2CanTalks LLC (2CanTalks, we, us) respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and your choices and rights in relation to it. This Policy applies to www.2cantalks.com, to our Sprint, Pilot, and Scale services, and to our general business operations.
Contact: legal@2cantalks.com. Mailing address: 1309 Coffeen Avenue, STE 1200, Sheridan, WY 82801, United States. South African office: Durban, South Africa.
1. Who we are and our role
2CanTalks is a business-to-business sales development services provider. We act as a controller when we decide how and why to process personal information, such as information about our website visitors, prospects, and customers. We act as a processor when we process personal information on behalf of a Client under the Master Services Agreement and the Data Processing Agreement (Schedule B) or under the Pilot and Sprint Terms. Where we are a processor, the Client is the controller of that information and their privacy notice applies to the underlying data subjects.
2. Information we collect
We collect the following categories of personal information.
| Category | What we collect | Why |
|---|---|---|
| Website visitors | IP address, user agent, device information, pages viewed, referrer, approximate location, cookie identifiers. | Site operation, security, analytics, measuring marketing performance. |
| Prospects and enquirers | Name, business email, business phone, company, job title, message content, scheduling data. | Responding to enquiries, scheduling calls, issuing proposals, CRM record-keeping. |
| Customers and their contacts | Billing name and address, ops and billing contacts, payment method metadata (not full card number), business correspondence, campaign data, service usage records. | Delivering the Services, billing, support, account management, legal compliance. |
| Customer-provided end-contact data (processor role) | Names, business contact details, job roles, and interaction outcomes for persons targeted in Client campaigns. | Processed only on Client’s instructions under the Master Services Agreement and the Data Processing Agreement (Schedule B). Client is the controller. |
| Job applicants | Name, contact details, CV, work history, qualifications, references. | Recruitment and evaluation. |
We do not intentionally collect special categories of personal data (such as health, racial or ethnic origin, political opinions, religious beliefs, biometric data, or sexual orientation) and we ask Clients not to provide any. We do not collect information from children under 16 and our services are not directed at children.
3. Legal bases (EEA, UK, POPIA)
Where GDPR, UK GDPR, or POPIA applies, we rely on the following legal bases: (a) performance of a contract with you or steps taken at your request before entering into a contract, for customer and prospect information used to deliver the Services; (b) legitimate interests in operating and improving our business, securing our website and services, marketing our services to business contacts, and defending against claims, where those interests are not overridden by your rights; (c) consent, where required, for marketing communications and non-essential cookies; and (d) compliance with legal obligations, for tax, accounting, and regulatory purposes. Where we rely on legitimate interests, you have the right to object on grounds relating to your particular situation.
4. How we use information
We use personal information to: operate and secure www.2cantalks.com; respond to enquiries and schedule calls; deliver, administer, and improve our Sprint, Pilot, and Scale services; process payments and issue invoices; comply with legal, tax, and accounting obligations; send service communications and, with your consent or in reliance on a lawful exemption, marketing communications; analyse how our website and services are used; and defend against legal claims. Where we process information as a processor on a Client’s behalf, we use it only on that Client’s documented instructions.
5. Sharing and service providers
We share personal information with the following categories of recipient.
| Recipient | Purpose | Location |
|---|---|---|
| Stripe | Payment processing. | United States / Ireland. |
| Supabase | Application database and intake storage. | Region selected by 2CanTalks. |
| HubSpot | CRM and sales pipeline management. | United States / EU. |
| Google Workspace (Gmail, Calendar, Drive) | Business email, scheduling, document storage. | United States / EU. |
| agree.com | Contract delivery and e-signature for Scale tier. | United States. |
| Zapier | Workflow automation between the systems above. | United States. |
| Calendly | Meeting scheduling. | United States. |
| Cloudflare | DNS, CDN, security. | Global. |
| OVH | Website and application hosting. | Europe. |
| Analytics providers (Google Analytics, LinkedIn Insight, Meta Pixel as configured) | Measuring marketing performance. | United States and other locations. |
| Professional advisers (legal, accounting, insurance) | Advice, compliance, audit. | Various. |
We do not sell personal information. We do not share personal information for cross-context behavioural advertising except to the extent tracking is enabled by consent on our website.
6. International transfers
We operate from the United States and South Africa and work with service providers in the United States, the European Union, the United Kingdom, and elsewhere. Where we transfer personal information out of the EEA, the UK, or South Africa, we do so using Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism. A copy of the transfer mechanism applicable to a specific transfer is available on request.
7. Retention
We keep personal information for only as long as needed for the purposes described in this Policy and as required by law. Typical retention periods: website logs, up to 12 months; prospect records, 24 months from last engagement; customer account and billing records, 7 years from end of relationship for tax and accounting; marketing contact records, until you opt out plus a suppression record kept indefinitely. Information we process as a processor on a Client’s behalf is retained and deleted as set out in the Data Processing Agreement.
8. Security
We maintain technical and organisational measures designed to protect personal information against unauthorised access, use, alteration, and loss. These measures include access controls, multi-factor authentication on administrative systems, encryption of data in transit, encryption of data at rest in primary systems, logging and monitoring, confidentiality undertakings for personnel, and an incident response plan. No system is perfectly secure and we cannot guarantee the security of information transmitted over the Internet.
9. Your rights
Depending on where you live you may have rights in relation to your personal information, including the right to access a copy, correct inaccurate information, delete information, restrict or object to processing, withdraw consent, data portability, and to lodge a complaint with a supervisory authority. Residents of California have the right to know, delete, correct, and limit use of sensitive personal information, and the right not to be discriminated against for exercising their rights. Residents of the EEA and the UK may lodge a complaint with their local supervisory authority (in the UK, the Information Commissioner’s Office). Residents of South Africa may complain to the Information Regulator. To exercise any of these rights contact us at privacy@2cantalks.com. Where we process information on a Client’s behalf, please direct your request to that Client and we will support their response.
10. Cookies and tracking
We use cookies and similar technologies on our website. For details see our Cookie Policy. You can manage cookies via our cookie banner and your browser settings.
11. Marketing and communications
We may send marketing communications to business contacts where we have a legitimate interest or your consent. You can unsubscribe at any time using the link in any marketing email or by contacting privacy@2cantalks.com.
12. Third-party links
Our website may link to third-party sites. We are not responsible for their privacy practices and encourage you to review their policies.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be signalled by updating the effective date at the top and, where appropriate, by notice on the website or by email. The current version always applies to processing from its effective date.
14. Contact
Questions, requests, and complaints: privacy@2cantalks.com. Postal: 2CanTalks LLC, 1309 Coffeen Avenue, STE 1200, Sheridan, WY 82801, United States.