Privacy Policy

Premium Blend LLC (“Premium Blend,” “we,” “us”) operates premium-blend.com. This policy explains what personal information we collect through the site, why, who we share it with, and the choices and rights you have.

Effective date: September 16, 2026   Last updated: September 16, 2026

This policy covers the website. It does not cover the consulting services we deliver under contract to client organisations — for that work we act on our clients’ instructions, under the terms of the relevant agreement.

1. Quick summary

• We collect contact details you submit through our forms, plus technical and usage data collected automatically.
• If we contacted you first, your business contact details most likely came from Apollo.io, a business-contact data provider. You can ask us to stop at any time and we will.
• We use advertising and retargeting technologies from Meta and LinkedIn. These place cookies and send information about your visit to those companies.
• Under California law, this is a “sale” and a “share” of personal information. You can opt out at any time — see section 7.
• In the EEA, the UK and Switzerland, advertising cookies stay off until you allow them.
• We honour the Global Privacy Control browser signal automatically.
• We do not sell personal information for money.

2. Information we collect

2.1 Information you give us

Collected directly from you

2.2 Information collected automatically

Collected from your device

2.3 Information from other sources

• Apollo.io supplies us with business contact information about people who may have a professional interest in our services: name, work email address, job title, employer, company size and industry, and links to public professional profiles. Apollo compiles this from public sources and its own data partners. We use it to identify and approach people in their professional capacity, about our consulting services.
• Meta and LinkedIn may return aggregated campaign reporting to us, and may match your visit to an account you hold with them.
• HubSpot hosts some of our gated content on its own domain. When you download a white paper or case study, HubSpot collects your submission and passes it to us.
• Public sources — company websites and public professional profiles, where we are researching a prospective client.

If we contacted you first and you have not dealt with us before, your details most likely reached us through Apollo or from a public professional profile. You can ask us what we hold and where it came from, ask us to correct it, or tell us to stop contacting you — see section 7. Every prospecting email we send identifies us, gives our postal address, and carries a working unsubscribe link, which we act on.

2.4 What we do not collect

We do not knowingly collect Social Security numbers, government ID numbers, financial account numbers, precise geolocation, biometric or health data, or information about racial or ethnic origin, religion, political opinions, sexual orientation or union membership. Please do not send these to us through the site.

3. Why we use your information, and our legal basis

For visitors in the EEA, the UK and Switzerland, the GDPR requires a legal basis for each use. This table gives both.

Purpose, data used, and lawful basis

Where we rely on consent you can withdraw it at any time. Withdrawing does not affect the lawfulness of anything we did before you withdrew.

4. Who we share your information with

We do not sell your personal information for money. We do share it as set out here.

Recipients and what they receive

4.1 Joint controllership with Meta

For the collection of personal data through the Meta Pixel and its transmission to Meta, Premium Blend and Meta Platforms Ireland Limited act as joint controllers under Article 26 GDPR. This follows from Meta’s own Controller Addendum, part of the Meta Business Tools Terms.

In practice:

• We are responsible for having a legal basis for the collection and transmission — your consent — and for giving you this notice.
• Meta is responsible for what it does with the data afterwards, and for honouring your rights in respect of that processing.
• You can exercise your rights against either of us. Meta has agreed to be the contact point for its own processing; you can also contact us and we will pass the request on.

The LinkedIn Insight Tag operates on a similar basis. LinkedIn Ireland acts as a controller for the analytics and advertising processing it carries out using data collected through the tag.

5. California privacy disclosures

This section applies to California residents, under the CCPA as amended by the CPRA.

5.1 What we collect, why, and who receives it

Categories under Cal. Civ. Code § 1798.140

5.2 Where we get it

California law requires us to tell you the categories of source we collect personal information from. They are:

Categories of sources, Cal. Civ. Code § 1798.110(c)(2)

5.3 Selling and sharing

We do not sell personal information for money.

