Privacy Policy
Privacy Policy for Brayshaw Financial
Effective Date: May 30, 2025
At Brayshaw Financial ("we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, www.brayshawfinancial.com (the "Website"), or use our services. This policy complies with applicable U.S. and international data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regulations.
1. Information We Collect
We collect various types of information to provide and improve our services, including:
1.1 Personal Information
Personal information is data that can identify you, either directly or indirectly. We may collect the following personal information:
- Contact Information: Name, email address, phone number, mailing address, or other contact details you provide when you fill out forms, contact us, or create an account.
- Financial Information: Bank account details, credit or debit card information, transaction history, or other financial data necessary to provide financial services.
- Identification Information: Social Security Number, driver’s license number, passport number, or other government-issued identification for compliance with anti-money laundering (AML) and know-your-customer (KYC) regulations.
- Demographic Information: Age, date of birth, marital status, or other demographic details provided during account setup or service inquiries.
- Account Information: Usernames, passwords, security questions, and other credentials used to access our services.
1.2 Non-Personal Information
We may collect non-personal information that does not directly identify you, including:
- Usage Data: Information about how you interact with our Website, such as pages visited, time spent on the Website, and clickstream data.
- Device Information: IP address, browser type, operating system, device type, and other technical information collected through cookies or similar technologies.
- Aggregated Data: Statistical or demographic data that does not identify any individual, used for analytics and improving our services.
1.3 Information from Third Parties
We may receive information about you from third parties, such as:
- Financial Institutions: Information from banks or payment processors to facilitate transactions.
- Credit Agencies: Credit reports or scores to assess eligibility for certain services.
- Public Sources: Information from public records or databases for compliance with legal requirements.
2. How We Collect Information
We collect information through the following methods:
- Directly from You: When you submit forms, register for an account, request services, or communicate with us via email, phone, or live chat.
- Automatically: Through cookies, web beacons, and other tracking technologies when you visit our Website.
- Third Parties: From partners, vendors, or other entities with whom we collaborate to provide services.
3. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To provide financial advisory services, process transactions, and manage your accounts.
- Compliance: To comply with legal and regulatory obligations, including AML, KYC, and tax reporting requirements.
- Communication: To respond to inquiries, send account updates, or provide marketing materials (with your consent, where required).
- Website Improvement: To analyze usage patterns and enhance the functionality and user experience of our Website.
- Security: To detect and prevent fraud, unauthorized access, or other illegal activities.
- Personalization: To tailor content, offers, or recommendations based on your preferences and behavior.
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process personal data based on the following legal grounds under the GDPR:
- Consent: Where you have provided explicit consent, such as for marketing communications.
- Contractual Necessity: To fulfill our obligations under a contract with you, such as providing financial services.
- Legal Obligation: To comply with applicable laws and regulations, such as AML or tax reporting.
- Legitimate Interests: For purposes such as fraud prevention, improving our services, or ensuring Website security, provided your rights and freedoms do not override these interests.
5. How We Share Your Information
We may share your information with:
- Service Providers: Third-party vendors who perform services on our behalf, such as payment processors, IT providers, or marketing agencies, under strict confidentiality agreements.
- Financial Partners: Banks, investment firms, or other financial institutions necessary to execute transactions or provide services.
- Regulators and Authorities: Government agencies or regulatory bodies to comply with legal obligations, such as the IRS, SEC, or European financial regulators.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred to the acquiring entity.
- Legal Processes: To respond to subpoenas, court orders, or other legal processes, or to protect our rights and property.
We do not sell your personal information to third parties for marketing purposes.
6. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:
- Financial records may be retained for up to seven years to comply with tax and regulatory requirements.
- Account information is retained for the duration of your relationship with us and for a reasonable period thereafter.
- Usage data may be retained for analytics purposes but is anonymized where possible.
When data is no longer needed, we securely delete or anonymize it.
7. Your Rights Under Data Protection Laws
Depending on your location, you may have the following rights regarding your personal information:
7.1 GDPR (EEA Residents)
- Access: Request access to your personal data and information about how it is processed.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data under certain circumstances.
