Privacy policy.

What this policy covers.

This Privacy Policy explains how Panda Ventures LLC, doing business as Create with Tom (“we”, “us”, “our”), handles personal information when you visit createwithtom.com, submit an inquiry, use the free tools we publish, or otherwise interact with our services (together, the “Services”).

It does not apply to third-party websites, platforms, or events that we link to or appear at. Those are governed by their own policies.

Who we are.

Panda Ventures LLC is the controller responsible for the personal information described here. We are a small operation: there is no advertising network behind this site, and we do not run data brokerage of any kind.

Because we do not publish a monitored inbox, every privacy request reaches us through the contact form. See section 15 for what to include.

Information you give us.

We only ask for what we need to reply to you. When you submit the inquiry form, we collect:

• Your name and email address.
• Your role and company, when you choose to provide them.
• The type of inquiry you select, such as speaking, advisory, or something else.
• The details you write in the message field.

If we go on to work together, we may also receive information you send us directly by email, calendar invitation, contract, or during a call. Payment details for advisory and speaking work are handled outside this website, and we do not store full card numbers anywhere in our systems.

Information we collect automatically.

Some technical information is recorded whenever anyone loads a page, because it is required to serve the site securely:

• IP address, which our hosting and rate-limiting providers use to route and protect requests.
• Browser and device type, operating system, and screen characteristics.
• Pages viewed, referring page, and the date and time of the request.
• The page you submitted a form from, and how long the form took to complete. We keep the timing figure purely as a spam signal, since automated submissions fill forms unnaturally fast.
• Diagnostic details attached to an error, if something on the site breaks.

Cookies and similar technologies.

We do not use advertising cookies, tracking pixels, or cross-site profiling. Our own site analytics are aggregated and cookieless.

Cookies and local storage are used in two narrow places: to keep you signed in inside the private, invitation-only area of this site, and by embedded third-party players. Video and audio embeds may set their own storage when you press play, under their own policies. You can clear or block cookies in your browser settings, though the private area will not stay signed in without them.

How we use information.

We use personal information to:

• Respond to your inquiry and discuss speaking, advisory, or coaching work.
• Provide, operate, and maintain the Services, including the free tools.
• Fulfil and administer engagements you book with us.
• Understand which pages and topics are useful, in aggregate.
• Detect and prevent abuse, spam, and attacks, and enforce our Terms and Conditions.
• Keep records we need for accounting, tax, and legal compliance.

We do not use your information to train machine learning models, and we do not add you to a marketing list without your request.

Legal bases for processing.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar rules, we rely on these legal bases:

• Legitimate interests — operating and securing the Services, responding to inquiries you send, and understanding aggregate usage.
• Performance of a contract — delivering an engagement you have booked.
• Consent — where you have given it, such as loading an optional third-party embed. You may withdraw consent at any time.
• Legal obligation — keeping financial records and responding to lawful requests.

Service providers we rely on.

We use a small number of established vendors to run this site. They process information only as needed to provide their service to us:

This list can change as our stack changes. We will update it rather than quietly add a new category of processing.

We do not sell your information.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law and comparable state laws. We have never done so, and we do not offer financial incentives in exchange for your data.

When we share.

Beyond the providers listed above, we disclose personal information only:

• With your direction, for example when you ask us to be introduced to an event organiser.
• To our professional advisers, such as accountants and lawyers, under duties of confidentiality.
• When required by law, subpoena, or a valid government request, or to protect the rights, property, or safety of any person.
• In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this policy.

How long we keep it.

We keep inquiry submissions for as long as needed to handle the conversation and for a reasonable period afterwards, so we have context if you come back to us. Records tied to a paid engagement are kept for as long as tax and accounting rules require. Aggregated analytics that no longer identify anyone may be kept indefinitely.

When information is no longer needed, we delete it or strip it of identifiers. You can ask us to delete sooner, as described in section 15.

How we protect it.

The site runs over encrypted connections, access to stored data is restricted to accounts that need it, and the private area requires authentication. That said, no website, provider, or transmission method is completely secure. We cannot guarantee absolute security, and you send information to us at your own risk. Please do not use the inquiry form to send sensitive personal information such as government identification numbers, financial account details, or health information.

Your rights in the EEA and UK.

Subject to local law, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Request erasure of your information.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Receive a copy of your information in a portable format.
• Withdraw consent where processing relies on it.
• Lodge a complaint with your local supervisory authority.

Your rights in California and other US states.

If you live in California, Colorado, Connecticut, Virginia, or another state with a comprehensive privacy law, you may have the right to:

• Know what categories of personal information we collect, use, and disclose.
• Access a copy of that information.
• Correct inaccurate information.
• Delete information we hold about you.
• Opt out of sale or targeted advertising — which does not apply here, because we do neither.
• Not be discriminated against for exercising these rights.

An authorised agent may submit a request on your behalf if they provide proof of that authority. We honour Global Privacy Control signals where they apply.

How to exercise your rights.

Send a request through the contact form. To help us find your records and confirm the request is genuinely yours, please include:

• The email address you originally contacted us from.
• Which right you are exercising, in plain terms.
• Enough detail for us to locate the information, such as roughly when you wrote in.

We will respond within the timeframe required by the applicable law, generally within 30 to 45 days, and will tell you if we need longer. We may decline a request where the law allows it, and we will explain why. Verification exists to protect you: we will not hand your information to someone else who claims to be you.

International transfers.

We operate from the United States, and our providers may process information in the United States and other countries. Those countries may have data protection rules that differ from yours. Where required, we rely on appropriate transfer mechanisms, such as the European Commission’s standard contractual clauses, through our agreements with providers. By using the Services, you understand your information will be processed in the United States.

Children’s privacy.

The Services are built for business audiences and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

Links to other sites.

The Services link to third-party sites, platforms, and tools that we do not control, including social platforms, event pages, and public ad libraries. Following those links takes you outside this policy. Review their privacy practices before sharing information with them.

No automated decisions.

We do not make decisions about you by automated means that produce legal effects or similarly significant consequences. A person reads every inquiry.

Changes to this policy.

We may update this policy as the Services change or the law does. The effective date at the top always reflects the current version. If a change materially affects how we handle your information, we will make that clear on this page. Continuing to use the Services after an update means you accept the revised policy.

How to reach us.

Panda Ventures LLC, doing business as Create with Tom, Chicago, Illinois, United States.

For any privacy question or request, use the contact form and mention “privacy” in your message so it is routed correctly. This policy is effective as of August 4, 2026.