Privacy Policy

1. Who We Are

Bridgepoint Advisory LLC ("Bridgepoint," "we," "us," or "our") is the data controller responsible for the personal data collected through this website. Our registered business address is 814 Congress Avenue, Suite 310, Austin, TX 78701. If you have questions about this policy or your personal data, email us at privacy@bridgepointadvisory.com.

2. What Data We Collect

When you interact with our website, we may collect the following categories of information:

• Contact form data: Name, company name, email address, phone number, industry, description of your IT challenge, and preferred meeting type. You provide this data voluntarily when submitting our consultation booking form.
• Cookies and usage data: If you consent to analytics cookies, we collect anonymized page visit data, referral source, device type, browser type, and approximate geographic location (city-level, not street-level). We use Google Analytics with IP anonymization enabled.
• Server logs: Our hosting provider automatically logs IP addresses, access times, pages visited, and HTTP status codes. These logs are retained for 30 days for security and diagnostic purposes.

We do not collect sensitive personal data such as Social Security numbers, financial account numbers, health information, or biometric data through this website.

3. Why We Collect It

We collect personal data for the following purposes:

• To respond to your inquiry: When you submit the consultation form, we use your contact details to follow up and schedule a meeting. Legal basis: your consent and our legitimate business interest in responding to service inquiries.
• To improve our website: Analytics data helps us understand which pages are most useful and where visitors drop off. Legal basis: your consent (via cookie banner).
• To measure advertising performance: If you arrived via a paid ad, conversion tracking data tells us whether our advertising is working. Legal basis: your consent (via cookie banner). No tracking occurs until you click "Accept All."
• To maintain website security: Server logs help us detect and prevent malicious activity. Legal basis: legitimate interest in protecting our systems.

4. How We Use Your Data

Your form submission data is used solely to respond to your inquiry, schedule consultations, and provide the services you request. We do not sell, rent, or trade your personal data to third parties for marketing purposes. Period.

We may share data with the following categories of service providers, all of whom are bound by data processing agreements:

• Email and CRM platforms (to manage our client communications)
• Cloud hosting provider (to serve this website)
• Analytics services (see Section 5 below)

5. Third-Party Services

This website uses the following third-party services, which are loaded only after you provide cookie consent:

• Google Analytics 4: Collects anonymized website usage statistics. IP anonymization is enabled by default. Data is processed in the United States under Google's standard data protection terms. You can opt out at any time by declining cookies or using a browser extension.
• Google Ads Conversion Tracking: If you arrived via a Google ad and submit our form, a conversion event is recorded. This data is aggregated and does not identify you personally to Google. Loaded only after cookie consent.

No other third-party tracking scripts are used on this website. We do not use social media pixels, retargeting platforms, or third-party advertising networks beyond Google Ads.

6. Cookies

This website uses cookies. A cookie is a small text file stored on your device by your web browser.

Essential cookies

These are necessary for the website to function. They include the cookie consent preference stored in your browser's localStorage. We do not use server-side session cookies.

Analytics cookies

Loaded only after you click "Accept All" on the cookie banner. Google Analytics sets cookies (_ga, _ga_*) to distinguish unique visitors and track sessions. These cookies expire after 14 months.

Marketing cookies

Google Ads conversion tracking cookies are set only after consent. They record whether a form submission occurred after clicking a Google ad. These cookies expire after 90 days.

How to disable cookies

You can decline non-essential cookies by clicking "Necessary Only" on our cookie banner. You can also disable cookies entirely through your browser settings. Note that disabling essential cookies may prevent certain website features from functioning properly.

7. Data Retention

• Form submissions: Retained for 24 months from the date of submission, then deleted unless you become an active client (in which case client records are governed by our service agreement).
• Analytics data: Google Analytics data is retained for 14 months. We do not export or store raw analytics data on our own servers.
• Server logs: Retained for 30 days, then automatically purged.
• Cookie consent preferences: Stored in your browser's localStorage indefinitely until you clear your browser data.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to deletion: You can request that we delete your personal data, subject to any legal obligations requiring us to retain it.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to our processing of your data based on legitimate interest.
• Right to withdraw consent: If processing is based on your consent, you can withdraw it at any time by declining cookies or contacting us.

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act. You have the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact us at privacy@bridgepointadvisory.com.

9. How to Exercise Your Rights

Send an email to privacy@bridgepointadvisory.com with the subject line "Data Rights Request." Include your name and the email address you used when contacting us. We will respond within 30 days. If we need to verify your identity before fulfilling a request, we will let you know promptly.

10. Data Security

We take appropriate technical and organizational measures to protect your personal data, including:

• TLS encryption for all data transmitted between your browser and our website
• Access controls limiting who within our organization can view form submissions
• Regular security reviews of our website and hosting infrastructure
• Vendor due diligence for all third-party service providers that process data on our behalf

No system is 100% secure. While we implement industry-standard protections, we cannot guarantee absolute security of data transmitted over the internet.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Material changes will be highlighted on the website for 30 days following the update.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your data rights, please contact us: