1. Scope

This Policy applies to:

• Information collected from Clients (agency owners and authorized representatives) who purchase or evaluate the Program.

• Information collected from employees of Client agencies who are invited to participate in the AW Survey.

• Information collected from visitors to the agencyworkplaces.com website.

2. Information We Collect

From Clients. Business information including company name, address, and contact details; authorized representative information including name, email, and role; payment information (processed by our third-party payment processor, not stored by us); and the employee roster (names and work email addresses) used for survey deployment.

From Employees of Client Agencies. A work email address used solely to deliver the AW Survey and reminders, and the employee's anonymous responses to AW Survey questions.

From Website Visitors. Standard website analytics data including IP address, browser type, pages visited, referral source, and cookie identifiers.

3. How We Use Information

Client Information is used to deliver the Program, communicate with Client about their account and certification status, process payments, and provide support.

Employee Roster Information is used exclusively to deploy the AW Survey and to send participation reminders during the open survey window. Employee email addresses are never used for marketing, recruiting, solicitation, or any purpose other than survey delivery.

AW Survey Responses are used to calculate the Culture Score, populate the dashboard available to Client, and inform light industry research as described in Section 6.

Website Analytics are used to understand traffic patterns and improve the website.

4. Employee Anonymity

The Company guarantees that all AW Survey responses are 100% anonymous. Specifically:

• Individual employee responses are never linked to identifiable employee information.

• The Company does not share, and will not share, any non-anonymized or individually identifiable response data with Client.

• Client receives only aggregated and de-identified results through the Client dashboard.

• Even when Client requests insight into specific responses, each response remains attached to anonymous identifiers only, never to a named employee.

5. Data Retention

Employee Email Addresses. Employee email addresses are deleted from our systems within thirty (30) days of the close of the AW Survey for that Program Year. After deletion, the Company has no record of which employees received the survey and cannot contact them for any purpose. This is an intentional design choice to ensure we cannot, and will not, use employee data for marketing, recruiting, or solicitation.

AW Survey Responses. Anonymized AW Survey responses are retained in our system to power the Client dashboard for the duration of Client's active engagement with the Program. This retention is what allows Client to review aggregated feedback and use it to improve their workplace culture. Responses are not linked to identifiable employee information at any point in this process.

Client Data. Client business and contact information is retained for as long as Client remains an active member of the Program, and for a reasonable period afterward for tax, legal, and historical recognition purposes.

Removal Requests. Client may request removal of their AW Survey response data at any time by writing to support@agencyworkplaces.com. Removal of the underlying data set terminates Client's access to the dashboard for that Program Year. Aggregated and fully de-identified data already incorporated into industry research cannot be retroactively removed but contains no identifying information about Client or any individual.

6. Aggregated Industry Research

The Company may use aggregated, fully anonymized data from across all AW Surveys to produce light industry research and benchmarks. The intent of this research is to surface high-level patterns about workplace culture in the agency industry, such as how different roles, agency sizes, or regions trend on certain culture dimensions.

We commit to the following:

• We do not name, identify, or single out any specific Client or agency in research output.

• We do not publish data in any form that could reasonably be used to identify a specific company, location, or individual.

• We do not sell raw, identifiable, or commercially sensitive data to any third party.

• We do not provide data to vendors, recruiters, or competing agencies in a way that could be used to recruit from, undercut, or otherwise act against participating agencies.

If Client prefers that fully anonymized response data from their Program Year not be included in aggregated industry research, Client may opt out at any time by writing to support@agencyworkplaces.com.

7. What We Do Not Do

For clarity, the Company does not:

• Sell employee or Client data to any third party.

• Use employee email addresses for marketing, recruiting, promotional, or solicitation purposes.

• Share data with vendors, recruiters, or competing agencies in a way that could disadvantage participating agencies.

• Use Client data against Client in any commercial or competitive way.

• Provide identifying information about employees or their individual responses to Client, even on request.

8. Sharing With Third Parties

We share information with third parties only as follows:

• Service Providers: payment processors, email delivery providers, hosting providers, and analytics providers receive only the data necessary to perform their function and are contractually required to handle it securely.

• Recognized Clients: aggregated, anonymized survey results from a Client's own Program are shared with that Client through the dashboard.

• Legal Requirements: we disclose information when required by law, subpoena, or court order, or when necessary to enforce our Terms & Conditions.

9. Cookies and Tracking Technologies

The agencyworkplaces.com website uses cookies and similar tracking technologies to operate the site, understand traffic patterns, and improve the visitor experience. We use three categories of cookies. Essential cookies are required for the site to function and cannot be disabled. Analytics cookies (such as those set by Google Analytics) help us understand how visitors use the site, including pages viewed, session duration, and referral source. Marketing cookies, if used, support remarketing and audience measurement on third-party advertising platforms.

Visitors may disable cookies through their browser settings. Disabling essential cookies may affect site functionality. Visitors in the European Economic Area, the United Kingdom, and California will be presented with a cookie consent banner on first visit and may decline non-essential cookies at that time. Visitors may change their preferences at any time by clearing browser cookies and reloading the site.

The Company does not sell cookie data to third parties. Cookie data is used solely for the purposes described in this Policy.

10. Data Security

The Company maintains administrative, technical, and physical safeguards designed to protect the information we collect from unauthorized access, disclosure, alteration, or destruction. No system is perfectly secure, but we apply industry-standard protections appropriate to the sensitivity of the data we handle.

11. California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we have collected about you.

• The right to request deletion of your personal information.

• The right to opt out of any sale or sharing of personal information.

• The right not to be discriminated against for exercising these rights.

The Company does not sell personal information. To exercise your rights, write to support@agencyworkplaces.com.

12. International Transfers

The Program is offered internationally. If Client or its employees are located outside the United States, including in the European Economic Area or the United Kingdom, Client acknowledges that personal information may be transferred to and processed in the United States, where data protection laws may differ from those in the location of residence. We apply the protections described in this Policy regardless of where data is processed.

13. Children's Information

The Program is intended for use by businesses and their adult employees. The Company does not knowingly collect information from individuals under the age of eighteen (18).

14. Updates to This Policy

The Company may update this Policy from time to time. Material updates will be communicated to active Clients by email and posted on the Company website. The "Last Updated" date at the top of this Policy reflects the most recent revision.

15. Contact

Questions about this Policy, or requests to exercise privacy rights, should be sent to:

Agency Workplaces, LLC

Email: 📧 support@agencyworkplaces.com