Privacy Policy
Effective date: May 2026
Summit Compliance LLC ("Summit Compliance," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit our website, how we use that information, and the choices you have. By using this website, you consent to the practices described in this policy.
Information We Collect
Information you provide to us. When you submit our contact form, we collect the information you choose to share — typically your name, email address, phone number (if provided), the name of your firm, and the content of your message. We use this information to respond to your inquiry and to communicate with you about a potential engagement.
Information about others. Please do not submit personal information about other people through this website unless you have the authority to do so. By submitting information about another person, you represent and warrant that you have received authorization to share that information with us.
Information collected automatically. When you visit our website, our website platform and hosting providers may automatically collect certain technical information about your visit, including:
Pages you view and the time and date of your visit
The website you came from (referrer)
Approximate location based on IP address (typically city or region level)
Device type, browser type, and operating system
This information is collected through our website platform (Squarespace) and the services that support our domain. At present, no third-party analytics or tracking tools (such as Google Analytics) are active on this website. If we add an analytics tool in the future, we will update this Privacy Policy to reflect that change.
Cookies and similar technologies. Our website uses cookies and similar technologies to operate the site and support basic functionality. We do not use marketing, advertising, or behavioral tracking cookies on this website. You can disable cookies through your browser settings, though some features of the site may not function properly if you do.
How We Use Your Information
We use the information we collect to:
Respond to your inquiries and communicate with you
Provide the consulting services you've engaged us for
Operate, maintain, and improve our website
Understand how visitors use our website so we can improve content and user experience
Send occasional follow-up communications, where appropriate, related to your inquiry
Comply with legal obligations and protect our legal rights
How We Share Your Information
We do not sell, rent, or trade your personal information. Your information is not a product, and we do not share it with third parties for their own marketing purposes.
We share information only in the following limited circumstances:
Service providers. With vendors who help us operate the website and our business — for example, our website platform (Squarespace), domain registrar and hosting provider (Network Solutions), and our email provider. These vendors are authorized to use the information only to perform services for us.
Legal and safety reasons. When we believe disclosure is required by law, court order, or to protect our rights, property, or safety, or the rights, property, or safety of others.
Business transfers. In connection with a sale, merger, financing, or similar transaction, in which case we will provide notice as required by law.
Automated Decisions and Advertising
To make our practices easy to verify, we want to be explicit about how we do not use the information collected through this website:
We do not use your information for automated decision-making, profiling, or marketing automation.
We do not run targeted or behavioral advertising on this website.
We do not provide your information to third parties for cross-context behavioral advertising.
Data Retention
We retain different categories of information for different periods, consistent with the purpose for which we collected it and applicable recordkeeping obligations:
Contact form inquiries that do not result in an engagement are generally retained for up to twenty-four (24) months from the date of the last communication, after which they are deleted or anonymized.
Engagement-related correspondence and records are retained for the period required by our books-and-records obligations under applicable securities laws and standards of the financial services industry — typically a minimum of five (5) years, and longer where the underlying obligation requires it.
Website usage information is retained according to the default retention settings of our website platform and any analytics provider that may be in place.
We retain information longer than the periods above where necessary to comply with a legal obligation, resolve a dispute, or enforce our agreements.
Your Choices and Rights
Depending on where you live, you may have rights with respect to your personal information, including the right to:
Request access to the personal information we have about you
Request correction of inaccurate personal information
Request deletion of your personal information
Opt out of certain uses of your information
Lodge a complaint with a data protection authority
To exercise these rights, contact us at jason@summit-compliance.com. We will respond consistent with applicable law. We may need to verify your identity before fulfilling certain requests.
Virginia Residents (VCDPA)
If you are a Virginia resident, the Virginia Consumer Data Protection Act ("VCDPA") gives you specific rights with respect to your personal data, including the right to:
Confirm whether we are processing your personal data and access that data
Correct inaccuracies in your personal data, taking into account the nature of the data and the purposes of processing
Delete personal data you have provided to us or that we have obtained about you
Obtain a copy of your personal data in a portable, readily usable format
Opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects
To exercise any of these rights, contact us at jason@summit-compliance.com. We will respond to a verifiable request within forty-five (45) days of receipt, with an additional forty-five (45) days where reasonably necessary and after we provide you with notice and an explanation of the extension.
If we decline to take action on your request, you have the right to appeal that decision. To appeal, reply to our written response with the basis for your appeal, and we will respond in writing within sixty (60) days of receiving the appeal. If the appeal is denied, you may submit a complaint to the Virginia Attorney General's Office at https://www.oag.state.va.us/.
Children's Privacy
Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
Security
We use reasonable administrative, technical, and physical safeguards to protect the information we collect. No method of transmission over the internet or electronic storage is fully secure, however, and we cannot guarantee absolute security.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.
International Visitors
This website is operated from the United States. If you access the site from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.
Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective Date" above reflects the date of the most recent version. Material changes will be posted on this page; continued use of the website after changes are posted constitutes acceptance of the updated policy.
Contact Us
Questions or requests related to this Privacy Policy can be sent to:
Email: jason@summit-compliance.com Website: summit-compliance.com