Sparkworks Back to home

Privacy Policy

LAST UPDATED OCTOBER 14, 2026

This Privacy Policy explains how KSPARK WORKS LLC, doing business as Sparkworks ("Sparkworks," "we," "us"), collects, uses and shares personal information when you visit sparkworks.co, sparkworks.ai and any page that links to this policy (the "Site"), book a consult, or otherwise contact us. KSPARK WORKS LLC is a Georgia limited liability company and is the controller of the personal information described here.

This policy does not cover data we process for clients under a statement of work, master services agreement, data processing agreement or business associate agreement. That data is handled under the terms of the relevant client contract, and our clients' own privacy notices apply to it.

1. Information we collect

Information you give us. When you book a consult, email us, or contact us in another way, we collect what you provide: typically your name, work email, company, job title, phone number, and anything you write about your project. Please do not send us protected health information, patient data or other sensitive personal information through the Site or by email unless we have first agreed in writing on how it will be handled.

Information collected automatically. When you visit the Site, our hosting provider automatically records technical data in server logs, such as IP address, browser and device type, operating system, referring page, the pages requested, and approximate location derived from IP address. The interactive demos and case studies on the Site run on synthetic data and do not ask for personal information.

Information from others. We may receive your business contact details from a colleague who introduces you, from event organizers, or from public professional sources such as your company website or LinkedIn profile.

2. How we use information

We use personal information to:

  • respond to inquiries and schedule and hold consults;

  • evaluate, propose and deliver our services, and manage our business relationship with you or your organization;

  • send you updates about our work where you have asked for them or where the law otherwise allows, with an opt-out in every message;

  • operate, secure, debug and improve the Site;

  • detect, prevent and respond to fraud, abuse and security incidents; and

  • comply with legal obligations and enforce our agreements.

We do not use information collected through the Site to make decisions about you based solely on automated processing that produce legal or similarly significant effects. We do not use personal information submitted through the Site to train AI models.

3. Legal bases (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: contract, to take steps at your request before entering into an engagement and to perform it; legitimate interests, to run and secure the Site, respond to business inquiries and develop business relationships, where those interests are not overridden by your rights; consent, for certain marketing communications, which you can withdraw at any time; and legal obligation, where the law requires us to keep or disclose information.

4. How we share information

We do not sell personal information for money. We share it only with:

  • Service providers that process it on our behalf under contract, including Vercel, which hosts the Site; Google, which provides our email and calendar through Google Workspace and handles consult bookings through Google Calendar appointment scheduling; and IT, security and communications tools;

  • Contractors and advisors who work with us on an engagement or on our business, bound by confidentiality obligations;

  • Professional advisors such as lawyers, accountants and insurers;

  • Authorities and others where required by law, legal process or to protect the rights, safety and property of Sparkworks, our clients or others; and

  • A successor in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business, subject to this policy.

We may share aggregated or de-identified information that cannot reasonably identify you.

5. Cookies

The Site uses only strictly necessary technology. Our hosting provider, Vercel, delivers the Site, balances load and protects it against attacks, and sets cookies only as needed to do so. We do not use analytics, advertising or session-recording cookies, and we do not track you across other sites. You can block or delete cookies in your browser; the Site will still work.

The booking link opens Google Calendar, which is governed by Google's own privacy policy and cookies.

6. How long we keep information

We keep personal information only as long as needed for the purposes above. Inquiry and consult records that do not lead to an engagement are generally kept for up to 3 years from our last contact. Records relating to an engagement are kept for the life of the relationship plus the period required for legal, tax and contractual purposes, generally up to 7 years. Server logs are kept for the periods Vercel's service sets. We then delete or de-identify the information.

7. How we protect information

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access controls based on least privilege, multi-factor authentication on business systems, and written information-security policies aligned to recognized frameworks. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International transfers

Sparkworks is based in the United States, and our service providers and contractors may process information in the United States and other countries, including India. Where we transfer personal information from the EEA, UK or Switzerland to a country without an adequacy decision, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or rely on a recipient's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You may request a copy of the relevant safeguards by contacting us.

9. Your rights and choices

Everyone. You can unsubscribe from marketing emails using the link in the message or by emailing us. You can ask us to update or delete the information you have given us.

EEA, UK and Switzerland. You have the right to access, correct, delete, restrict or object to our processing of your personal information, to data portability, and to withdraw consent at any time without affecting earlier processing. You have an absolute right to object to direct marketing. You may lodge a complaint with your local data protection authority, or in the UK with the Information Commissioner's Office; we would welcome the chance to address your concern first.

U.S. states. Depending on where you live (including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with comprehensive privacy laws), you may have the right to know what personal information we have collected about you and how we use it, to access and receive a copy of it, to correct it, to delete it, and to opt out of its sale, its sharing for cross-context behavioral or targeted advertising, or its use for profiling. We do not sell personal information for money, and we do not share it for cross-context behavioral or targeted advertising. We do not use or disclose sensitive personal information for purposes that require an opt-out right, and we will not discriminate against you for exercising your rights.

How to make a request. Email info@sparkworks.co with the subject line "Privacy request" and tell us which right you want to exercise. We will verify your identity using information we already hold, usually by confirming control of the email address we have on file. You may use an authorized agent; we may ask for proof of the agent's authority and verify your identity directly. We respond within the time the applicable law requires, generally 30 days under GDPR and 45 days under U.S. state laws, with extensions where the law allows. If we deny your request, you may appeal by replying with "Appeal" in the subject line; we will respond to appeals within the time required by law, and if you remain dissatisfied you may contact your state attorney general.

10. California notice at collection

In the past 12 months we have collected these categories of personal information under the California Consumer Privacy Act: identifiers (name, email, IP address); professional or employment information (company, title); internet or network activity (pages requested and referring page, in server logs); and geolocation inferred from IP address. Sources, purposes, recipients and retention are described in Sections 1, 2, 4, 5 and 6. We do not sell or share these categories. We do not knowingly collect sensitive personal information through the Site.

11. Children

The Site is intended for business professionals and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Links to other sites

The Site links to third-party sites and services, including Google Calendar and the sites of ventures we work with. Their privacy practices are governed by their own policies, not this one.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date and, if the changes are material, give additional notice such as a notice on the Site or an email.

14. Contact us

KSPARK WORKS LLC (Sparkworks) Email: info@sparkworks.co