Privacy Policy

Last updated: 17 August 2026

Bones Investment Group (“Bones”, “we”, “us”, “our”) respects your privacy. This policy explains what information this website collects, why we collect it, who we share it with, and the choices and rights you have. It applies to bonescapital.com only. It does not cover information you give us offline, by email or telephone, at an event or class, or in the course of an investment relationship — and it does not cover the separate investor portals we link to, which are described below.

The short version

• We do not use analytics, advertising, remarketing or social-media tracking cookies on this site. There is no Google Analytics, no Google Tag Manager, and no advertising pixel of any kind.
• We do not sell your personal information.
• The only information we collect about you is what you choose to type into one of our two forms, plus the standard technical records our web server keeps for security.
• The one optional item is the YouTube videos embedded on our Blog page. YouTube sets its own cookies as soon as a player loads, so we hold those videos back until you opt in.
• You can review or change your cookie choice at any time using the Do Not Sell or Share My Personal Information link at the bottom of every page.

Information we collect

Information you give us

This website has two forms. You only give us information if you choose to fill one in:

• Contact form (on our Contact page) — your first name, last name, email address, telephone number, the category that best describes your interest (buyer, investor, builder, collaboration or other), and the message you write. It is delivered to us by email so that we can reply.
• Newsletter sign-up (in the footer of every page) — your email address only. It is stored in this website’s database and also added to our mailing-list provider, Mailchimp (Intuit Inc.), so that we can send you updates. Every email we send includes an unsubscribe link, and you can ask us to remove you at any time.

Form submissions are not published, and they are not used to build an advertising profile or added to any advertising audience.

Information collected automatically

Like virtually every website, our hosting server keeps standard access logs — your IP address, the page requested, the date and time, the referring page and your browser’s user-agent string. These logs exist to keep the site available and secure (for example, to identify attacks or diagnose errors). They are not used to track individuals or to build profiles.

Our consent tool also records your cookie choice itself — the categories you accepted or rejected, a one-way hashed version of your IP address and user-agent, the time of the choice, and whether your browser sent a Global Privacy Control or Do Not Track signal. This record exists so that we can demonstrate that consent was properly obtained, as data-protection law requires.

Cookies and similar technologies

A cookie is a small file a website stores in your browser. By default this site sets only strictly necessary cookies — the ones without which it cannot function, keep the contact form free of spam, or remember your privacy choice.

This site sets no analytics, advertising or remarketing cookies of its own. The unused categories still appear in our consent tool, switched off and actively blocked, so that if such a feature is ever added it cannot load until you opt in.

Your browser also lets you block or delete cookies directly. Because the strictly necessary cookies above are the ones that make the site work and remember your choice, blocking them may mean the consent banner reappears on every visit.

Embedded YouTube videos

Our Blog page embeds videos hosted on YouTube (Google LLC). When a YouTube player loads, YouTube can set cookies on your device, receives your IP address, and contacts Google’s advertising infrastructure — even if you never press play. Because that goes well beyond what the page needs in order to work, we treat these videos as Marketing and Embedded Content: they stay switched off until you allow that category, and in their place you will see a notice offering to load them. Allowing them is entirely optional; the written content of every post is fully available either way.

Spam protection on the contact form

Our Contact page uses Google reCAPTCHA to tell people apart from automated bots. reCAPTCHA is loaded before you make a cookie choice because without it the form cannot be protected or submitted at all; we therefore treat it as strictly necessary. Google may set a cookie and will receive your IP address and information about your interaction with the page for this purpose. Google’s use of that information is governed by the Google Privacy Policy. We do not use reCAPTCHA for advertising or analytics.

Fonts and other resources

The typography on this site (Montserrat and Horizon) is served from our own domain. Unlike many websites, we do not call Google Fonts or any other font, map, chat or content-delivery service. Apart from the YouTube videos and reCAPTCHA described above, this website makes no third-party requests at all.

How we use your information

• To answer your enquiry and to discuss investment, purchase, construction or collaboration opportunities you have asked about.
• To send you the newsletter and event or class announcements you have signed up for.
• To keep the website available, performant and secure, and to prevent abuse and spam.
• To honour and evidence your cookie and privacy choices.
• To meet our legal, regulatory, tax and record-keeping obligations.

