Legal

Privacy Policy

Effective Date: May 26, 2026
Last Updated: May 26, 2026
Version: 1.2

SLG Advisers LLC, an Arizona limited liability company ("SLG," "we," "us," "our"), respects your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you visit our website, submit information through our intake forms, or use our capital readiness advisory services.

Because SLG handles sensitive financial documents including tax returns and bank statements, we take privacy seriously and have designed our practices to limit collection to what is necessary, restrict internal access, and avoid sharing your information except where required to deliver the Service or comply with law. We do not sell your personal information, and we do not share mobile phone numbers or text messaging consent with third parties or affiliates for their marketing purposes.

Section 01

Scope and Applicability

This Privacy Policy applies to all information collected by SLG through:

Our website at www.slgadvisers.com and all subdomains;
Our intake forms, contact forms, partner application forms, and related submission tools;
Our capital readiness advisory services, including the Capital Readiness Snapshot and the Capital Readiness Full Report;
Our communications with you by email, phone, text message, or video conference;
Partner referral relationships, where applicable.

This Policy is part of our Terms of Service. By using our services, you agree to the practices described here.

Section 02

Information We Collect

2.1 Information You Provide Directly

We collect information you choose to provide, including:

Identification information: first and last name, business name, email address, phone number, mailing address;
Business profile information: industry, time in business, annual revenue range, ownership structure, business goals;
Financial documents: business and personal tax returns (including Schedule C, K-1, 1120, 1120-S, and supporting schedules), business and personal bank statements, profit and loss statements, balance sheets, debt schedules, accounts receivable and payable summaries;
Credit-related information: credit scores or reports you provide, denial letters, adverse action notices, prior loan applications and outcomes;
Communications: messages you send via email, contact forms, phone calls, or text messages, including any goal or situation descriptions you submit;
Consent records: if you opt in to receive text messages, we record the fact of your consent, the date and time of consent, and the consent language presented to you.

2.2 Information Collected Automatically

When you visit our website, we and our service providers automatically collect:

Device and browser information: IP address, browser type and version, operating system, device type;
Usage information: pages visited, time spent on pages, referring website, dates and times of access;
Cookies and similar technologies: as described in Section 17.

2.3 Information from Third Parties

We may receive information about you from:

Payment processors (such as Stripe), confirming payment and providing limited transaction information;
Referral partners (CPAs, bookkeepers, lenders, brokers, business brokers), where they introduce you to SLG;
Public sources, such as business registrations or public credit reporting databases, only as necessary to verify identity or detect fraud.

2.4 What We Do Not Collect

We do not collect biometric data, precise geolocation data, health information, or information about minors. We do not knowingly collect Social Security Numbers unless they appear as part of financial documents you submit (such as tax returns).

Section 03

How We Collect Information

We collect information through the following channels:

Intake forms submitted through our website;
Document uploads through our secure intake link;
Email and phone communications initiated by you or by our team;
Text messaging, where you have opted in to receive texts from SLG;
Payment processing conducted through our third-party payment processor;
Automated technologies such as cookies, web beacons, and analytics tools when you visit our website;
Referral partners, where you have consented to a referral or warm introduction.

Section 04

How We Use Information

We use the information we collect for the following purposes:

Purpose	What We Do
Service delivery	Analyze your financial documents, build your capital readiness Report, prepare 30/60/90-day roadmaps, record video walkthroughs, deliver completed Reports.
Communication	Respond to your inquiries, confirm purchases, request additional documents, answer questions about the Report, send follow-up communications, and send transactional text messages where you have opted in.
Payment processing	Process payments, issue receipts, manage refunds where applicable, prevent payment fraud.
Business operations	Maintain internal records, manage our analyst workflow, track engagement status, provide internal training (using de-identified information only).
Service improvement	Improve our analytical methodology, refine Report templates, develop new Services. We use only de-identified or aggregated data for this purpose.
Marketing & outreach	Send relevant educational content, updates, and offers to existing and prospective Clients who have consented. You may opt out at any time.
Partner referral tracking	Where you were referred by a partner, track that referral, confirm completion of the engagement, and pay partner commissions where applicable.
Legal & compliance	Comply with applicable laws, respond to lawful requests from authorities, enforce our Terms, defend legal claims, prevent and investigate fraud.
Security & fraud prevention	Detect, prevent, and respond to security incidents, fraud, abuse, and other unlawful activity.

Section 05

Legal Basis for Processing

We process your information based on one or more of the following legal grounds:

Contract performance: Processing necessary to deliver the Services you purchased.
Consent: Where you have given us explicit consent to process information for specific purposes such as marketing or text messaging.
Legitimate interest: Operating, improving, and securing our business, provided your interests do not override ours.
Legal obligation: Complying with laws, regulations, court orders, and lawful government requests.

You may withdraw consent at any time by emailing info@slgadvisers.com. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal or our ability to process information on other lawful bases.

Section 06

Sensitive Financial Information

Heightened Protection

Tax returns, bank statements, credit information, and other sensitive financial documents receive heightened security and handling.

We recognize that tax returns, bank statements, debt schedules, and credit information are highly sensitive. We apply the following protections:

Encrypted storage: All sensitive financial documents are stored in encrypted form on industry-standard cloud infrastructure (Google Workspace) with access restricted to assigned SLG analysts only.
Encrypted transmission: Documents are transmitted using encrypted channels (TLS 1.2 or higher).
Need-to-know access: Only personnel actively assigned to your engagement have access to your sensitive documents.
No third-party sharing for non-Service purposes: We do not share sensitive financial documents with any party except sub-processors strictly necessary to deliver Services (such as Google Workspace as our infrastructure provider).
No transmission to lenders without consent: We do not send your tax returns or bank statements to any Lender unless you specifically direct us to do so in writing.
SSN handling: Where Social Security Numbers appear on tax returns or other documents you submit, we do not extract, record, or process the SSN as a standalone data element. We treat the document as a whole and limit access accordingly.

Section 07

SMS / Text Messaging and Mobile Data

Mobile Data Is Never Shared or Sold

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories below exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7.1 How We Obtain Consent

SLG sends text messages only to individuals who have affirmatively opted in to receive them. You may provide consent by checking the text messaging consent box on our intake or contact form, or by otherwise expressly agreeing to receive text messages from us (for example, verbally during a call, which we then record in our system). We retain a record of your consent, including the date and time you consented and the consent language presented to you.

7.2 Types of Messages We Send

If you opt in, the text messages you receive from SLG are transactional and conversational in nature, and may include:

Confirmation that we received your intake submission or inquiry;
Appointment and consultation scheduling, reminders, and confirmations;
Requests for documents needed to complete your analysis;
Notice that your Report is ready or has been delivered;
Replies to questions you have sent us;
Other messages directly related to the Service you have requested.

We do not send recurring marketing or promotional text messages under this consent. If we offer a separate marketing text program in the future, it will require its own separate opt-in.

7.3 Message Frequency, Rates, and Help

Message frequency varies based on your interaction with us. Message and data rates may apply depending on your mobile carrier and plan. SLG does not charge you for text messages, but your carrier's standard rates apply. For help, reply HELP to any message or contact us at info@slgadvisers.com or (888) 924-5385.

7.4 How to Opt Out

You may opt out of text messages at any time by replying STOP to any message you receive from us. After you reply STOP, we will send one confirmation message and will not send further text messages unless you opt in again. You may also opt out by emailing info@slgadvisers.com. Opting out of text messages does not affect your ability to use our Services or communicate with us by email or phone, and consent to receive text messages is not a condition of purchasing any Service.

