Privacy Policy

1. Introduction

Summit Financial Advisors ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website your-domain.com or use our financial advisory services.

By accessing our website or using our services, you agree to the terms outlined in this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information that you voluntarily provide to us, including but not limited to:

• Full name and contact information (email address, phone number, mailing address)
• Date of birth and Social Security number (when required for financial services)
• Financial information (income, assets, investment objectives, risk tolerance)
• Employment information and professional details
• Account credentials and authentication information
• Payment and billing information

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing activities:

• IP address and geographical location
• Browser type and version
• Operating system and device information
• Pages viewed, time spent on pages, and navigation patterns
• Referring website addresses
• Date and time of visits

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience and analyze website usage. These technologies help us understand user preferences and improve our services.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our financial advisory services
• Client Communication: To respond to inquiries, send updates, and provide customer support
• Account Management: To create and manage your client account
• Financial Analysis: To analyze your financial situation and provide personalized recommendations
• Compliance: To comply with legal obligations and regulatory requirements
• Marketing: To send promotional materials and newsletters (with your consent)
• Security: To protect against fraud, unauthorized access, and security threats
• Website Improvement: To analyze usage patterns and enhance user experience
• Transaction Processing: To process payments and complete financial transactions

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for processing your personal data
• Contractual Necessity: Processing is necessary to perform our contractual obligations
• Legal Obligation: Processing is required to comply with applicable laws and regulations
• Legitimate Interest: Processing is necessary for our legitimate business interests, provided these do not override your rights

5. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our business, including:

• Payment processors and financial institutions
• Cloud hosting and data storage providers
• Analytics and marketing service providers
• Professional advisors (accountants, attorneys, auditors)
• Technology and security service providers

5.2 Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or when necessary to:

• Comply with legal processes and regulatory requirements
• Protect the rights, property, or safety of Summit Financial Advisors, our clients, or others
• Prevent fraud or security threats
• Respond to lawful requests from public authorities

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality and security
• Performance Cookies: Help us understand how visitors use our website
• Functional Cookies: Remember your preferences and personalize your experience
• Marketing Cookies: Track your browsing to deliver relevant advertisements

6.2 Managing Cookies

You can control cookie settings through your browser preferences. However, disabling cookies may limit your ability to use certain features of our website. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block all cookies
• Receive notifications before cookies are stored

7. Third-Party Services

Our website may contain links to third-party websites or integrate third-party services. We use the following categories of third-party services:

• Analytics: Google Analytics for website traffic analysis
• Payment Processing: Secure payment gateways for transaction processing
• Communication: Email service providers for newsletters and client communications
• Social Media: Social media platforms for content sharing and engagement
• Customer Support: Help desk and chat support tools

These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review their privacy policies before providing any personal information.

8. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for data transmission
• Encrypted data storage and backup systems
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy
• Firewalls and intrusion detection systems

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to maintain the highest standards of data protection.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:

• The duration of our business relationship with you
• Legal and regulatory requirements (typically 7 years for financial records)
• The need to resolve disputes or enforce agreements
• Legitimate business purposes

When we no longer need your information, we securely delete or anonymize it in accordance with our data retention policies.

10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

10.1 GDPR Rights (EEA Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

10.2 CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising privacy rights

10.3 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Section 14. We will respond to your request within the timeframe required by applicable law (typically 30 days).

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with third-party processors
• Compliance with Privacy Shield principles (where applicable)
• Other legally approved transfer mechanisms

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notifications to registered users
• Displaying a prominent notice on our website

Your continued use of our services after changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this page regularly to stay informed about our privacy practices.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For users in the European Economic Area, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not addressed your concerns adequately.

15. Your Consent

By using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

16. Additional Information

Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT signals, but we provide you with choices about data collection and use as described in this policy.

Email Communications

If you receive marketing emails from us, you can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of the email or by contacting us directly. Please note that even if you opt-out of marketing communications, we may still send you service-related messages.

California Shine the Light Law

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. To make such a request, please contact us using the information provided above.