We do share personal information for cross-context behavioural advertising. We allow Meta and LinkedIn to collect identifiers and internet activity through their pixels so they can measure our advertising and show our ads to relevant audiences. Under California law this counts as both a “sale” and a “share,” and you have the right to opt out.

Categories shared: identifiers, internet or network activity, approximate geolocation, and inferences. Categories of recipient: advertising networks and social media platforms — currently Meta and LinkedIn.

We began sharing these categories on 19 August 2026, the date the Meta Pixel and the LinkedIn Insight Tag were first activated on this site. In the twelve months before that date we did not sell or share personal information.

We do not knowingly sell or share the personal information of consumers under 16. See section 9.

6. Cookies and tracking

6.1 Strictly necessary

Required for the site to work and for us to record your privacy choices. These cannot be turned off.

Strictly necessary — always active

6.2 Advertising and targeting

Used to measure our advertising and show you our ads. These stay off unless you allow them, and off entirely if you send a Global Privacy Control signal.

Advertising — off by default in the EEA, UK and Switzerland

Gated content hosted by HubSpot

Our white papers and case studies are hosted by HubSpot on a separate domain. Visiting one of those pages sets HubSpot’s own cookies — hubspotutk, __hstc, __hssc and __hssrc — which identify your browser so submissions can be attributed.

6.3 Your choices

• The banner. In the EEA, the UK and Switzerland, advertising cookies stay off until you press Allow. Elsewhere you can turn them off at any time.
• Cookie Settings in the footer of every page reopens the banner.
• Do Not Sell or Share My Personal Information in the footer of every page turns advertising cookies off immediately.
• Global Privacy Control. If your browser or extension sends a GPC signal we treat it as an opt-out automatically, on every page. We show a confirmation so you know it was received.
• Your browser. You can block or delete cookies in your browser settings.
• At the platforms. Meta and LinkedIn offer their own ad settings, and industry opt-out tools are at optout.aboutads.info and youronlinechoices.eu.

6.4 Bot protection, fonts and content delivery

Our forms are protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a script. It receives your IP address and information about your browser and device. It is a security measure, not an advertising technology.

The site also loads fonts and code libraries from Google Fonts, Cloudflare, jsDelivr and Amazon CloudFront. These receive your IP address as a technical necessity of delivering those files.

7. Your rights and choices

7.1 Under the GDPR — EEA, UK, Switzerland

• Access — a copy of the personal data we hold about you, and how we use it.
• Rectification — correction of inaccurate or incomplete data.
• Erasure — deletion, in the circumstances the law provides for.
• Restriction — to limit how we use your data while a question about it is resolved.
• Portability — a copy in a structured, machine-readable format.
• Objection — to processing based on legitimate interests, including our prospecting, and at any time and without giving a reason, to direct marketing.
• Withdraw consent — at any time, without affecting what was lawful before.
• To be told where we got your data — if we did not collect it from you directly, you can ask which source it came from.
• Complain to a regulator — see 7.7.
• Automated decision-making — we do not make decisions producing legal or similarly significant effects about you by automated means.

7.2 Under California law

• Know — the categories and specific pieces of personal information we collected, the sources, purposes, and categories of recipient.
• Delete — subject to the exceptions in the Act.
• Correct — inaccurate personal information.
• Opt out of sale and sharing — see 7.3.
• Limit the use of sensitive personal information — we do not collect it.
• Non-discrimination — we will not deny you services, charge a different price, or give you a lesser quality of service because you exercised a privacy right.
• Authorised agent — see 7.6.

Residents of other US states with comprehensive privacy laws — Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana — have broadly equivalent rights, and we handle those requests the same way.

7.3 How to opt out of sale and sharing

Any of these works, and each genuinely stops the advertising technologies from running rather than merely recording a preference:

• Do Not Sell or Share My Personal Information in the footer of every page.
• Global Privacy Control — detected and honoured automatically.
• Emailprivacy@premium-blend.com.

This right is not conditional. It applies whether or not we receive money, and covers both selling and sharing as California defines them. Because these choices are stored on the device you make them on, you will need to make them again on another browser or device.