7.5 No Sharing of Mobile Information

We do not share, sell, rent, or otherwise transfer mobile phone numbers, text messaging consent, or text message content to any third parties or affiliates for their own marketing or promotional purposes. The only parties that may process this information are sub-processors strictly necessary to operate our messaging and business systems (such as our communications platform and cloud infrastructure provider), each of which is bound by confidentiality obligations and may use the information only to provide services to SLG. We may disclose this information where required by law, as described in Section 8.

7.6 Carrier Disclaimer

Mobile carriers are not liable for delayed or undelivered messages. Delivery of text messages depends on your carrier's network and is not guaranteed.

Section 08

Sharing with Sub-Processors

We share information only with the following categories of sub-processors, and only to the extent necessary to operate the SLG business and deliver Services. As described in Section 7, text messaging opt-in data and consent are excluded from sharing and are not shared with any third parties for their own purposes:

Category	Purpose
Payment processing (Stripe, Inc.)	Process credit and debit card payments. Stripe receives only the information needed to complete the transaction.
Cloud infrastructure (Google LLC / Google Workspace)	Store and process Client documents, run analytical models, manage internal workflows. Google does not access Client data except as required to operate the platform.
Email and communications	Send transactional emails (intake confirmations, Report delivery, follow-ups) and marketing communications to consenting Clients.
Text messaging platform	Send and manage transactional text messages to Clients who have opted in. The platform processes mobile numbers and message content solely to deliver messaging on SLG's behalf and does not use this data for its own marketing.
Website analytics	Understand website usage in aggregate. Analytics providers do not receive your financial documents or other sensitive content.
Customer support tools	Manage support requests and Client communications.
Professional advisors (attorneys, accountants, auditors)	Provide legal, tax, or audit advice to SLG. These advisors are bound by professional confidentiality.
Law enforcement and regulators	Comply with lawful requests, court orders, subpoenas, or regulatory inquiries. We will resist overbroad requests where appropriate.

All sub-processors who access personal information are contractually required to maintain confidentiality and security at least as protective as this Privacy Policy.

8.1 Business Transfers

If SLG is involved in a merger, acquisition, financing due diligence, sale of assets, or insolvency proceeding, your information may be transferred as part of that transaction. We will notify affected Clients and the acquirer will be bound by this Privacy Policy or provide notice of any material changes.

Section 09

We Do Not Sell Your Information

SLG does not sell personal information. We do not sell, rent, lease, trade, or otherwise transfer your personal information to third parties for their own marketing purposes or for monetary or other valuable consideration. This includes mobile phone numbers and text messaging consent, which we never sell or share with third parties for their marketing purposes.

We do not "share" personal information for purposes of cross-context behavioral advertising as that term is defined under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA").

Section 10

Data Retention

We retain information only as long as needed to fulfill the purposes for which it was collected and to comply with our legal obligations. Standard retention periods are:

Information Category	Retention Period
Sensitive financial documents (tax returns, bank statements, debt schedules)	24 months after Service delivery, then deleted from active systems. Encrypted backups may persist for up to 12 additional months in standard backup rotation.
Reports and analytical work product	7 years, for audit, dispute resolution, and reference purposes.
Communications (email, support tickets, text messages)	4 years.
Text messaging consent records	Retained for the duration of your opt-in plus 4 years after opt-out, to evidence consent and compliance.
Payment records	7 years, as required by tax and accounting law.
Intake form submissions (no purchase)	24 months, then deleted.
Marketing list information	Until you unsubscribe or 3 years of inactivity, whichever comes first.
Website analytics data	26 months in standard analytics tools.

10.1 Earlier Deletion

You may request earlier deletion of your personal information by emailing info@slgadvisers.com. We will honor deletion requests within 30 days unless we are legally required or permitted to retain specific information (such as for tax, audit, fraud prevention, consent recordkeeping, or pending dispute purposes), in which case we will explain the basis for retention.

