Legal

Privacy Policy

Last updated: June 16, 2026 — The Value-First Collective

What this policy covers

This privacy policy describes how the Value-First Collective, operated by [CONFIRM: legal entity name — likely “Conveying Your Message LLC dba Value-First Team,” per the flagship; confirm the operating entity for this node] (“we,” “our,” or “us”), handles information on valuefirstcollective.com. It covers this site only.

The Value-First Collective is a paid, gated practitioner network. Unlike a simple marketing site, it collects information at several points: when you apply to join, when you become a member and sign in, when you choose to appear in the public practitioner directory, when you contact a fellow member, and when you pay for membership. Each is described below.

Membership agreements, the directory listing agreement, and the member-to-member contact agreement are set out in our Terms of Service. This policy explains the data side; the terms explain the rules.

Information we collect

When you apply to join. The application form on /apply collects your name, email address, and optionally your company, your role, the kind of practitioner you are, and a message about your practice and why you want to join. We use this to review your application and, if accepted, to set up your membership. Your application is stored as a Contact and an Interest record in our HubSpot CRM.

When you become a member and sign in. Membership uses a magic-link sign-in: you enter your email, we email you a one-time sign-in link, and clicking it creates a signed session. We do not store a password. Your member identity is your existing HubSpot Contact. While signed in, a session cookie (and a non-sensitive “you are signed in” signal cookie) keeps you authenticated — see the Cookies section.

Your practitioner profile. As a member you can maintain a profile — your name, photo, title, company, location, areas of expertise, and a short bio. These are the fields that may appear in the public directory, subject to your directory toggle (see the Directory section). Your profile is stored in our content system (Sanity) and your membership and directory-consent state are stored on your HubSpot Contact.

When you pay for membership. Membership payments are processed by HubSpot Commerce Hub through a hosted checkout. Your payment-card details are entered on HubSpot's hosted checkout and are handled by HubSpot and its payment processor — card numbers never touch this site. We receive and store the resulting membership and billing state (your tier, whether a payment succeeded, renewal status), not your card data.

When you contact a fellow member. Inside the member-only Collective Commons you can send a message to another member. We record the message and who sent it to whom as an internal note in our CRM so the contact is accountable. We do not reveal one member's email address, phone number, or other contact details to another member — messages are relayed by us, addressed by internal member identity, never by exposing a personal address.

Information collected automatically. This site is hosted on Vercel, which may log standard web-server data (IP address, request time, browser and device type) as part of normal hosting. The HubSpot Commerce Hub hosted checkout, when you reach it, runs on HubSpot's infrastructure under HubSpot's own policy. We do not run advertising trackers or session-recording tools on this site.

The public practitioner directory and your consent

The Value-First Collective publishes a public practitioner directory — profile cards and pages that name members, show their photo, title, company, location, expertise, and bio — as proof of the network. This is a public, search-engine-indexed surface, so it deserves explicit attention.

The directory is proof, not a marketplace. Directory cards and profiles carry no contact details and no outbound links — no email, no phone, no LinkedIn, no website, no booking link. Even where our records hold those fields, they are never read into or rendered on the directory. There is no way to contact or hire a practitioner through the public directory.

How a profile comes to appear, and how you remove it. Some practitioners shown here were already published on Value-First's existing public practitioner directory, and their profiles are currently carried into this directory. As a member you have a directory toggle on your profile that puts you in direct control: when you set it to off, your card is removed from the public directory the next time it is rebuilt. We honor a recorded opt-out without exception — an off toggle always drops your card. If you do not have a member account or toggle (for example, if your profile was carried over and you have not signed in), you can have your listing removed at any time by emailing us at the address in the Contact section below, and we will remove it.

[CONFIRM — ASSUMPTION PENDING COUNSEL: lawful basis for carried-over listings.] We presently treat a practitioner's prior publication on Value-First's existing public directory as the working basis for carrying their profile into this directory (“published by Canon”). We do not assert this as a settled legal conclusion. Prior publication on one site is not automatically lawful consent to re-publication on another, and this is especially so for any carried-over individuals who are not members and for any data subjects in the EU, the UK, or California (see the note below). Whether the correct posture is the current default-in / opt-out-removes model, or fresh affirmative opt-in before any carried-over card appears, is an open consent-policy and legal question for Chris, Trellis, and counsel to confirm; this prose will be updated to match their determination. In the meantime, anyone — member or not — can have their listing removed by contacting us, and we honor every such request.

[CONFIRM — EU / UK / California data subjects.] Practitioners or visitors who are in the EU or UK (GDPR / UK GDPR) or are California residents (CCPA/CPRA) have specific rights over their personal information, including, depending on the applicable law, rights to access, correct, delete, object to or restrict processing, and — where processing relies on consent — to withdraw it. The lawful basis we rely on for the public directory, the handling of carried-over (non-member) listings, and any cross-border transfer are matters for Chris and counsel to confirm for this node. If you are in one of these jurisdictions and want your information accessed, corrected, or removed, contact us at the address in the Contact section and we will act on your request as required by the applicable law.

How we use your information

We use the information described above to:

  • Review your application and decide whether to accept you into the Collective.
  • Create, authenticate, and manage your membership and your member session.
  • Display your profile in the public practitioner directory on the basis described in the directory section below (a basis we are confirming with counsel), and remove it as soon as you set your directory toggle to off or contact us.
  • Process membership payments and manage billing and renewals through HubSpot Commerce Hub.
  • Relay and record member-to-member contact in the Collective Commons, without exposing personal contact details.
  • Communicate with you about your application, membership, and account.
  • Comply with applicable legal and accounting obligations.

