Privacy Policy

Note: This is a starter privacy policy for HelmPoint Advisory. Have it reviewed by counsel before going live, especially the GLBA / financial-services-specific provisions.

1. Introduction

HelmPoint Advisory ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and disclose your information when you use our website, client portal, or any services provided through our platform.

By using our website or services, you consent to the data practices described in this policy.

2. Information We Collect

A. Information You Provide:

• Name, email address, and phone number
• Uploaded financial documents (e.g., tax returns, financial statements, debt schedules, purchase agreements, bank statements)
• Social Security Number, Tax ID (EIN), date of birth, and other sensitive financial data when provided as part of a loan application
• Personal financial statement information (assets, liabilities, income)
• Messages, forms, and notes submitted through our site or portal

B. Automatically Collected Data:

• Browser type and device information
• IP address and geolocation
• Cookies and usage data
• Referral source (if applicable)

3. How We Use Your Information

We use your information to:

• Evaluate, package, and submit loan applications to participating SBA and conventional lenders
• Communicate with you about your application and the loan process
• Provide secure document upload and client communication tools
• Improve website functionality and user experience
• Comply with legal, regulatory, and lender requirements (including GLBA, AML/BSA, and SBA program rules)

We do not sell or rent your personal information to third parties for marketing purposes.

4. Disclosure of Your Information

We may share your information with:

• SBA-approved lenders, Certified Development Companies (CDCs), and other participating financial institutions evaluating your loan application
• The U.S. Small Business Administration and other regulatory authorities as required by program rules
• Technology vendors providing infrastructure support (cloud hosting, document management, electronic signature, CRM)
• Closing agents, title companies, attorneys, and appraisers involved in your transaction
• Legal authorities when required to comply with applicable law

5. GLBA Notice

Under the Gramm-Leach-Bliley Act (GLBA), we are required to inform you of our information practices regarding nonpublic personal financial information. We treat all nonpublic personal information you provide with strict confidentiality and only share it for legitimate purposes related to evaluating, structuring, and closing your loan application — and only with parties bound by confidentiality obligations.

6. Cookies and Tracking

We use cookies and tracking pixels to enhance website performance. You can manage cookies through your browser settings or opt out of tracking using a Do Not Track (DNT) signal.

7. Your Rights

Depending on your location, you may have rights to:

• Access or correct your personal data
• Request deletion of your records (subject to retention obligations under federal lending and recordkeeping rules)
• Object to automated decision-making
• Opt out of data use for marketing or analysis

To exercise these rights, please contact us at privacy@helmpointadvisory.com.

8. Data Security

We implement technical, administrative, and physical safeguards to protect your information, including:

• Encryption of documents in transit and at rest
• Access controls within our client portal (multi-factor authentication where supported)
• Secure hosting with third-party providers

9. Retention of Data

We retain loan application and supporting data for as long as legally required under federal lending recordkeeping rules (typically a minimum of 3-7 years after final disposition of the loan), or longer if required by SBA program rules.

10. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. Revisions will be posted on this page with an updated effective date.

12. Contact Us

For questions about this Privacy Policy or your data rights, please contact:

HelmPoint Advisory
Email: privacy@helmpointadvisory.com
Phone: 360-820-0955