Section 11

Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, and destruction, including:

Encryption of sensitive data in transit (TLS 1.2+) and at rest (AES-256 or equivalent);
Multi-factor authentication on all accounts with access to Client information;
Role-based access controls limiting access to need-to-know personnel;
Regular security reviews of our sub-processors;
Secure document handling procedures for sensitive financial documents;
Personnel training on confidentiality and data protection.

11.1 Limitations of Security

No system is perfectly secure. Despite our safeguards, transmission of information over the internet and storage on electronic systems carries inherent risks. We cannot guarantee absolute security. You acknowledge these risks and agree that you submit information at your own risk to the extent permitted by law.

11.2 Your Role in Security

You are responsible for maintaining the confidentiality of any account credentials or secure upload links provided to you. Notify us immediately if you suspect unauthorized access to your account or unauthorized use of your information.

Section 12

Data Breach Notification

In the event of a security incident that involves unauthorized access to or acquisition of your personal information, we will:

Investigate the incident promptly;
Take reasonable steps to contain and remediate the incident;
Notify affected individuals as required by applicable law (typically within 30-60 days of confirmation);
Notify relevant regulators as required;
Provide guidance on protective steps you can take.

Notifications will include a description of the incident, the categories of information affected, the steps we have taken in response, and any actions you can take to protect yourself.

Section 13

Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

Right to access: Request a copy of the personal information we hold about you.
Right to correction: Request that we correct inaccurate or incomplete information.
Right to deletion: Request that we delete personal information, subject to legal retention requirements.
Right to portability: Request a copy of your information in a structured, commonly used, machine-readable format.
Right to object: Object to processing based on legitimate interest, or for direct marketing.
Right to restrict processing: Request that we limit how we process your information.
Right to withdraw consent: Withdraw consent to processing where consent was the basis for processing, including consent to receive text messages.
Right to non-discrimination: Exercise any of these rights without facing discrimination in Services or pricing.

13.1 How to Exercise Your Rights

To exercise any of these rights, email info@slgadvisers.com with the subject line "Privacy Request" and include: (a) your full name; (b) the email used in your engagement with SLG; (c) the specific right you wish to exercise; and (d) any relevant details. We will respond within 30 days (or 45 days with notice if reasonably needed).

13.2 Verification

To protect your information, we will verify your identity before fulfilling any request. We may ask you to confirm specific details we have on file. We do not require you to create an account to submit a request.

13.3 Authorized Agents

You may designate an authorized agent to submit a request on your behalf. The agent must provide proof of authorization (such as a signed permission or power of attorney), and we may still verify your identity directly.

13.4 Appeals

If we deny your request, we will explain why. You may appeal by replying to our denial with "Privacy Appeal" in the subject line. We will review the appeal within 60 days.

Section 14

California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA") provides you additional rights regarding your personal information.

14.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following CCPA-defined categories of personal information:

Identifiers (name, email, phone, IP address);
Commercial information (Services purchased, billing history);
Financial information (bank account references via payment processor; tax and bank documents you submit);
Internet activity (website usage data);
Geolocation (approximate location based on IP address, not precise location);
Professional information (business name, industry, role, partner affiliation);
Inferences drawn from the above to deliver Services (such as your capital readiness profile).

14.2 Sources, Purposes, and Disclosures

The sources, purposes for collection, and categories of third parties to whom we disclose this information are described in Sections 3, 4, and 8 of this Policy. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising under CCPA/CPRA definitions.

14.3 Your California Rights

California residents have the right to:

Know what personal information we collect, use, disclose, and (where applicable) sell;
Request a copy of personal information we have collected;
Request deletion of personal information;
Correct inaccurate personal information;
Limit use of sensitive personal information to that necessary to provide Services;
Opt out of any sale or sharing of personal information (we do not sell or share);
Be free from discrimination for exercising these rights.

14.4 Sensitive Personal Information

Under CPRA, "sensitive personal information" includes specific categories such as Social Security Numbers and financial account information. We use sensitive personal information only as needed to deliver Services and meet legal obligations, not for inferring characteristics about you for marketing purposes. California residents have the right to limit our use of sensitive personal information by emailing us as described in Section 13.1.

