Privacy Policy
Introduction & Scope
This Privacy Policy explains how Mystic collects, uses, shares, and protects information when you visit our Sites, submit a form, download materials, register for a webinar, book a call, chat with us, or otherwise interact with us. By using the Sites, you acknowledge the practices described here. If you do not agree, please do not use the Sites.
Mystic operates internationally. Depending on where you reside, additional rights and protections may apply, as described in Section 7.
Information We Collect
2.1 Information you provide to us
We collect information you submit directly, including through our lead-capture forms, prospectus and capabilities-brief downloads, webinar registrations, scheduling tools, and live chat. This may include:
• Identifiers: name, email address, phone number, country/region;
• Professional information: company, fund, agency or ministry name, title, role;
• Inquiry details you choose to provide: investment focus, assets-under-management range, project type, scope, timeline, and funding status;
• Any content you include in messages, chat, or booking notes.
Please note: some information you submit (for example, AUM range or government project details) may be commercially sensitive. Provide only what you are comfortable sharing.
2.2 Information collected automatically
2.3 Cookies and tracking technologies
We use cookies, web beacons, tracking pixels, software development kits, and similar technologies to operate the Sites, analyze usage, measure and optimize marketing, and personalize your experience. Key tools include:
Technology / Tool | Purpose |
Zoho PageSense | Heatmaps, session activity, A/B testing, funnel and form analytics to understand and improve how visitors use the Sites. |
Zoho SalesIQ | Live-chat functionality and visitor tracking; chat transcripts may be linked to your contact record. |
Zoho CRM, Campaigns, Forms, Bookings | Lead capture, contact management, email marketing/drip sequences, scheduling, and lead scoring. |
Zoho Analytics | Aggregate dashboards and reporting on traffic, conversion, and campaign performance. |
Advertising & social pixels | Pixels and tags such as the Meta (Facebook) Pixel, Google Ads / Google Analytics, and the LinkedIn Insight Tag to measure ad performance and deliver and retarget ads (“interest-based” / “cross-context behavioral” advertising). |
Apollo.io | Sales-intelligence and outbound engagement that may be matched with business-contact data and synced to our CRM. |
Essential cookies | Security, load balancing, session continuity, and remembering your preferences. |
You can manage cookies through our cookie banner/consent manager (where shown) and your browser settings. Blocking some cookies may affect Site functionality. See Section 6 for advertising opt-outs.
How We Use Your Information
We use information to:
- Respond to your inquiries and provide requested materials, briefings, and calls;
- Operate, secure, maintain, and improve the Sites and our services;
- Send marketing communications, newsletters, and event invitations, and manage drip campaigns (you may opt out at any time);
- Score, route, and manage leads in our CRM and coordinate follow-up;
- Measure, attribute, and optimize advertising and content performance;
- Comply with legal obligations and enforce our Terms & Conditions.
4. Legal Bases for Processing (EEA/UK)
Where the EU/UK General Data Protection Regulation applies, we process personal data on these bases: your consent (e.g., non-essential cookies and marketing); our legitimate interests (e.g., understanding and improving the Sites, B2B outreach, and security), balanced against your rights; performance of a contract or steps taken at your request; and compliance with legal obligations.
5. How We Share Your Information
We do not sell personal information for money. We share information as follows:
- Service providers / processors: vendors who process data on our behalf under contract, including Zoho Corporation (CRM, PageSense, SalesIQ, Campaigns, Forms, Bookings, Analytics), Apollo.io, advertising and analytics providers (e.g., Meta, Google, LinkedIn), hosting, and email providers.
- Advertising partners: through pixels and tags, certain identifiers and activity may be shared with advertising platforms to measure and deliver ads. Under some U.S. state laws this may be considered “sharing” or “sale”; see Section 7.2.
- Legal and safety: to comply with law, respond to lawful requests, protect rights, property, and safety, and enforce our agreements.
- Business transfers: in connection with a merger, financing, acquisition, or sale of assets.
- With your direction or consent: when you ask us to share information.
Advertising, Pixels & Analytics Choices
To limit interest-based advertising and analytics, you can: adjust your cookie/consent preferences on the Sites; use the opt-out tools at optout.aboutads.info (DAA) and youronlinechoices.eu (EDAA); adjust ad-platform settings (e.g., Meta and Google ad-settings pages); install the Google Analytics opt-out browser add-on; and enable browser-level signals such as Global Privacy Control (GPC), which we honor where required.
Your Privacy Rights
7.1 EEA, UK, and similar jurisdictions
You may have rights to access, correct, delete, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with your supervisory authority.
7.2 California (CCPA/CPRA) and other U.S. state laws
California residents (and residents of other states with comprehensive privacy laws) may have rights to know/access, correct, and delete personal information; to opt out of “sale” or “sharing” of personal information and of targeted advertising; to limit use of sensitive personal information; and to be free from discrimination for exercising rights. To opt out of sharing for cross-context behavioral advertising, use our cookie controls or a recognized opt-out preference signal (e.g., GPC).
7.3 Florida and additional states
Residents of Florida and other states may have rights under applicable state privacy laws (for example, the Florida Digital Bill of Rights). The specific laws that apply depend on our size and activities and on your state of residence; we honor applicable rights as required by law.
How to exercise your rights
Submit a request to [[email protected]] or the address above. We will verify your identity and respond within the time required by applicable law. You may use an authorized agent where permitted.
12. Close out US loose ends
Mail forwarding, US bank account access, FBAR filing readiness, US tax residency status. Talk to your US tax CPA before you’ve been out of the country 330 days — that’s the threshold for the foreign earned income exclusion
Data Retention
We retain personal information for as long as needed to fulfill the purposes described here, maintain our business relationship, comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.
Data Security
We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
International Data Transfers
We operate and use service providers in multiple countries, including the United States. Your information may be transferred to and processed in countries with different data-protection laws. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
Children's Privacy
The Sites are intended for adults (18+) and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Third-Party Links
The Sites may link to third-party websites and services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.
Do Not Track & Global Privacy Control
Some browsers offer “Do Not Track” signals; there is no common standard for responding to them. We honor recognized opt-out preference signals such as GPC where required by law.
Changes to This Policy
We may update this Policy from time to time. We will post the revised version with a new “Last updated” date and, where required, provide additional notice.
Contact Us
Questions or requests: [[email protected]] · [FULL LEGAL ENTITY NAME], [STREET ADDRESS, CITY, FL, ZIP].