1. Introduction
Summit Financial Advisors ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website your-domain.com and use our financial advisory services.
By accessing or using our website and services, you agree to the terms outlined in this Privacy Policy. If you do not agree with our practices, please do not use our services.
2. Information We Collect
2.1 Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, mailing address
- Financial Information: Income details, investment goals, risk tolerance, financial history
- Identification Information: Date of birth, government-issued ID numbers (when required by law)
- Professional Information: Employment status, occupation, employer details
- Account Information: Username, password, security questions and answers
2.2 Automatically Collected Information
When you visit our website, we automatically collect certain information:
- Usage Data: IP address, browser type, device information, operating system
- Cookies and Tracking: Session data, preferences, browsing behavior
- Log Data: Access times, pages viewed, referring URLs, clickstream data
2.3 Information from Third Parties
We may receive information about you from:
- Credit bureaus and financial institutions
- Identity verification services
- Marketing partners and analytics providers
- Social media platforms (if you connect your accounts)
3. How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: To provide financial advisory services, portfolio management, and investment recommendations
- Account Management: To create and manage your account, process transactions, and maintain records
- Communication: To respond to inquiries, send newsletters, updates, and important notices
- Compliance: To comply with legal obligations, regulatory requirements, and industry standards
- Security: To detect and prevent fraud, unauthorized access, and other illegal activities
- Improvement: To analyze usage patterns, improve our services, and enhance user experience
- Marketing: To send promotional materials and information about services that may interest you (with your consent)
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on:
- Consent: You have given explicit consent for specific processing purposes
- Contractual Necessity: Processing is necessary to fulfill our contract with you
- Legal Obligation: We must process data to comply with applicable laws and regulations
- Legitimate Interest: Processing serves our legitimate business interests while respecting your rights
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience:
5.1 Types of Cookies We Use
- Essential Cookies: Required for website functionality and security
- Performance Cookies: Help us understand how visitors use our website
- Functionality Cookies: Remember your preferences and settings
- Marketing Cookies: Track your browsing to deliver relevant advertisements
5.2 Managing Cookies
You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. Most browsers allow you to:
- View and delete cookies
- Block third-party cookies
- Block cookies from specific websites
- Delete all cookies when closing your browser
6. Information Sharing and Disclosure
We may share your information with:
6.1 Service Providers
- Financial institutions and custodians
- Payment processors and banking partners
- Technology and hosting providers
- Marketing and analytics services
- Professional advisors (lawyers, accountants, auditors)
6.2 Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal processes, court orders, or government requests
- Enforce our terms of service and other agreements
- Protect our rights, property, and safety, or that of others
- Prevent fraud and ensure security
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
We do not sell your personal information to third parties for their marketing purposes.
7. Data Security
We implement robust security measures to protect your information:
- Encryption: SSL/TLS encryption for data transmission
- Access Controls: Restricted access to personal information on a need-to-know basis
- Security Monitoring: Continuous monitoring for suspicious activities
- Regular Audits: Periodic security assessments and vulnerability testing
- Employee Training: Regular training on data protection and security practices
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal, regulatory, and tax obligations (typically 7-10 years for financial records)
- Resolve disputes and enforce our agreements
- Protect against fraud and maintain security
When information is no longer needed, we securely delete or anonymize it according to our data retention schedule and applicable laws.
9. Your Rights and Choices
9.1 GDPR Rights (EEA Residents)
If you are located in the European Economic Area, you have the following rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate information
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
9.2 General Rights
- Opt-Out of Marketing: Unsubscribe from promotional emails using the link in each message
- Cookie Preferences: Manage cookies through your browser settings
- Account Closure: Request closure of your account (subject to legal retention requirements)
9.3 Exercising Your Rights
To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to your request within 30 days.
10. Third-Party Services and Links
Our website may contain links to third-party websites and integrate with third-party services:
- Analytics: Google Analytics, Adobe Analytics
- Social Media: Facebook, Twitter, LinkedIn integration
- Payment Processing: Stripe, PayPal, and financial institutions
- Customer Support: LiveChat, Zendesk
These third parties have their own privacy policies. We are not responsible for their practices and encourage you to review their policies before providing any information.
11. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly.
If you believe we have collected information from a child, please contact us immediately.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
When we transfer data internationally, we implement appropriate safeguards such as:
- Standard Contractual Clauses approved by the European Commission
- Privacy Shield certification (where applicable)
- Adequacy decisions recognizing equivalent data protection
13. Contact Information
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Data Protection Officer
Email: [email protected]
Supervisory Authority
If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to your registered email address
- Displaying a prominent notice on our website
We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.
15. Your Consent
By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.
