Privacy Policy

1. Introduction

Pinnacle Impact Solutions LLC ("Company," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at www.pinnacleimpactsolutions.com or engage our consulting services.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our website and services.

2. Information We Collect

Information You Provide Directly

When you submit a booking form, contact us, or engage our services, we may collect:

Payment Information

We do not store your credit card or bank account details on our servers. All card payments are processed securely by Stripe. Zelle payments are processed through your own banking institution. We retain only transaction confirmation records (amount, date, session type) for accounting purposes.

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and approximate geographic location
• Browser type, version, and device type
• Pages visited, time spent, and navigation patterns
• Referring URLs (how you arrived at our site)
• Date and time of your visit

HIPAA-Related Information

If you engage our HIPAA IT Consulting services, any Protected Health Information (PHI) or electronic PHI (ePHI) shared during the engagement is handled under a fully executed Business Associate Agreement (BAA) and governed by all applicable HIPAA Privacy and Security Rules. We do not collect, store, or process PHI through our website.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To confirm and fulfill your consulting session booking
• To process payments and send payment receipts
• To communicate with you before, during, and after your engagement
• To send Business Associate Agreements for HIPAA sessions
• To schedule sessions via Calendly and manage our calendar
• To improve our website experience and service quality
• To comply with applicable legal obligations
• To send service-related announcements (not promotional spam)

We do not use your information for unsolicited marketing, sell it to third parties, or share it with advertisers.

4. How We Share Your Information

We share your information only in the following limited circumstances:

Service Providers

• Stripe — Payment processing (card transactions). Subject to Stripe's Privacy Policy.
• Calendly — Appointment scheduling. Subject to Calendly's Privacy Policy.
• Bluevine — Business banking for payment receipt. Subject to Bluevine's privacy terms.

Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Pinnacle Impact Solutions LLC, our clients, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any such change via email or prominent notice on our website.

We do not sell, rent, trade, or otherwise transfer your personal information to any third party for marketing or commercial purposes.

5. Cookies & Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience. These include:

• Essential cookies — Required for the website to function properly
• Analytics cookies — Help us understand how visitors use our site (aggregate, anonymized data)
• Third-party cookies — Set by Calendly or Stripe when their widgets are loaded

You may disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality. We do not use cookies for retargeting or advertising purposes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy or as required by applicable law:

• Booking and contact records — retained for 3 years after last engagement
• Payment transaction records — retained for 7 years for tax and accounting compliance
• HIPAA-related records and BAAs — retained per applicable HIPAA retention requirements (minimum 6 years)
• Website analytics data — retained in aggregate, anonymized form indefinitely

Upon expiration of the applicable retention period, we securely delete or anonymize your personal information.

7. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include:

• HTTPS/TLS encryption for all data in transit
• Secure, access-controlled storage for client records
• Payment data handled exclusively by PCI-DSS compliant processors (Stripe)
• Limited internal access — only personnel with a need to know may access client data

No method of data transmission or storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security of your information.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Deletion — Request deletion of your personal information, subject to legal retention requirements
• Portability — Request your data in a structured, machine-readable format
• Opt-Out — Opt out of any non-essential communications at any time
• Restriction — Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at contact@pinnacleimpactsolutions.com. We will respond within 30 days of receiving your request.

9. Children's Privacy

Our website and services are intended for business professionals and are not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.

10. Third-Party Links

Our website may contain links to third-party websites including Stripe, Calendly, and others. These sites have their own privacy policies which we do not control. We are not responsible for the privacy practices of any third-party site. We encourage you to review the privacy policy of every site you visit.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact us at contact@pinnacleimpactsolutions.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will provide prominent notice on our website or notify you directly via email. Your continued use of our website or services after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: