Privacy Policy

1. Introduction

BRCFIRM Financial Advisory ("BRCFIRM," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at brcfirm.org or use our financial advisory services.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

Information You Provide

• Name, email address, and phone number (via contact forms)
• Financial information shared during consultations
• Account credentials if you register for our portal
• Payment information processed securely via Stripe
• Communications you send us (emails, chat messages)

Information Collected Automatically

• IP address and approximate location
• Browser type, version, and operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and cookie data
• Interaction data (clicks, scrolls, form completions)

3. How We Use Your Information

• To provide and improve our financial advisory services
• To respond to inquiries and schedule consultations
• To process payments and manage your account
• To send service updates and relevant financial insights (with your consent)
• To analyze website usage and improve user experience
• To comply with legal and regulatory obligations (SEC, FINRA)
• To detect and prevent fraud or security threats

4. Legal Basis for Processing (GDPR)

If you are in the EEA, we process your data under the following legal bases:

• Contract — to fulfill our advisory services agreement
• Legitimate interests — to improve our services and prevent fraud
• Consent — for marketing communications and non-essential cookies
• Legal obligation — to comply with financial regulations

5. Sharing Your Information

We do not sell your personal information. We may share it with:

• Service providers — Stripe (payments), Google Analytics (analytics), Supabase (database)
• Regulatory authorities — SEC, FINRA, or other regulators as required by law
• Professional advisors — attorneys, accountants, auditors under confidentiality obligations
• Business transfers — in connection with a merger, acquisition, or asset sale

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Financial records are typically retained for 7 years per SEC regulations. You may request deletion of non-regulatory data at any time.

7. Your Rights

GDPR Rights (EEA Residents)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

CCPA Rights (California Residents)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale of personal information
• Right to non-discrimination for exercising your rights

8. Do Not Sell My Personal Information

BRCFIRM does not sell your personal information to third parties. California residents may submit a request to confirm this or to opt out of any future data sharing that could be considered a "sale" under the CCPA by contacting us at privacy@brcfirm.org.

9. Security

We implement industry-standard security measures including SSL/TLS encryption, access controls, and regular security audits to protect your personal information. However, no method of transmission over the internet is 100% secure.

10. Cookies

We use cookies and similar tracking technologies. For detailed information, please review our Cookie Policy.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

To exercise your rights or for any privacy-related questions, contact our Data Protection Officer: