SUITS & SANDALS

Legal

Privacy Policy

Effective date: September 12, 2026. Last updated: September 12, 2026.

Suits & Sandals LLC ("Suits & Sandals", "we", "us", "our") operates suits-sandals.com. This policy explains what personal information we collect when you visit the site or get in touch, why we collect it, who we share it with, and the choices and rights you have.

1. Who we are

Suits & Sandals LLC is the controller of the personal information described here. We are a limited liability company with a registered business address at 240 Kent Ave, Brooklyn, NY 11249, United States. We have been a fully remote company since 2019. For any question about this policy or your personal information, email hello@suits-sandals.com.

2. What this policy covers

This policy covers suits-sandals.com, including the contact and project inquiry forms, the newsletter, and Ask, our AI assistant. It does not cover personal information we process on behalf of a client under a signed services agreement, where the client decides how that information is used and its own privacy policy applies. It also does not cover third-party sites we link to.

3. Information we collect

Information you give us

  • Contact and project inquiries: your name, email address, company name, company website, the capabilities you are interested in, your budget range, your timeline, your message, and the page you submitted the form from.
  • Newsletter signup: your email address, your name if you give it, and the list you joined. Every subscription is confirmed by email before we send anything, and we record when you confirmed and when you unsubscribed.
  • Questions you type into Ask: the text of the question, the page you asked it from, and the conversation it belongs to.
  • Anything else you choose to send us, including email and attachments.

Information collected automatically

  • Technical data from your device and browser: IP address, browser and operating system, the pages and media you request, the page that referred you, and timestamps. Our servers use your IP address to apply rate limits and to protect the site from abuse.
  • Approximate location at country level, derived from your IP address. We use it only to decide whether business identification (section 3.4) applies to your visit.
  • Cookies and similar browser storage, described in section 4.

Analytics and session replay

If you allow measurement cookies, we use PostHog to understand how visitors use the site: pages viewed, clicks, scroll depth, time on page, and where visits come from. PostHog also records session replays, which reconstruct a visit as a sequence of interactions. A replay can capture text you type into a form field, so please do not enter anything in a form you would not want us to see. We do not record the 3D or canvas content of the site. Our PostHog project is hosted in the United States. If you do not allow measurement cookies, PostHog is never loaded and no analytics events are collected.

Business identification, United States visitors only

If you allow business identification cookies, and only when your visit comes from the United States, we use Reb2b to match your visit to the company you work for and, in some cases, to your professional profile, using data licensed from third-party data partners. We use this so our team can follow up on interest from a company. Reb2b is never loaded for visitors outside the United States, and never loaded at all without your permission. Under some United States state privacy laws this kind of disclosure may count as a "sale" or "sharing" of personal information. Declining business identification cookies is your opt out.

Error monitoring

We use Sentry to record technical errors: the error itself, the page and browser it happened on, and a technical trace. We rely on this to keep the site secure and working, so it is not controlled by cookie choices. We do not use it for analytics or marketing.

4. Cookies and similar technologies

We group cookies and similar browser storage into three categories:

  • Necessary. Needed for the site to work and to remember your cookie choices and whether you chose the light or dark theme. If you are a member of our team, a cookie also excludes your own visits from analytics. These are always on.
  • Measurement. PostHog analytics and session replay, described in section 3.3.
  • Business identification. Reb2b, described in section 3.4.

On your first visit a banner asks you to choose. Nothing in the measurement or business identification categories loads before you allow it. We keep a record of your choice, including the categories you allowed and when, so we can honor it and show that we did. To change or withdraw a choice, clear this site's cookies in your browser (the banner will ask again on your next visit), or email us and we will action it for you. We do not currently respond automatically to Do Not Track or Global Privacy Control browser signals.

5. Why we use your information

Where the GDPR or UK GDPR applies to you, the legal basis for each purpose is noted in brackets.

  • To answer your inquiry, prepare an estimate, and manage our working relationship with you (steps taken at your request before a contract, performance of a contract, or our legitimate interest in replying to you).
  • To send the newsletter you subscribed to (your consent, which you can withdraw at any time).
  • To answer questions in Ask and improve the answers and the content behind them (our legitimate interest in helping visitors understand our work).
  • To measure and improve the site with analytics and session replay (your consent).
  • To identify visiting companies in the United States so our team can follow up (your consent).
  • To keep the site secure, prevent abuse, and fix errors (our legitimate interest in the security and reliability of our site).
  • To comply with the law, enforce our terms, and establish or defend legal claims (a legal obligation, or our legitimate interest).

We do not sell your personal information for money, we do not use it for automated decisions that have a legal or similarly significant effect on you, and we do not ask for special category or sensitive personal information. Please do not send it to us.

6. Ask, our AI assistant

Ask answers questions using only published content from this site. Your question and the recent turns of the conversation are sent to OpenAI, which generates the answer on our behalf. We instruct OpenAI not to retain the request, and it is not used to train models. We keep a log of the question, the page you asked it from, and whether we were able to answer, so we can improve our content. Please do not enter confidential or sensitive information, or personal information about other people, into Ask. If Ask offers to pass your details to our team, that happens only when you fill in and submit the short form it shows you.

7. Who we share information with

We share personal information with service providers who process it on our instructions and under contract:

  • Vercel, for hosting and delivering the site.
  • Neon, for the database that stores site content, inquiries, and subscriptions.
  • Cloudflare, for storing and delivering images and video.
  • Resend, for sending notification, confirmation, and newsletter email.
  • PostHog, for analytics and session replay, if you allow measurement cookies.
  • Reb2b, for business identification, if you allow it and your visit comes from the United States.
  • OpenAI, for generating answers in Ask.
  • Sentry, for error monitoring.
  • Our consent management provider, for storing the record of your cookie choices.

We also share information with professional advisers such as lawyers and accountants where needed, with authorities or other parties where the law requires it or to protect our rights, safety, or property, and with a buyer or successor if we are ever involved in a merger, acquisition, financing, or sale of assets, in which case this policy continues to apply. As noted in section 3.4, business identification may count as a "sale" or "share" under some United States state laws.

8. International transfers

We are based in the United States and our service providers are primarily in the United States. If you are in the European Economic Area, the United Kingdom, or Switzerland, your personal information is transferred to the United States. Where such a transfer needs a safeguard, we rely on the European Commission's Standard Contractual Clauses, with the UK Addendum where relevant, in our agreements with those providers. Email us if you would like details.

9. How long we keep information

  • Inquiries and related correspondence: for as long as our relationship lasts and up to three years after our last contact, longer where a contract, a tax rule, or a legal claim requires it.
  • Newsletter: until you unsubscribe, plus a minimal record so we do not email you again by mistake.
  • Ask logs: up to twelve months.
  • Analytics and session replay: the retention period set in our analytics account, in no case longer than twelve months.
  • Server, security, and error logs: short lived, normally no more than thirty days.
  • Cookie consent records: for as long as needed to demonstrate your choice, up to three years.

10. Your choices

You can change your cookie choices as described in section 4, unsubscribe from the newsletter using the link in any email we send, and ask us to delete an inquiry you sent us at any time.

11. Your rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. You also have the right to complain to your local data protection authority.

If you live in a United States state with a consumer privacy law, including California, Colorado, Connecticut, Virginia, Texas, and Oregon, you have the right to know what we collect and disclose, to get a copy of it, to correct it, to delete it, to opt out of the sale or sharing of personal information and of targeted advertising, and not to be treated differently for exercising any of these rights. You may appeal a decision we make on a request, and California residents may use an authorized agent.

To exercise a right, email hello@suits-sandals.com and tell us what you would like us to do, using the email address or details you gave us. We may need to ask for information to confirm who you are. We reply within the time the applicable law allows, one month under the GDPR and forty-five days in most United States states, and we will tell you if we need longer.

12. Children

This site is made for a business audience and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

13. Security

We protect personal information with encryption in transit, access controls, hosted infrastructure that carries its own security controls, and a content management system limited to our own team. No system is completely secure, so we cannot guarantee absolute security.

14. Other sites

This site links to services we do not control, including our LinkedIn and Instagram profiles and the scheduling tool used to book a call. Once you leave our site, the privacy policy of that service applies, not ours.

15. Changes to this policy

We update this policy when our practices change, and we change the effective date at the top. If a change matters to you, we will make it clear on the site.

16. Contact us

Suits & Sandals LLC, 240 Kent Ave, Brooklyn, NY 11249, United States. Email hello@suits-sandals.com. See also our Terms and Conditions.