14.5 Shine the Light

California Civil Code Section 1798.83 allows California residents to request information about disclosures of personal information to third parties for those parties' direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Section 15

Other US State Privacy Laws

Residents of certain other US states have specific privacy rights under their state laws, including but not limited to:

Virginia (Virginia Consumer Data Protection Act);
Colorado (Colorado Privacy Act);
Connecticut (Connecticut Data Privacy Act);
Utah (Utah Consumer Privacy Act);
Texas (Texas Data Privacy and Security Act);
Oregon (Oregon Consumer Privacy Act);
Montana, Iowa, Tennessee, Indiana, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, Nebraska, Kentucky, Rhode Island, and other states with comparable laws.

Depending on your state, these laws may grant you rights similar to those described in Section 13, including the right to access, correct, delete, port, and opt out of certain processing. To exercise rights under your state's law, email info@slgadvisers.com with "Privacy Request" in the subject line and identify the state law under which you are making the request. We will respond within the timeframe required by your state's law.

Section 16

International Users

SLG operates in the United States and our Services are intended for US-based business owners. If you access our website or submit information from outside the United States, you understand that:

Your information will be transferred to and stored in the United States;
US data protection law may differ from the laws of your country;
By using our Services, you consent to such transfer and processing.

We do not market Services to individuals in the European Economic Area, United Kingdom, or other jurisdictions with comprehensive data protection regimes, and we generally cannot accept engagements from outside the United States.

Section 17

Cookies and Tracking Technologies

17.1 What We Use

We and our service providers use cookies, web beacons, pixels, and similar technologies to:

Make our website function (essential cookies);
Remember your preferences;
Understand how the website is used (analytics cookies);
Measure the effectiveness of communications (in transactional emails, where supported).

17.2 Categories of Cookies

Strictly necessary: Required for the website to function. Cannot be disabled.
Performance and analytics: Help us understand usage patterns. May be disabled.
Functional: Remember your preferences (such as text size, region). May be disabled.

We do not use advertising cookies, cross-site tracking cookies, or cookies that share data with advertising networks.

17.3 Managing Cookies

Most browsers allow you to refuse or delete cookies through browser settings. Note that disabling certain cookies may affect website functionality.

Section 18

Children's Privacy

Our website and Services are not directed to children under 18, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe a child has provided us with personal information, contact us at info@slgadvisers.com.

Section 19

Third-Party Links

Our website may contain links to third-party websites (such as Stripe checkout, calendar booking tools, partner sites). We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party site you visit.

Section 20

Do Not Track Signals

Some browsers transmit "Do Not Track" or similar signals. There is no universally accepted standard for how to respond to these signals. We do not currently change our practices in response to Do Not Track signals. We will update this Policy if industry standards evolve.

Section 21

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting an updated version on our website and updating the "Last Updated" date at the top. For significant changes affecting how we process your information, we will provide additional notice through email or a prominent website notice. Your continued use of the Services after the effective date of any change constitutes acceptance of the updated Policy.

Prior versions of this Policy are available on request.

Section 22

Contact and Privacy Inquiries

For privacy-related questions, requests, or complaints, contact us at:

SLG Advisers LLC — Privacy Inquiries
Email: info@slgadvisers.com
Subject line: "Privacy Request"
Phone: (888) 924-5385
Website: www.slgadvisers.com

We respond to privacy inquiries within one business day for general questions and within the timeframes required by applicable law for formal rights requests.

22.1 Right to File a Complaint

If you believe we have not adequately addressed your privacy concern, you may file a complaint with:

Your state attorney general's office;
The California Privacy Protection Agency, if you are a California resident;
The Federal Trade Commission;
Any other regulatory body with jurisdiction.

We would prefer to resolve concerns directly. Please reach out to us first so we have an opportunity to address any issue.