LEGAL

Privacy Policy

Retrevia Advisory, LLC
www.retreviaadvisory.com
Effective Date: April 9, 2026

This Privacy Policy ("Policy") describes how Retrevia Advisory, LLC ("Company," "we," "us," or "our") collects, uses, discloses, and protects information obtained through www.retreviaadvisory.com (the "Site") and any related services, communications, or interactions (collectively, the "Services"). By accessing or using the Site, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree, please discontinue use of the Site immediately.

1. Scope of this Policy

This Policy applies to all visitors, users, and others who access the Site or engage with our Services, including prospective clients, current clients, and general site visitors. It does not apply to third-party websites, platforms, or services that may be linked from our Site. We are not responsible for the privacy practices of those third parties.

2. Information We Collect

We collect only the information necessary to provide our Services and operate our business. The categories of information we collect include:

2.1 Information You Provide Voluntarily

This information is collected when you: complete a contact or inquiry form; subscribe to our communications or newsletter; schedule a discovery call or consultation; or otherwise communicate with us.

2.2 Information Collected Automatically

When you visit our Site, we or our third-party service providers may automatically collect certain technical and usage data, including IP address, browser type and version, pages viewed, time and date of your visit, referring URL, and device identifiers. This information is collected through cookies and similar tracking technologies as further described in Section 7.

2.3 Information We Do Not Collect

We do not collect payment card data, government-issued identification numbers, sensitive personal information (as defined under applicable law), or any data from minors under the age of 18.

3. How We Use Your Information

We use the information we collect solely for legitimate business purposes, including:

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

Our processing of personal information is based on one or more of the following legal bases: (a) your express consent; (b) the performance of a contract or steps taken at your request prior to entering a contract; (c) compliance with a legal obligation to which we are subject; or (d) our legitimate business interests, provided those interests are not overridden by your rights and interests.

5. Disclosure of Information

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own marketing or commercial purposes. We may share your information only in the following limited circumstances:

5.1 Service Providers

We may share information with vetted third-party vendors who assist in operating our Site or delivering our Services (e.g., email service providers, scheduling tools, CRM platforms), subject to confidentiality and data processing obligations consistent with this Policy.

5.2 Legal Requirements and Protection of Rights

We may disclose your information if required by law, regulation, legal process, or governmental request; to enforce our agreements or policies; to protect the rights, property, or safety of the Company, our clients, or others; or in connection with fraud prevention or security investigations.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or other business transition, your information may be transferred as part of that transaction, subject to standard confidentiality protections. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may disclose your information for any other purpose with your prior written consent.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When information is no longer needed, we will securely delete or anonymize it. Specific retention periods vary based on the nature of the information and our legal obligations.

7. Cookies and Tracking Technologies

Our Site may use cookies, web beacons, and similar tracking technologies to enhance functionality and analyze Site usage. Cookies are small text files stored on your device. You may configure your browser to refuse cookies or alert you when cookies are being sent; however, some features of the Site may not function properly without cookies.

We may use the following types of cookies:

By using our Site, you consent to our use of cookies as described in this Policy. You may withdraw consent at any time by adjusting your browser settings or using applicable opt-out mechanisms.

8. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, the General Data Protection Regulation (EU) 2016/679 ("GDPR") and/or applicable national implementing legislation may apply to our processing of your personal data. This section supplements the rest of this Policy and applies solely to individuals in those jurisdictions.

8.1 Data Controller

Retrevia Advisory, LLC is the data controller responsible for your personal data collected through the Site. If you have questions about how we handle your data, please contact us using the details in Section 16.

8.2 Legal Bases for Processing

We process your personal data only where we have a valid legal basis to do so under Article 6 of the GDPR. The legal bases we rely on include:

8.3 Your Rights Under the GDPR

Subject to applicable law and certain conditions and exceptions, you have the following rights with respect to your personal data:

8.4 How to Exercise Your GDPR Rights

To exercise any of the rights described above, please submit a written request to: info@retreviaadvisory.com. We will respond to your request within one (1) month of receipt. We may extend this period by a further two (2) months where requests are complex or numerous, in which case we will notify you within the first month.

8.5 International Data Transfers

We are based in the United States. If you are located in the EEA, UK, or Switzerland, please be aware that your personal data may be transferred to and processed in the United States. Where required by applicable law, we will implement appropriate safeguards for such transfers, including Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office.

8.6 Data Retention (GDPR)

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, and in any event no longer than required or permitted by applicable law.

8.7 Right to Lodge a Complaint

If you believe we have processed your personal data in violation of applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. A list of EEA supervisory authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk. We encourage you to contact us first so we can attempt to address your concerns directly.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA"). This section supplements the rest of this Policy and applies solely to California residents.

9.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

9.2 Your California Privacy Rights

Subject to certain exceptions, California residents have the right to:

9.3 Submitting a California Privacy Rights Request

To submit a verifiable consumer request, contact us at: info@retreviaadvisory.com. We will respond to verified requests within 45 days as required by law.

10. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and disclaim liability for unauthorized access beyond our reasonable control.

In the event of a data breach that triggers applicable notification obligations under state or federal law, we will notify affected individuals in accordance with those requirements.

11. Third-Party Links

Our Site may contain links to third-party websites or services not operated by us. These links are provided for your convenience only. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policies of every site you visit.

12. Children's Privacy

Our Site and Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a minor, we will take prompt steps to delete such information.

13. Changes to this Policy

We reserve the right to modify this Policy at any time in our sole discretion. Any changes will be effective immediately upon posting the updated Policy to the Site, with the revised effective date noted at the top of the document. Your continued use of the Site following the posting of changes constitutes your acceptance of the revised Policy.

For material changes, we will make reasonable efforts to provide more prominent notice, such as a banner on the Site or an email notification where feasible.

14. Disclaimer; Limitation of Liability

This Policy is provided for informational purposes only. Retrevia Advisory, LLC makes no representations or warranties of any kind, express or implied, regarding the completeness or accuracy of this Policy for any particular jurisdiction. Nothing in this Policy constitutes legal advice.

To the fullest extent permitted by applicable law, the Company shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of the Site or reliance on this Policy.

15. Governing Law and Dispute Resolution

This Policy and any disputes arising from or related to it shall be governed by and construed in accordance with the laws of the State of Illinois, without regard to its conflict of law provisions. Any dispute, claim, or controversy arising out of or relating to this Policy shall be resolved exclusively through binding arbitration administered in DuPage County, Illinois, unless the parties mutually agree otherwise in writing.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Retrevia Advisory, LLC
Website: www.retreviaadvisory.com
Email: info@retreviaadvisory.com

We will respond to all legitimate inquiries in a timely manner.