- Restriction: Request restriction of processing in specific situations.
- Data Portability: Request a copy of your data in a structured, commonly used format.
- Object: Object to processing based on legitimate interests or for direct marketing.
- Withdraw Consent: Withdraw consent at any time where processing is based on consent.
7.2 CCPA (California Residents)
- Know: Request details about the personal information we collect, use, disclose, or sell.
- Delete: Request deletion of your personal information, subject to certain exceptions.
- Opt-Out: Opt out of the sale of your personal information (note: we do not sell personal information).
- Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
7.3 Other Jurisdictions
Residents of other jurisdictions, such as Canada (PIPEDA), Australia (Privacy Act), or Brazil (LGPD), may have similar rights. Contact us for details specific to your region.
8. How to Exercise Your Rights
To exercise your rights, contact us at:
- Email: privacy@brayshawfinancial.com
- Phone: (888) 226-8551
- Mail: Brayshaw Financial, 116 South River Road Building D, Suite 5 Bedford, NH 03110, USA
We will respond to requests within the timeframes required by law (e.g., 30 days for GDPR, 45 days for CCPA). We may require identity verification to process your request.
9. Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies to enhance your experience and analyze Website usage. Cookies may include:
- Essential Cookies: Necessary for the Website to function, such as maintaining your session.
- Analytics Cookies: To collect usage data and improve our services.
- Marketing Cookies: To deliver personalized advertisements, with your consent where required.
You can manage cookie preferences through your browser settings or our cookie consent tool. For more details, see our Cookie Policy.
10. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption of sensitive data in transit and at rest (e.g., SSL/TLS for Website communications).
- Access controls to limit data access to authorized personnel only.
- Regular security audits and vulnerability assessments.
- Incident response plans to address potential data breaches.
In the event of a data breach, we will notify affected users and relevant authorities as required by law (e.g., within 72 hours under GDPR).
11. International Data Transfers
As a U.S.-based company, your data may be transferred to and processed in the United States or other countries. For EEA residents, we ensure compliance with GDPR for cross-border data transfers through:
- Standard Contractual Clauses (SCCs): Contracts approved by the European Commission to ensure adequate data protection.
- Binding Corporate Rules (BCRs): For intra-company transfers, where applicable.
- Adequacy Decisions: Where the receiving country is deemed to have adequate data protection by the EU.
12. Children's Privacy
Our services are not directed to individuals under 16 (or 13 in the U.S. under COPPA). We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly. Contact us if you believe we have inadvertently collected data from a child.
13. Third-Party Links
Our Website may contain links to third-party websites or services. We are not responsible for their privacy practices. Review the privacy policies of those third parties before providing your information.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our Website or via email (if applicable). The effective date at the top of this policy will be updated accordingly.
15. Contact Us
For questions, concerns, or complaints about this Privacy Policy or our data practices, contact our Data Protection Officer at:
- Email: privacy@brayshawfinancial.com
- Phone: (855) 226-8551
- Mail: Brayshaw Financial, 116 South River Road Building D, Suite 5 Bedford, NH 03110, USA
For EEA residents, you may also contact our EU Representative at [Insert EU Representative Contact Details, if applicable].
You have the right to lodge a complaint with a supervisory authority in your jurisdiction, such as the Information Commissioner’s Office (ICO) in the UK or your local data protection authority in the EEA.
16. Additional Information for California Residents
Under the CCPA, California residents have specific rights regarding their personal information. In the past 12 months, we have:
- Collected personal information as described in Section 1.
- Disclosed personal information to service providers and financial partners for business purposes, as described in Section 5.
- Not sold personal information.
To exercise your CCPA rights, see Section 8. We will not discriminate against you for exercising these rights.
17. Additional Information for Nevada Residents
Under Nevada law (SB 220), you may opt out of the sale of certain personal information. We do not sell personal information, but you may contact us at privacy@brayshawfinancial.com to submit a request or for more information.