If you are in the European Economic Area or the United Kingdom, our legal bases are: your consent for any non-essential cookie and for the newsletter (which you may withdraw at any time); steps taken at your request prior to entering into a contract for enquiry handling; and our legitimate interests in running a secure website and responding to people who contact us.

Who we share it with

We do not sell your personal information. We disclose it only to:

• Our hosting and email providers, who store the site and deliver form submissions to our inbox on our instructions.
• Mailchimp (Intuit Inc.), which stores our mailing list and delivers our newsletter on our instructions.
• Google, in the two limited situations described above: reCAPTCHA spam protection, and the embedded YouTube videos if you have allowed them.
• Professional advisers or authorities, where we are legally required to do so or need to establish or defend a legal claim.

Allowing the embedded YouTube videos does let Google receive information about your visit. We receive nothing in return for that and we do not treat it as a sale — but some privacy laws would classify it as “sharing” for cross-context behavioural advertising, so we give you a standing opt-out for it. See Your rights and choices below.

Investor portals and other services we link to

Several buttons on this site take you to services operated by other companies, including our investor portals at AppFolio Investment Manager (investors.appfolioim.com) and Juniper Square (app.junipersquare.com), our class and event listings on Eventbrite, and our profiles on Instagram, LinkedIn and YouTube. Following one of those links takes you to a service we do not control, with its own privacy policy and its own cookies. Nothing on this page loads from those services until you click through to them, and this policy stops at the edge of bonescapital.com.

How long we keep it

Form submissions are kept in our email system, and newsletter sign-ups in this website’s database and in Mailchimp, for as long as we need them to deal with your enquiry or to keep you subscribed, and to keep an ordinary business record afterwards. Server access logs are held for a short period on a rolling basis. Consent records are kept for as long as needed to evidence your choice. You can ask us to delete information about you at any time using the contact details below.

Your rights and choices

Everyone

You can change or withdraw your cookie choice at any moment by clicking Do Not Sell or Share My Personal Information at the bottom of any page. That link reopens the consent panel, and it is the way to reach these settings on this site — we deliberately do not leave a floating cookie icon on the screen. Withdrawing consent is as easy as giving it, and it does not affect anything done before you withdrew.

To stop receiving our newsletter, use the unsubscribe link in any email we send you, or contact us and we will remove you.

If you are in the EEA or UK

You have the right to access the personal data we hold about you; to have it corrected or erased; to restrict or object to how we process it; to receive it in a portable format; and to withdraw consent at any time. You also have the right to complain to your national data-protection authority.

If you are a California resident

Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know what personal information we collect and why, to request that we delete or correct it, to opt out of any sale or sharing of it, and not to be discriminated against for exercising those rights. Residents of other states with comparable privacy laws have similar rights, and we extend the same controls to everyone.

We do not sell personal information. The embedded YouTube videos are the only feature on this site that could be characterised as “sharing” for cross-context behavioural advertising, and they are switched off unless you opt in. You can record a standing opt-out at any time through the Do Not Sell or Share My Personal Information link in the footer; we will honour it for those videos and for anything similar we add in the future. We also automatically honour the Global Privacy Control signal if your browser sends one.

Security

This site is served over an encrypted HTTPS connection, and access to the systems behind it is restricted to the people who need it. No method of transmission or storage is perfectly secure, so please do not send us sensitive personal information — such as Social Security or other government identifiers, financial account numbers, or documents evidencing your net worth or accredited-investor status — through the forms on this website. If we need that kind of information, we will ask for it through a secure channel or through the investor portal.

Children

This website is aimed at adults and at professional and accredited investors. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with information, please contact us and we will delete it.

International transfers

Bones Investment Group is based in the United States, and our hosting, email and newsletter providers operate there. If you contact us from outside the United States, your information will be transferred to and processed there, under appropriate safeguards where the law requires them.

Nothing here is an offer

This website is informational. Nothing on it, and nothing you send us through it, creates an investment advisory relationship or constitutes an offer to sell or a solicitation of an offer to buy any security. Any offering is made only through definitive offering documents provided separately to qualified recipients.

Changes to this policy

If we change this policy we will update the date at the top of this page. If a change materially affects how we use your information, we will make that clear on the site — and, where a change means we need your consent, we will ask for it before it takes effect.

Contact us

To ask a question about this policy, or to exercise any of the rights described above, please email us at teal@bonescapital.com, or use the form on our Contact page and mark your message for the attention of the Privacy Contact. We will respond within the time limits set by applicable law.