Privacy Policy

Northstar Financial Advisory, LLC ("Northstar," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit nstarfinance.com and any related subdomains, pages, or microsites we operate (together, the "Site"), and when you interact with us as a prospective or actual client.

This Privacy Policy applies to information we collect through the Site and through commercial communications (email, phone, web forms, scheduling tools). It does not govern the engagement-level services that Northstar provides to clients, which are subject to the applicable Service Agreement, Tax Service Agreement, or engagement letter you sign with us. Northstar primarily serves business clients and prospective business clients, and most information we collect through the Site is provided in a business-to-business context. Where applicable law provides different treatment for information collected in a B2B context, Northstar may rely on those provisions.

Communications you send to us through the Site, by email, by telephone, through scheduling tools, or by any other means before you have signed a written engagement agreement with Northstar are not confidential and are not protected by any advisor-client, consultant-client, attorney-client, or other professional or evidentiary privilege. You should not send us sensitive, regulated, privileged, or confidential information until a written engagement is in place.

1. Information We Collect

1.1 Information You Provide to Us

When you complete a contact form, request a consultation, download a gated resource, schedule a meeting, or otherwise communicate with us, you may provide us with information such as:

• Your name, business name, email address, and phone number
• Your job title, industry, company size, and information about your business needs
• The specialty, practice type, or service category you select from any drop-down menus
• Any free-text comments or questions you submit in a form or send to us by email

1.2 Information Collected Automatically

When you visit the Site, certain information is collected automatically through your browser, server logs, and analytics tools, including:

• Device and browser information (browser type, operating system, screen size, language preference)
• IP address, approximate geographic location, and Internet Service Provider
• Pages viewed, time on page, referring URL, and on-page actions
• Date and time of access, and the file you requested
• Clicks, scrolls, mouse movements, keyboard activity (excluding information typed into form fields), and other behavioral signals captured for analytics, usability research, and session replay

1.3 Cookies, Analytics, and Session Replay Tools

We use cookies, pixels, tags, local storage, and similar tracking technologies to operate the Site, measure traffic and engagement, understand how visitors use our content, improve usability, and detect abuse. These technologies are deployed directly by Northstar and through third-party service providers, including:

• Google Tag Manager — a tag management platform used to load and manage other tags and tracking scripts on the Site
• Google Analytics — a web analytics service used to measure traffic, audience characteristics, traffic sources, content performance, and conversion events
• Microsoft Clarity — a behavioral analytics and session replay service used to understand how visitors interact with the Site through heatmaps, scroll maps, and anonymized session recordings. Clarity records mouse movements, clicks, and scrolls, but we have configured Clarity to mask text entered into form fields, so personal information submitted through contact forms and gated resource downloads is not captured in session replays

Information collected through these tools is governed by each provider's own privacy practices as well as this Privacy Policy. We may add or remove analytics and advertising vendors from time to time without updating this Privacy Policy for each change. Cookies are small text files placed on your device that allow us and third parties to recognize your browser. You can configure your browser to refuse cookies or alert you when cookies are being sent. Disabling cookies may limit your ability to use certain features of the Site. Most browsers also allow you to opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.

1.4 Information from Third Parties

We may receive information about you from third parties such as social media platforms, advertising networks, business information providers, and referral partners. Any such information is handled under this Privacy Policy.

2. How We Use Your Information

We use the information we collect for any lawful business purpose, including to:

• Respond to your inquiries, provide requested information, and deliver gated resources
• Schedule consultations, prepare proposals, conduct discovery conversations, and discuss potential engagements
• Send commercial, promotional, educational, and transactional communications (including newsletters, articles, case studies, event invitations, and updates about our services). By submitting any form on the Site, by emailing us, or by scheduling a meeting with us, you consent to receive these communications until you opt out. You may unsubscribe from marketing communications at any time using the link in any marketing email or by contacting us directly.
• Operate, secure, monitor, troubleshoot, audit, maintain, and improve the Site, our content, our services, and our internal systems
• Measure the performance and effectiveness of our marketing, content, search engine optimization, and lead generation activities
• Conduct research, analytics, modeling, segmentation, and business intelligence to better understand our audience, develop new content and services, and grow our business
• Personalize your experience and tailor the content, recommendations, and communications you receive
• Detect, prevent, investigate, and respond to fraud, unauthorized access, abuse of the Site, or violations of our Terms of Use
• Comply with legal, regulatory, tax, accounting, and professional obligations, enforce our agreements, and protect our rights, property, and personnel
• Carry out any other purpose disclosed to you at the point of collection or for which you have provided consent

