected by standard contract terms that regulators have approved. Section 11 explains the transfer framework Acme has joined.

People living in the EEA, the UK or Switzerland may additionally:

• Object to how we use their personal data, or ask us to limit that use;
• Get a copy of their data in a portable, machine-readable format;
• Take back consent whenever they like, which does not undo past processing;
• Lodge a complaint with the data protection regulator in the country where they live.

Send these requests to privacy@acme.example or by post to Acme, Inc., Attn: Privacy Team, 100 Market Street, San Francisco, CA 94105, USA.

Where a complaint concerns data that came from these regions, we cooperate with the competent regulators to settle it, and we will tell you how your complaint is progressing.

B. California

State privacy law gives California residents the following options:

• Access: ask which pieces of personal information we gathered about you over the past year, where they came from, why we used them and what types of recipients received them.
• Deletion: ask us to erase information we got from you, apart from what the law lets us keep, for example to finish a transaction or look into security events.
• Correction: ask us to fix details about you that are wrong or incomplete.
• Limit ad sharing: tell us not to share your information for ads targeted across other companies’ sites and apps.
• Equal treatment: using any of these options will never lead to worse service or pricing.

Marketing disclosures. California residents may ask once each year, at no cost, which outside companies received their personal information for those companies’ own marketing during the prior year, and what kinds of information were involved.

Send these requests to privacy@acme.example or by post to Acme, Inc., Attn: Privacy Team, 100 Market Street, San Francisco, CA 94105, USA.

We do not sell data. Acme has never sold personal information, including during the past year. Our customers are businesses rather than individual consumers, and we do not intentionally gather information from anyone under 16.

Types of personal information handled over the past year:

Requests can be sent to privacy@acme.example. Someone else may file a request for you if you sign a written authorization or they hold a valid power of attorney; we may check their mandate and confirm the request with you directly before releasing any information.

C. Brazil

Residents of Brazil have rights under the country’s general data protection law (LGPD). Within the limits that law sets, you can ask us for:

• Confirmation of whether or not we handle your personal data;
• Access to a copy of the personal data we hold about you;
• Updates to any data about you that is missing, wrong or stale;
• Anonymizing, blocking or erasing data that is excessive, not needed or handled unlawfully;
• Moving your data to another provider when you expressly ask, while respecting trade secrets;
• Erasing data we hold on the basis of consent, unless the law requires us to keep it or we need it for legal claims;
• A list of the public and private bodies that have received your personal data;
• An explanation of your option to refuse consent and what happens if you decline;
• An easy, free way to take back your consent at any point;
• A human review of decisions made purely by automated means that affect you;
• An explanation of the logic behind automated decisions, while respecting trade secrets.

Send these requests to privacy@acme.example or by post to Acme, Inc., Attn: Privacy Team, 100 Market Street, San Francisco, CA 94105, USA.

11. Transfer Framework

For data sent from the European Union, the United Kingdom and Switzerland to the United States, Acme participates in a recognized data privacy framework and applies its principles to everything received under it for as long as we keep that data.

Should anything in this Statement contradict those principles, the principles prevail. Details about the framework, our certification and the scope of our participation are published on the program’s official site.

Arbitration. If the framework’s other complaint channels leave an issue unresolved, you may be able to take it to binding arbitration.

Oversight. A national regulator has authority to investigate Acme and to enforce its compliance with the framework.

Sharing onward. When we pass framework data to other companies, Acme stays accountable under contract unless it can prove it was not responsible for the harm.

12. Reaching Us

Send questions, correction requests or other privacy matters to:

Email: privacy@acme.examplePost: Acme, Inc., Attn: Privacy Team, 100 Market Street, San Francisco, CA 94105, United StatesPrivacy officer: Privacy Office, Legal Department

Expect an acknowledgment and a full reply within 45 days, or faster if local law sets a shorter deadline. If we need more time, we will explain why and say when to expect an answer.

13. Updates

When we change this Statement, the new text will appear here with a revised date. If you keep using our sites after that, the updated version applies to you, so it is worth checking back now and then. Where a change is significant, we may also notify you by email or with a notice on our sites.