This Privacy Policy explains what information we collect through our website, how we use and share it, how we safeguard it, and the choices and rights you have. It is a notice, not a contract — reading or using our site doesn't bind you to anything.
Who we are and how to reach us
Forum One Communications is the controller of the personal information described in this policy.
2451 Crystal Drive, Suite 600
Arlington, VA 22202
Email: inquiries@forumone.com
For any privacy question or request, email inquiries@forumone.com with "Privacy Request" in the subject line so it reaches the right person.
Information we collect
Information you provide to us
- Forms and downloads. To download certain resources, we ask for your name, email address, job title, and organization.
- Contact and project inquiries. When you contact us about a project, we collect your name, email address, organization, city, and whatever you include in your message.
- Newsletter and email updates. Your email address, if you subscribe.
- Events and webinars. Registration information when you sign up for a Forum One webinar or event.
- Job applications. See "Job applicants" below.
Information collected automatically
When you visit our site, our servers and analytics tools collect technical information including your IP address, browser type and language, device type, the date and time of your visit, the referring URL, the pages you view, and how you interact with page elements.
Website visitor identification
We use Apollo.io to understand which organizations are visiting our site. Apollo's script sets a first-party cookie and uses technical signals such as your IP address, along with the pages you view, to identify the company or organization a visit is likely associated with. This tells us, for example, that someone from a particular foundation or agency read our work on a given topic.
This identification operates at the organizational level. Apollo does not tell us the name or email address of the individual who visited. Where we later see contact information associated with an identified organization, that information comes from Apollo's own business contact database rather than from your visit to our site.
Apollo only runs if you accept analytics and marketing cookies. If you decline or withdraw consent, it does not load.
Security and bot-protection signals
We use Cloudflare Turnstile to distinguish human visitors from automated bots and to protect our forms from abuse. Turnstile runs invisibly in the background on pages where it's active — you won't normally need to do anything, though in rare cases it may present a brief interactive challenge.
To do this, Turnstile processes a small set of technical signals: your IP address, your browser's TLS fingerprint, your User-Agent header, and an identifier for our site and its origin. Cloudflare states that it cannot directly identify individuals from these signals, and that they are not used to profile or target anyone. These signals are strictly necessary to keep the site secure, so Turnstile operates whether or not you accept analytics cookies.
Cloudflare's Turnstile Privacy Addendum describes its practices in more detail.
Information from analytics providers
Our analytics tools may supplement this with aggregated audience characteristics such as age range, gender, and interest categories. This comes from Google Signals, which associates activity with signed-in Google accounts to enable cross-device and demographic reporting. You can control this through your Google Ads Settings and My Activity — or turn off analytics for our site entirely using the withdrawal control described below.
Email engagement
When we send you email through HubSpot, we can see whether you opened it and which links you clicked. We use this to gauge what content is useful and to stop sending to people who aren't reading.
Cookies and tracking
Cookies are small files a website stores in your browser to recognize it on a return visit. We also use pixels, web beacons, and similar technologies.
We use two categories:
- Strictly necessary — required for the site to function securely. This includes Cloudflare Turnstile, which protects our forms from bot abuse as described above, and basic hosting and session functionality. These load without consent because the site cannot operate safely without them.
- Analytics and marketing — Google Analytics, HubSpot, and Apollo.io. These do not load until you consent.
On your first visit you'll be asked to accept or decline. Declining is as easy as accepting, and declining doesn't degrade the site. If you accept and later change your mind, use the withdrawal control on this page: it stops these tools from loading and deletes the cookies they've set in this browser.
Withdrawing consent stops future collection in that browser. It does not erase information already collected and stored — for that, use your erasure right below.
Global Privacy Control. We honor the Global Privacy Control (GPC) and similar browser-based opt-out signals. If your browser sends one, we treat it as a request to opt out of any sale or sharing of your personal information and, where applicable law requires, as a withdrawal of consent to non-essential tracking.
Do Not Track. Some browsers send a "Do Not Track" signal. There is no industry-standard response to it, so we do not respond to DNT specifically. We do honor GPC, and we honor our own consent control. Third parties whose tools we use — currently Google — may collect information about your activity across different websites over time; declining or withdrawing consent prevents those tools from loading here.
How we use this information
- To respond to your requests and project inquiries
- To send you updates, insights, and event information you've asked for
- To register you for webinars and events
- To tailor the communications you receive based on your interests and site activity
- To understand how the site is used and improve its content and structure
- To protect the site from bots, abuse, and fraud, and to maintain its security and integrity
- To meet legal obligations
- To understand which organizations are interested in our work, and to inform our business development and outreach
We do not use your personal information to train artificial intelligence models, and we do not provide it to third parties to train theirs.
Who we share information with
We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising. We share it with the providers below, most of whom process it solely on our behalf under contract. Where a provider also uses information for its own limited purposes, we've noted that.