7.4 How to stop us contacting you

If we have approached you about our services and you would rather we did not, use the unsubscribe link in the email, or write to privacy@premium-blend.com. We will stop, and we will keep the minimum record needed to make sure we do not contact you again by mistake. You do not have to give a reason.

7.5 How we respond, and how long we take

Response windows

Verification. Before acting on an access, deletion or correction request we need to be reasonably sure it is you. We will usually ask you to confirm details we already hold. We will not create an account or collect new categories of information just to verify you. Opt-out requests do not require verification.

7.6 Authorised agents

You can appoint someone to make a request for you. We will ask for written permission signed by you or a valid power of attorney, and verification of your own identity directly with us.

7.7 Complaints

Please raise it with us first — we would rather fix it. You also have the right to complain to a regulator: in the EEA, your national supervisory authority (edpb.europa.eu); in the UK, the Information Commissioner’s Office; in Switzerland, the FDPIC; in California, the California Privacy Protection Agency or the Attorney General.

8. How long we keep information

We keep personal information only as long as we need it, or as long as the law requires.

Retention by data type

9. Children

This is a business-to-business website. It is not directed at children and we do not knowingly collect personal information from anyone under 16.

Under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we delete it promptly.

Ages 13 to 16. We do not knowingly sell or share the personal information of consumers we know to be between 13 and 16 without their affirmative authorisation, or of a consumer under 13 without a parent or guardian’s. We do not have actual knowledge that we sell or share the personal information of consumers under 16.

10. Security and data breaches

We take reasonable and appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction. These include encryption in transit, access controls limiting staff access to what they need, and reliance on established platform providers for hosting and CRM.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10.1 If a breach happens

• Regulators, GDPR. Where a breach is likely to result in a risk to people’s rights and freedoms, we notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware.
• Individuals, GDPR. Where a breach is likely to result in a high risk to your rights and freedoms, we tell you without undue delay. The 72-hour deadline applies to regulators, not to individual notifications.
• California. Where a breach affects California residents’ personal information as defined by Cal. Civ. Code § 1798.82, we notify affected residents in the most expedient time possible and without unreasonable delay, and notify the Attorney General where the numbers require it.

11. International transfers

We are based in the United States and our service providers are largely US-based. If you are in the EEA, the UK or Switzerland, your personal information will be transferred to and processed in the United States.

Our providers include Meta, Microsoft (LinkedIn), HubSpot, Webflow, Cloudflare, Google Workspace and Apollo, each of which processes personal information in the United States. We have data processing agreements in place with them.

• EU–US Data Privacy Framework, with its UK Extension and Swiss counterpart. Meta, Microsoft (LinkedIn) and HubSpot are each certified. Current certifications are verifiable at dataprivacyframework.gov.
• Standard Contractual Clauses and the UK International Data Transfer Addendum where a recipient is not certified.
• Supplementary measures where a transfer risk assessment identifies them as necessary.

12. Changes to this policy

We update this policy when our practices change or the law requires it. The effective date and last-updated date at the top always reflect the current version. For material changes we give prominent notice on the site before the change takes effect, and where the change requires it we will seek your consent again.

13. How to contact us

Premium Blend LLC

1716 N Clybourn Ave.
Burbank, CA 91505
Privacy enquiries: privacy@premium-blend.com
General enquiries: info@premium-blend.com

European and UK representative

Premium Blend does not offer goods or services to individuals in the European Economic Area or the United Kingdom, and does not monitor their behaviour. Our consulting services are offered to clients in the United States, our advertising audiences exclude the EEA and the UK, and we do not direct prospecting at people in those regions.

On that basis we have not appointed a representative under Article 27 of the GDPR or Article 27 of the UK GDPR.

If you are nonetheless in the EEA or the UK and have dealt with us, the rights set out in section 7.1 are available to you, and advertising cookies remain off on our site until you allow them. Write to privacy@premium-blend.com and we will handle your request under the same standards.