We do not sell your information. We do not use it to place advertising. We share it only with the service providers described in the next section, who process it on our behalf.

Service providers we rely on

HubSpot, Inc. is our CRM and the system of record for applications, membership, and billing, and the provider of the hosted checkout for membership payments. Your application, your membership and directory-consent state, the record of member-to-member contact, and your billing state are stored in HubSpot. HubSpot processes this data on our behalf under a data processing agreement and is subject to its own Privacy Policy.

Sanity is our content system; your practitioner profile content (name, photo, title, company, location, expertise, bio) is stored there and is the source for the directory display.

Vercel hosts this site and may log standard web-server data as part of normal operation, governed by Vercel's own privacy policy.

[CONFIRM: transactional email provider.] Sending the magic-link sign-in email, the application confirmation, and member notifications requires a transactional email provider. No mailer is wired yet — until one is, magic-link and confirmation emails are not sent automatically and applications are handled through our CRM. When a provider (for example, a HubSpot single-send workflow or a transactional email service) is connected, it will process your email address to deliver those messages, and this section will name it.

Cookies

When you sign in as a member, we set two first-party cookies: a secure, httpOnly session cookie that keeps you authenticated (it cannot be read by client-side scripts), and a small non-sensitive “signed in” signal cookie that lets the interface know a session exists. Both expire after roughly 30 days or when you sign out.

We do not set advertising or analytics cookies on this site. If you reach the HubSpot Commerce Hub hosted checkout, HubSpot may set its own cookies on its domain as part of the checkout, governed by HubSpot's policy.

Most browsers let you block or delete cookies. If you block our session cookies, you will not be able to stay signed in to the member area, but the public pages are unaffected.

Data retention and your rights

We retain your information for as long as necessary to manage your application and membership, to operate the directory and the member community, and to comply with applicable legal and accounting obligations. If you would like to:

  • Access, correct, or delete the information we hold about you.
  • Remove your profile from the public directory (set your directory toggle to off, or ask us).
  • Object to or restrict processing of your information.
  • Withdraw consent, close your membership, or request that we stop contacting you.

Contact us at the address below and we will respond within 30 days. We will honor your request to the extent practicable, and where legal obligations require us to retain certain records (such as records of membership payments), we will let you know.

California residents. The California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives California residents additional rights. [CONFIRM: whether the operating entity meets the CCPA/CPRA applicability thresholds] — whether and how the CCPA/CPRA applies turns on the operating entity's size and data volume, a determination for Chris and counsel; the section below sets out the structure that applies if it does.

Categories of personal information we collect, and why. We collect identifiers (your name and email, and your HubSpot Contact identity), professional or employment information (company, role, areas of expertise, and your bio), commercial information (your membership tier and billing status — not your card data, which is handled by HubSpot's checkout), internet or network activity (standard web-server logs at our host), and any visual information you choose to publish (your profile photo). We collect each of these for the purposes described in “How we use your information” above — to review applications, run membership and the directory, relay member contact, take payment, and meet legal obligations — and for no other purpose without telling you.

Your California rights. Subject to the thresholds above, you have the right to know what personal information we collect and how we use it, the right to request access to and deletion of your personal information, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising these rights. We do not sell, and do not share for cross-context behavioral advertising, your personal information (as “sell” and “share” are defined under California law). We do not collect personal information for the purpose of inferring characteristics, and to the extent we hold any “sensitive personal information” as defined by the CPRA, you have the right to limit its use; we use such information, if any, only as needed to provide the membership you asked for. To exercise any of these rights, contact us using the information below.

How we protect your information

We take reasonable administrative and technical measures to protect the information we hold. Your payment-card details never touch this site — they are entered on HubSpot Commerce Hub's hosted checkout and handled by HubSpot and its payment processor, so we do not store or transmit card numbers. The information we do hold lives with the established service providers named above (HubSpot, Sanity, Vercel), each of which maintains its own security program; your member session is carried in a secure, httpOnly cookie that client-side scripts cannot read.

No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. [CONFIRM: any specific security controls or certifications to state] — counsel and Chris confirm which specific measures can be honestly asserted. In the event of a data breach affecting your personal information, we will notify affected members and the relevant authorities as and where required by applicable law.

Third-party links

This site links to other sites within the Value-First constellation (for example valuefirstteam.com, ainativeshift.com, valuefirststudios.com, ainativehumans.org, and valuefirstplatform.com) and to external platforms such as LinkedIn, Twitter/X, and YouTube. Each linked site has its own privacy practices. This policy covers valuefirstcollective.com only.

Children's privacy

This site is not directed to individuals under 18, and membership is for working practitioners. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. If the changes are significant — for example, if we wire a new service provider or change how the directory works — we will make a reasonable effort to notify members through the contact information we hold.

Your continued use of this site after an update constitutes your acceptance of the revised policy.

Contact

Questions about this policy or how we handle your data:

The Value-First Collective
[CONFIRM: legal entity name]
Email: chris@valuefirstteam.com

This policy is governed by the laws of [CONFIRM: governing-law jurisdiction — the flagship uses the State of Texas; confirm for this node].

This document is prepared for attorney review and is not legal advice. It reflects the site's actual data practices as of the date above. Material changes to site functionality (wiring a transactional mailer, launching Commerce Hub checkout, adding analytics) will require this policy to be updated to match before those changes go live.