HubSpot
Marketing and CRM
Form submissions, contact details, email engagement
Processes on our behalf
Google Analytics
Website analytics
Usage data, device and browser data, IP address
Processes on our behalf
Cloudflare
Bot protection (Turnstile)
IP address, TLS fingerprint, User-Agent, site identifier
Processes on our behalf to protect our site; also uses these signals as a controller to improve its own bot-detection service
Zoom
Webinars and events
Registration and attendance data
Processes on our behalf
Greenhouse
Applicant tracking
Job application materials
Processes on our behalf
Vercel
Website hosting
Server request logs, including IP address
Processes on our behalf
Apollo.io
Website visitor identification and sales intelligence
P address, pages viewed, first-party cookie identifier; organization-level matching
Processes on our behalf
We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets — in which case we'll notify affected individuals.
Job applicants
When you apply for a role at Forum One, we collect the information in your application: name, contact details, resume, work history, and anything else you choose to submit. We use it to evaluate your application, communicate with you, and meet employment and equal-opportunity recordkeeping obligations.
Applications are processed through Greenhouse, our applicant tracking system. We retain application materials for the period required by applicable employment recordkeeping rules, and may keep them longer to consider you for future openings unless you ask us not to. Applicants have the same rights described below; email inquiries@forumone.com.
How long we keep information
We keep personal information only as long as we need it for the purposes described above. Because the right period depends on the type of information and the relationship, we use these criteria:
- Marketing contacts — kept while you remain subscribed and reasonably engaged; we periodically review and remove contacts who have been inactive over an extended period.
- Inquiries and project correspondence — kept for the duration of the conversation and any resulting engagement, then for as long as needed for business records.
- Event and webinar registrations — kept following the event for follow-up and reporting, then removed on the same review cycle as marketing contacts.
- Analytics data — kept according to the retention setting configured in our analytics platform, after which it is deleted or aggregated.
- Security and bot-protection signals — retained only briefly, according to our security provider's retention practices, and not used to build any profile of you.
- Application materials — kept for the period required by applicable employment law.
- Website visitor identification data — retained in Apollo according to its default lookback window and removed on the same review cycle as our other marketing data.
We keep information longer where we're legally required to. You can ask us to delete your information at any time.
Your privacy rights
Wherever you're located, you can ask us to:
- Access the personal information we hold about you
- Correct it if it's inaccurate or incomplete
- Delete it
- Provide a portable copy in a structured, commonly used, machine-readable format
- Restrict or object to how we process it
- Withdraw consent at any time, including by unsubscribing from any email or using the cookie withdrawal control on this page
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these, email inquiries@forumone.com. We'll respond within the timeframe required by applicable law — generally 30 days, extendable where the law allows and we tell you why. We may need to verify your identity before acting, and we'll only ask for what's necessary to do that.
If you have a question about how Cloudflare processes bot-protection signals on our behalf, contact us at inquiries@forumone.com — we're the controller for that processing. For questions about Cloudflare's own use of those signals to improve its service, Cloudflare's Data Protection Officer can be reached at dpo@cloudflare.com.
If you're in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority. We'd appreciate the chance to address it first.
Additional rights for U.S. state residents
If you live in California, Virginia, Colorado, Connecticut, Texas, Oregon, or another state with a comprehensive privacy law, you have the rights above plus the following.
Categories we collect. In the past 12 months we have collected: identifiers (name, email, IP address); professional or employment information (job title, organization); internet and network activity (browsing and interaction data, browser and device characteristics including TLS fingerprint and User-Agent, collected for security purposes); inferences drawn from that activity (interest categories); and, from applicants, professional and education history.
Where it comes from. Directly from you; automatically from your device as you use the site; and from our analytics and security providers.
Why we collect it. The business purposes listed under "How we use this information."
Sensitive personal information. We do not collect or process sensitive personal information as those laws define it.
Sale and sharing. We do not sell personal information and have not sold it in the past 12 months. We do not share it for cross-context behavioral advertising or targeted advertising, and we do not use it for profiling with legal or similarly significant effects.
Non-discrimination. We will not deny you services, charge you a different price, or provide you a different quality of service for exercising these rights.
Authorized agents. You may use an authorized agent to submit a request. We'll ask for proof of authorization and may still verify your identity directly.
Appeals. If we decline a request and your state gives you a right to appeal, reply to our response and we'll reconsider and explain the outcome in writing.
Where it comes from. Add: and from business data providers who identify the organizations visiting our site.
Categories we collect. Add to the inferences clause: and inferences about the organization a visit is associated with.
International transfers
Forum One is based in the United States, and our service providers store and process information here. If you're accessing the site from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country. Where we transfer personal information out of the EEA or UK, we rely on appropriate safeguards, including Standard Contractual Clauses with our providers.
Children
Our website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, email inquiries@forumone.com and we'll delete it.
Safeguarding your information
We take reasonable and appropriate technical and organizational measures to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved and the nature of the information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.
Changes to this policy
We may update this policy. When we do, we'll revise the "Last updated" date above and post the new version here. If the changes are material, we'll flag them more prominently on the site and, where appropriate, notify you directly.