One Model Privacy Policy
Effective as of October 1, 2025.
1. Introduction
One Model Inc. (" One Model," " we," " us," or " our") is committed to protecting the privacy of individuals who interact with our website and marketing activities. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with our website at onemodel.co (the " Website") and our associated marketing and recruiting activities (collectively, the " Services").
Important Scope Limitation. This Privacy Policy governs personal information collected through our Website and marketing activities. It does not apply to personal information that we process on behalf of our enterprise customers (" Subscribers") when providing the One Model People Analytics platform or One AI products. Processing of Subscriber data is governed exclusively by the applicable Data Processing Agreement (" DPA") between One Model and each Subscriber. If you have questions about how a Subscriber processes your personal information through the One Model platform, please contact that Subscriber directly.
Our Website and Services are designed for business professionals and enterprises. We do not knowingly direct our Services to individuals acting in a personal, family, or household capacity, and we treat all personal information we collect as relating to individuals in their professional capacity.
2. Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below. Capitalized terms used but not defined here have the meanings given to them in our DPA.
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Process" / "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
- "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For Website visitors, One Model acts as the Data Controller.
- "Data Processor" means an entity that Processes Personal Data on behalf of a Data Controller.
- "Sub-processor" means a third party engaged by One Model to Process Personal Data in connection with the Services.
- "Subscriber" means an enterprise customer that accesses the One Model platform under a subscription agreement.
3. Personal Information We Collect
3.1 Information You Provide Directly
| Category | Examples |
|---|---|
| Contact Data | First and last name, professional title, company name, business email address, mailing address, phone number |
| Account & Profile Data | Username, password, linked social network profiles, account preferences |
| Professional & Employment Information | Job title, department, employer, employment history (e.g., when provided in a job application) |
| Communications | Inquiries, support requests, feedback, and other messages submitted through the Website or via email |
| Marketing Preferences | Opt-in/opt-out status for marketing communications and records of engagement |
| Transactional Data | Order numbers, billing information, and transaction history |
| Payment Information | Payment card details or bank account information, collected and processed via our PCI-compliant payment processors |
| User-Generated Content | Comments, messages, or other content you post or transmit through the Website |
| Other Data | Any additional information you voluntarily provide |
Information We Collect Automatically
When you visit our Website, we and our service providers may automatically collect:
- Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and general geographic location derived from IP address (city/country).
- Usage Data: Pages visited, navigation paths, time spent on pages, referring URLs, links clicked, and search queries.
- Communication Interaction Data: Email open rates, click-through rates, and other engagement metrics related to our marketing communications.
This data is collected using cookies, web beacons, pixel tags, and similar technologies.
Information We Receive from Third Parties
We may receive Personal Data about you from:
- Public Sources: Publicly available professional profiles (e.g., LinkedIn), company websites, government registries, and similar sources.
- Data Enrichment Providers: Third-party data providers (including ZoomInfo) that supplement contact and firmographic information.
- Marketing & Referral Partners: Co-marketing partners and event organizers from whom we receive referral leads with your consent.
- Social Media Platforms: If you interact with our social media pages or use social login features.
4. How We Use Personal Information
We use Personal Data where we have a valid legal basis. The purposes for which we Process Personal Data are set out below.
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Operating and improving the Website and Services | Legitimate interests (Art. 6(1)(f)) |
| Responding to inquiries and providing customer support | Legitimate interests / Contract performance (Art. 6(1)(b), (f)) |
| Sending product updates, newsletters, and promotional content | Consent (Art. 6(1)(a)) or Legitimate interests (Art. 6(1)(f)) |
| Conducting interest-based advertising | Consent (Art. 6(1)(a)) |
| Evaluating employment applications | Pre-contractual steps (Art. 6(1)(b)) |
| Analytics, benchmarking, and product development | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Preventing fraud and enforcing agreements | Legitimate interests (Art. 6(1)(f)) |
| Processing payments | Contract performance (Art. 6(1)(b)) |
We may also use Personal Data in an anonymized or aggregated form that cannot reasonably be used to identify an individual.
5. How We Share Personal Information
We may share Personal Data in the following limited circumstances:
- Service Providers & Sub-processors: We share Personal Data with vetted third-party service providers and Sub-processors who assist us.
- Professional Advisors: We may share Personal Data with lawyers, accountants, auditors, and insurers where necessary.
- Business Transfers: In connection with a merger, acquisition, financing, or similar business deals.
- Legal Requirements: We may disclose Personal Data to comply with applicable law or to protect the rights and safety of One Model and its users.
- With Your Consent: We may share Personal Data for any other purpose with your explicit consent.
6. International Data Transfers
One Model is headquartered in the United States. Personal Data may be transferred to the U.S. or other countries. We implement appropriate safeguards for such transfers.
7. Article 27 Representatives
EU Representative
Our nominated EU Representative is:
Instant EU GDPR Representative Ltd.
contact@gdprlocal.com
Tel: +353 1 554 9700
Office 2, 12A Lower Main Street, Lucan Co. Dublin K78 X5P8, Ireland
UK Representative
Our nominated UK Representative is:
GDPR Local Ltd.
contact@gdprlocal.com
Tel: +44 1772 217800
1st Floor Front Suite, 27-29 North Street, Brighton, England
8. Data Retention
We retain Personal Data for as long as necessary to fulfil the purposes described in this Privacy Policy.
9. Data Security
We implement technical, organizational, and physical safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, and destruction.
10. ZoomInfo BuyerID and Third-Party Data Enrichment
We use ZoomInfo's BuyerID feature on our Website to improve our understanding of website visitors.
11. Cookie Notice
11.1 What Are Cookies?
Cookies are small text files placed on your device by websites you visit.
11.2 Categories of Cookies We Use
| Category | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Essential for the Website to function | No |
| Functionality | Remember your preferences and settings | Yes |
| Analytics & Performance | Collect aggregated information about how visitors use our Website | Yes |
| Advertising & Targeting | Deliver interest-based advertising | Yes |
12. Your Privacy Rights
Depending on your location, you may have the following rights with respect to your Personal Data:
12.1 Rights Under GDPR (EEA & UK Residents)
If you are located in the EEA or UK, you have specific rights under the GDPR.
12.2 Rights Under CCPA/CPRA (California Residents)
California residents have rights under the CCPA/CPRA.
13. Children's Privacy
Our Website and Services are not directed to individuals under the age of 16. We do not knowingly collect Personal Data from children.
14. Third-Party Websites and Services
Our Website may contain links to third-party websites not operated by One Model.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
16. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our privacy practices, please contact our Privacy team:
One Model Inc.
Email: privacy@onemodel.co
Mail: 12-C Ledgebrook Drive, Suite 4, Mansfield Center, CT 06250
17. Supervisory Authorities
| Jurisdiction | Authority | Website |
|---|---|---|
| United States | U.S. State Department Privacy Office | state.gov |
| United Kingdom | Information Commissioner's Office (ICO) | ico.org.uk |
| European Union | European Data Protection Board (EDPB) | edpb.europa.eu |
| Canada | Office of the Privacy Commissioner | priv.gc.ca |