We may use aggregated, anonymized, or de-identified information for any lawful purpose, including business analysis, marketing, benchmarking, content development, and disclosure to third parties. Aggregated, anonymized, and de-identified information is not considered personal information under this Privacy Policy.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Service providers. Vendors and contractors who help us operate the Site, deliver email, host data, run analytics, schedule meetings, manage CRM data, or otherwise support our business. These providers are bound by confidentiality obligations and may only use the information to perform services for us.
• Legal compliance. When required by law, subpoena, court order, regulatory request, or to enforce our legal rights or the safety of others.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business or assets.
• With your consent. Any other disclosure for which you have provided consent.

4. Data Retention

We retain personal information for as long as we determine, in our discretion, is necessary or appropriate to fulfill the purposes described in this Privacy Policy; to comply with our legal, regulatory, tax, accounting, professional, and recordkeeping obligations; to maintain the security and integrity of our systems; to resolve disputes; to enforce our agreements; or for any other legitimate business purpose. Retention periods vary depending on the type of information, the context in which it was collected, and applicable legal requirements. We are not obligated to delete information except as required by law.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights with respect to personal information we collect about you:

• Right to know. Request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to delete. Request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to correct. Request that we correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing. Northstar does not sell personal information and does not share personal information with third parties for cross-context behavioral advertising as those terms are defined under the CCPA.
• Right to non-discrimination. We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us using the information in Section 12. Before responding to a request, we will verify your identity using information we already hold or by requesting additional information reasonably necessary to authenticate you. We may decline to act on a request that we determine, in our reasonable discretion, is unverified, fraudulent, manifestly unfounded, excessive, repetitive, or that we are not legally required to fulfill. Where the law permits, we may charge a reasonable fee for requests that are excessive or repetitive. Certain information is exempt from deletion or disclosure under applicable law (including information needed to comply with legal obligations, complete transactions, detect security incidents, or exercise free speech), and we may retain that information notwithstanding a request.

7. Do Not Sell or Share My Personal Information

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the right to opt out of the "sale" or "sharing" of their personal information, as those terms are defined under California law. The CCPA defines "sale" broadly to include any exchange of personal information for monetary or other valuable consideration, and "sharing" to include the disclosure of personal information to a third party for cross-context behavioral advertising.

Northstar does not sell personal information for money. We do, however, use third-party analytics, session replay, and advertising technology services (such as Google Analytics, Google Tag Manager, and Microsoft Clarity) that may involve the disclosure of information about your interactions with the Site to those providers. Depending on how these services are configured, those disclosures may be interpreted as "sharing" or "sale" under the CCPA.

If you are a California resident and would like to opt out of any such sharing or sale, you may do so by any of the following methods:

• Email us at info@nstarfinance.com with the subject line "CCPA Opt-Out" and include the name, email address, and any other identifiers you have used to interact with the Site
• Enable the Global Privacy Control (GPC) signal in your browser. Northstar honors GPC signals as an opt-out of sale and sharing under the CCPA
• Configure your browser to block third-party cookies and trackers, or install browser extensions that block analytics scripts
• Opt out directly with providers, including through the Google Analytics Opt-Out Browser Add-on and through Microsoft Clarity's opt-out controls in your Microsoft account settings

You may also designate an authorized agent to submit a verifiable opt-out request on your behalf. We may require the agent to provide written proof of authorization and may require verification of your identity. We will not discriminate against you for exercising any of your CCPA rights.

8. Visitors from Outside the United States

The Site is operated from the United States. If you access the Site from outside the United States, you understand and consent to your information being transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with comprehensive data protection laws, you may have additional rights under applicable law. To exercise those rights, contact us using the information in Section 12.

9. Children's Privacy

The Site is intended for business users and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it as soon as reasonably possible.

10. Third-Party Links

The Site may contain links to third-party websites or services that are not operated by Northstar. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party site you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Effective" date at the top of the page indicates when this Privacy Policy was last revised. Material changes will be communicated through a prominent notice on the Site. Your continued use of the Site after any change indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your rights, or want to raise a concern about how we handle personal information, please contact us at:

Northstar Financial Advisory, LLC
9454 Wilshire Blvd, 6th Floor
Beverly Hills, CA 90212
Email: info@nstarfinance.com
Phone: 888.999.0280