Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to mitchellpeak.org, its pages, forms, portals, advertisements, and related online properties (collectively, the “Website”), and to personal information processed by Mitchell Peak Enterprises LLC (“Mitchell Peak,” “Company,” “we,” “us,” or “our”) in connection with inquiries, consultations, advertising and marketing services, customer relationships, and business operations.

This Policy does not govern a third party’s independent privacy practices. When we process personal information solely on behalf of a business Client, that Client may be the controller or business responsible for the information, and its privacy policy may apply.

2. Information We Collect

Information You Provide

• Name, email address, telephone number, mailing address, and other contact information;
• Company name, title, industry, website, social-media profiles, business goals, advertising budget, revenue range, and service interests;
• Information submitted through contact, consultation, application, questionnaire, intake, scheduling, or lead forms;
• Account, campaign, CRM, website, advertising-platform, and integration information;
• Communications, support requests, survey responses, testimonials, and feedback;
• Transaction, invoice, billing-status, and payment-related information; and
• Any other information you voluntarily provide.

Payment-card information may be collected directly by a payment processor. We generally receive transaction details and limited payment identifiers rather than complete card numbers.

Information Collected Automatically

• IP address, browser, device type, operating system, language, and approximate location;
• Pages viewed, links clicked, referring pages, visit dates, session duration, and interaction data;
• Cookie identifiers, advertising identifiers, pixel data, and similar online identifiers;
• Campaign attribution and advertisement interaction information; and
• Security, diagnostic, error, and fraud-prevention data.

Information From Other Sources

We may receive information from advertising platforms, analytics providers, CRM systems, scheduling tools, social networks, public sources, referrals, business partners, data providers, and Clients that direct us to provide services.

3. Categories of Personal Information

We do not intentionally collect sensitive personal information unless it is reasonably necessary, disclosed, and permitted by law. Please do not submit Social Security numbers, government identification, health information, complete financial credentials, or other sensitive information unless specifically requested through a secure approved method.

4. How We Use Personal Information

We may use personal information to:

• Operate, maintain, secure, and improve the Website;
• Respond to inquiries and schedule consultations;
• Prepare proposals and provide contracted services;
• Create and manage advertising campaigns, funnels, websites, CRM systems, or integrations;
• Process payments, invoices, subscriptions, and business records;
• Communicate about services, appointments, accounts, support, and transactions;
• Send marketing where permitted and honor opt-out requests;
• Measure traffic, campaign attribution, conversions, and performance;
• Personalize content and advertising;
• Detect fraud, abuse, security incidents, or unlawful activity;
• Enforce contracts and protect legal rights;
• Comply with legal, tax, regulatory, and recordkeeping duties; and
• Conduct internal analysis and develop or improve services.

5. Cookies and Similar Technologies

We and service providers may use cookies, pixels, tags, local storage, scripts, software development kits, and similar technologies. These tools may remember preferences, maintain security, measure Website use, attribute leads or conversions, and support personalized advertising.

• Necessary technologies support security, navigation, forms, and essential functions.
• Analytics technologies help us understand visits and improve performance.
• Functional technologies remember choices and enable enhanced features.
• Advertising technologies measure campaigns and may support interest-based or targeted advertising across services.

You may manage cookies through an available consent tool or browser settings. Blocking some technologies may affect Website functionality. Cookie choices are generally specific to each browser and device.

6. Analytics and Advertising Technologies

We may use services such as Google Analytics, Google Ads, Meta Pixel, Meta Conversions API, Microsoft Advertising, LinkedIn Insight Tag, TikTok Pixel, or comparable tools. These providers may collect online identifiers, device information, activity, and campaign data and may combine it with information from other services, subject to their own policies.

These technologies may constitute “targeted advertising,” “cross-context behavioral advertising,” “sharing,” or a “sale” under some state laws, even when no money is exchanged. Where required, we provide notice and a method to opt out. We do not knowingly sell personal information for money.

7. How We Disclose Personal Information

We may disclose personal information to:

• Service providers and processors supporting hosting, CRM, analytics, communications, scheduling, payment processing, cybersecurity, storage, automation, and professional services;
• Advertising and social-media partners for campaign measurement, attribution, audience creation, and targeted advertising where permitted;
• Clients when information is submitted in response to a Client campaign or when we act as the Client’s service provider;
• Business partners and contractors assisting with authorized services;
• Government or legal recipients when required by law or reasonably necessary to protect rights, safety, and security; and
• Transaction participants in a merger, financing, reorganization, acquisition, bankruptcy, or sale of business assets.

We may disclose aggregated or deidentified information that cannot reasonably identify you. We will not attempt to reidentify deidentified information except as permitted by law.

8. Lead Generation and Client Campaigns

Mitchell Peak may build or manage advertisements and forms for business Clients. If you submit information through a Client campaign, the information may be delivered to that Client and governed by the Client’s privacy practices. Mitchell Peak may process it as a service provider or processor to deliver, route, measure, and support the lead. Contact the identified business directly to exercise rights concerning its independent use of your information.

9. Email, Telephone, and SMS Communications

If you provide contact information, we may communicate about inquiries, appointments, services, transactions, support, and—where permitted—promotions. Consent to marketing texts is not a condition of purchase. Message frequency may vary, and message and data rates may apply. Reply STOP to opt out of text messages or HELP for assistance. You may unsubscribe from marketing emails using the link in the message or by contacting us.

Opting out of marketing does not prevent non-promotional communications reasonably necessary for transactions, accounts, security, or legal obligations.

10. Legal Bases Where Applicable

Where a law requires a legal basis, we process information based on consent, performance of a contract, steps requested before entering a contract, compliance with law, protection of vital interests, or legitimate interests such as operating and securing our business, communicating with customers, improving services, and preventing fraud. You may withdraw consent prospectively where processing depends on consent.

11. Data Retention

We retain personal information only as reasonably necessary for the purposes described in this Policy, including service delivery, account administration, dispute resolution, fraud prevention, legal compliance, tax and accounting obligations, and enforcement of agreements. Retention varies based on the information, relationship, legal requirements, and operational need. We may retain aggregated or deidentified information longer. When appropriate, information is deleted, deidentified, or securely disposed of.

12. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, authentication, vendor review, secure transmission where appropriate, monitoring, backups, and personnel practices. No website, network, transmission, or storage system is completely secure, and we cannot guarantee absolute security. You are responsible for protecting passwords and promptly notifying us of suspected unauthorized activity.

13. Your Privacy Choices

• Marketing email: Use the unsubscribe link or email us.
• Text messages: Reply STOP.
• Cookies: Use available cookie controls or browser settings.
• Targeted advertising: Submit an opt-out request using the contact method below and use available consent controls.
• Platform settings: Review privacy and advertising controls offered by Google, Meta, and other platforms.
• Browser signals: Where legally required and technically detectable, we process recognized universal opt-out signals, such as Global Privacy Control, as a request to opt out for that browser or device.

14. U.S. State Privacy Rights

Depending on your state, our size, the nature of our processing, and applicable legal thresholds, you may have rights to:

• Confirm whether we process your personal information;
• Access or obtain a portable copy of personal information;
• Correct inaccurate information;
• Delete certain personal information;
• Opt out of sale, targeted advertising, sharing, or certain profiling;
• Limit certain uses or disclosures of sensitive personal information;
• Obtain a list or categories of third parties receiving information where required;
• Withdraw consent where processing is consent-based;
• Appeal a denial of a privacy request; and
• Receive equal service and pricing without unlawful discrimination for exercising privacy rights.

These rights may be subject to exceptions, verification requirements, and statutory thresholds. We will honor applicable rights and respond within the period required by law.

15. California Privacy Notice

California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct, delete, and obtain information about categories of personal information collected, sources, business purposes, and recipients. Residents may also opt out of “sale” or “sharing” and limit certain uses of sensitive personal information where applicable.

During the preceding 12 months, we may have collected the categories described in Section 3 and disclosed them for the business purposes described in Sections 4 and 7. Advertising identifiers and internet activity may have been disclosed to advertising partners in a manner considered “sharing” under California law. We do not knowingly sell or share personal information of consumers under 16 without required affirmative authorization.

California residents may submit requests using Section 18. Authorized agents may submit requests with proof of authority. We may separately verify the consumer’s identity and authority.

16. Other State-Specific Disclosures

Residents of Utah, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia, and other states with applicable comprehensive privacy laws may exercise the rights provided by their state, subject to legal scope and exceptions.

Where required, consumers may appeal our decision by replying to our response with the word “Appeal” and explaining the concern. If an appeal is denied, we will provide information about contacting the appropriate state regulator when required.

Nevada residents may submit a verified request to opt out of covered sales under Nevada law. We do not sell covered information for monetary consideration as that term is defined by Nevada law.

17. How to Submit a Privacy Request

We may request information reasonably necessary to verify identity and protect against fraudulent requests. We will use verification information only for verification, security, fraud prevention, and legal compliance. If we cannot verify a request, we may ask for additional information or deny it as permitted by law.

An authorized agent may act for you where permitted, but we may require signed authorization or direct identity confirmation. We do not discriminate against anyone for exercising an applicable privacy right.

18. Appeals and Complaints

If we deny a request, you may appeal by replying to our decision or emailing [email protected] with the subject “Privacy Appeal.” Explain why you believe the decision should be reconsidered. We will review and respond as required by applicable law. You may also contact your state attorney general or consumer-protection authority.

19. Children’s Privacy

The Website and services are intended for adults and business users and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us so we can investigate and delete it where required. We do not knowingly sell or share personal information of minors in violation of applicable law.

20. External Websites and Services

The Website may link to external sites, applications, social networks, or services. Their privacy practices are governed by their own notices. We are not responsible for third-party privacy, security, content, or conduct. Review third-party policies before providing information.

21. Business-to-Business and Employment Information

We may process information about representatives of customers, vendors, and partners for relationship management, service delivery, due diligence, security, billing, and communications. If we receive job inquiries, contractor applications, or professional information, we may use it to evaluate qualifications, communicate, conduct permitted checks, and maintain recruiting records.

22. International Users

Mitchell Peak is based in the United States. If you access the Website from another country, information may be transferred to and processed in the United States or other locations where our providers operate. Where required, we use legally recognized transfer mechanisms and safeguards. International users may contact us to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent under applicable law.

23. Changes to This Privacy Policy

We may update this Policy to reflect changes in law, technology, services, or business practices. The revised Policy will be posted with a new “Last Updated” date. If changes materially affect privacy rights, we will provide additional notice or obtain consent when required. Continued use after the effective date means the updated Policy applies to future processing, subject to applicable law.

24. Relationship to Other Agreements

This Policy should be read with our Terms and Conditions and any applicable service or data-processing agreement. If a Client-specific data-processing agreement governs information we process solely for that Client, that agreement controls for the covered processing.