Product Counsel - Data & Privacy

We're looking for a Product Counsel - Data & Privacy to join our legal team as the first-line owner of data, privacy, and information-security legal work. Customer data is core to how Imprint's programs create value, and this role makes sure we share and protect that data the right way, advising on partner data sharing, privacy opt-outs, FCRA and credit data, GLBA/Reg P, data retention, and information security, while working at the pace of a startup that ships fast and takes its regulatory obligations seriously.

This is a high-ownership individual contributor role. You'll act as the first-line legal resource for data-sharing and privacy questions across our ongoing and launching programs. You'll have your own coverage areas from day one, direct access to senior leadership, and real influence on how customer data powers our products. You'll report to our Associate General Counsel and work alongside a small, experienced legal team, partnering closely with our Product Counsel, Data, and Security teams.

This role is ideal for a self-driven attorney who thrives in fast-moving environments, builds strong cross-functional relationships, and takes pride in owning work end-to-end.

WHAT SUCCESS LOOKS LIKE IN THE FIRST 90 DAYS

- Built strong working relationships with Data, Engineering, Security, and Compliance stakeholders.

- Taken ownership of day-to-day data-sharing and privacy opt-out reviews that require legal sign-off.

- Provided practical FCRA and GLBA/Reg P guidance on live matters and helped maintain the team's data-sharing and FCRA guides.

- Advised on data retention questions and at least one partner information-security or incident-response matter.

- Tracked and closed out legal requests with clear timelines and proactive communication to stakeholders.

- Serve as the go-to legal advisor on partner data sharing: what customer, account, and application data can be shared through integrations and offline feeds, and on what legal basis, and document that guidance for the Data and business teams.

- Advise on privacy opt-outs and suppression obligations, including processing partner privacy files and honoring opt-outs across data sets and downstream third parties; maintain business-facing data-sharing and opt-out guides.