Privacy Policy

1. Introduction

Summit Financial Advisors ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, mailing address
• Financial Information: Income details, investment goals, financial status (only when you choose to provide it for consultation purposes)
• Identification Information: Date of birth, Social Security number (only when required for service provision)
• Professional Information: Employment status, occupation, business information
• Account Information: Username, password, and account preferences

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing actions:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Location Data: General geographic location based on IP address
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our financial advisory services
• Communication: To respond to inquiries, send newsletters, and provide customer support
• Personalization: To customize your experience and provide tailored financial recommendations
• Analytics: To analyze website usage and improve our content and services
• Legal Compliance: To comply with legal obligations and regulatory requirements
• Security: To protect against fraud, unauthorized access, and other security threats
• Marketing: To send promotional materials (with your consent where required)
• Business Operations: To manage our business operations and maintain records

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on the following legal grounds:

• Consent: You have given explicit consent for processing your personal data
• Contract Performance: Processing is necessary to fulfill our contractual obligations
• Legal Obligations: Processing is required to comply with legal and regulatory requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our website.

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Enable enhanced functionality and personalization
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness

5.2 Managing Cookies

You can control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific websites
• Block all cookies
• Delete all cookies when you close your browser

6. Information Sharing and Disclosure

We may share your information in the following circumstances:

6.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, including:

• Cloud storage providers
• Email service providers
• Analytics providers
• Payment processors
• Customer relationship management systems

6.2 Legal Requirements

We may disclose your information when required by law, including to:

• Comply with legal processes or government requests
• Enforce our terms and conditions
• Protect our rights, property, or safety
• Investigate potential violations

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6.4 With Your Consent

We may share information with third parties when you have provided explicit consent.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection and security practices
• Regular backups and disaster recovery procedures
• Firewall protection and intrusion detection systems

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods vary depending on the type of information and purpose:

• Account Information: Retained while your account is active and for a reasonable period thereafter
• Financial Records: Retained in accordance with financial services regulations (typically 7 years)
• Marketing Data: Retained until you withdraw consent or opt out
• Legal Documentation: Retained as required by applicable laws and regulations

When we no longer need your information, we will securely delete or anonymize it.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 General Rights

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (right to be forgotten)
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Data Portability: Receive your personal information in a structured, machine-readable format
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

9.2 California Privacy Rights (CCPA)

California residents have additional rights including:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

9.3 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the Contact section. We will respond to your request within the timeframe required by applicable law (typically 30 days).

10. Third-Party Services and Links

Our website may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties.

10.1 Third-Party Services We Use

• Analytics: Google Analytics (for website usage analysis)
• Social Media: Social media platforms for content sharing
• Payment Processing: Secure payment processors for transaction handling
• Email Services: Email marketing and communication platforms

We encourage you to review the privacy policies of any third-party services you access through our website.

11. International Data Transfers

Your information may be transferred to, and maintained on, servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

If you are located outside the United States and choose to provide information to us, we transfer your personal information to the United States and process it there. By submitting your information, you consent to this transfer.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with third parties
• Adequacy decisions where applicable

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers.

13. Do Not Track Signals

Some web browsers have a "Do Not Track" feature that signals to websites that you do not want your online activities tracked. Our website does not currently respond to Do Not Track signals. We continue to work on implementing appropriate responses to such signals.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or prominent notice on our website for material changes
• Obtain your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 10 business days. For urgent privacy concerns, please indicate "URGENT" in your subject line.

16. Supervisory Authority

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal information violates applicable law.