Privacy Policy

1. Introduction

Summit Financial Advisors ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website your-domain.com and use our financial advisory services.

By accessing or using our website and services, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, mailing address
• Financial Information: Income details, investment goals, risk tolerance, account information
• Identification Information: Date of birth, Social Security number, government-issued ID
• Professional Information: Employment status, occupation, employer details
• Communication Records: Correspondence, consultation notes, service requests

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages viewed, time spent, navigation paths, referring URLs
• Location Data: General geographic location based on IP address
• Cookies and Tracking Technologies: Information collected through cookies and similar technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Provide Financial Services: Deliver personalized financial advice, portfolio management, and investment recommendations
• Account Management: Create and manage your account, process transactions, maintain records
• Communication: Respond to inquiries, send service updates, provide customer support
• Compliance: Meet legal and regulatory obligations, prevent fraud, ensure security
• Improvement: Analyze usage patterns, improve our services, develop new features
• Marketing: Send newsletters, promotional materials, and relevant financial information (with your consent)
• Legal Protection: Enforce our terms, protect our rights, resolve disputes

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent: You have given explicit consent for specific processing activities
• Contract Performance: Processing is necessary to fulfill our contractual obligations
• Legal Obligation: We must process data to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, balanced against your rights

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

5.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Performance Cookies: Help us understand how visitors use our site
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your activity to deliver relevant advertisements

5.2 Managing Cookies

You can control cookies through your browser settings. However, disabling cookies may limit certain website features. Most browsers allow you to refuse or delete cookies.

6. How We Share Your Information

We may share your information with:

• Service Providers: Third-party vendors who assist with operations (payment processors, IT services, marketing platforms)
• Financial Partners: Investment firms, custodians, and financial institutions necessary for service delivery
• Legal Authorities: Government agencies, regulators, or law enforcement when required by law
• Professional Advisors: Lawyers, accountants, auditors, and consultants
• Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties.

7. Third-Party Services

Our website and services may integrate with third-party platforms:

• Google Analytics: Website traffic analysis and user behavior tracking
• Payment Processors: Secure payment transaction handling
• Email Marketing: Newsletter distribution and communication management
• Social Media: Integration with social platforms for content sharing
• Customer Support: Chat services and helpdesk platforms

These third parties have their own privacy policies. We are not responsible for their practices and encourage you to review their policies.

8. Data Security

We implement robust security measures to protect your information:

• SSL/TLS encryption for data transmission
• Secure servers with firewall protection
• Access controls and authentication protocols
• Regular security audits and vulnerability assessments
• Employee training on data protection practices
• Secure data backup and disaster recovery procedures

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal, regulatory, and tax obligations
• Resolve disputes and enforce our agreements
• Maintain business records and documentation

Generally, we retain client information for a minimum of seven (7) years after account closure or last service provision, or longer if required by law. Usage data and analytics are typically retained for shorter periods.

10. Your Privacy Rights

Depending on your location, you may have the following rights:

10.1 GDPR Rights (EU/EEA Residents)

• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your supervisory authority

10.2 Additional Rights (Region-Specific)

• California Residents (CCPA): Right to know, delete, and opt-out of data sale
• Other Jurisdictions: Rights as provided under applicable local privacy laws

10.3 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Section 14. We will respond to your request within 30 days.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection
• Privacy Shield certification (where applicable)
• Your explicit consent for the transfer

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information promptly.

If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer:

Email: [email protected]

15. Additional Information

15.1 Do Not Track Signals

Some browsers support "Do Not Track" (DNT) signals. Our website does not currently respond to DNT signals, but we honor opt-out preferences where applicable.

15.2 Email Communications

If you receive marketing emails from us, you may unsubscribe at any time by clicking the "unsubscribe" link in the email footer or contacting us directly. Please note that you cannot opt-out of service-related communications.

15.3 Social Media

Our website may include social media features. Your interactions with these features are governed by the privacy policies of the respective social media companies.

15.4 Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.