Legal
Privacy Policy
Last updated: May 2, 2026
SD Exit Advisory works with business owners exploring a sale — often quietly, long before they're ready to act. Discretion is the foundation of how we operate, and that extends to how we handle the information you share with us. This policy explains what we collect, why, and the choices you have.
What we collect
When you use the contact form on this site, we collect the information you choose to submit:
- Your name
- Industry or type of business
- Approximate annual revenue range
- Email address
- Phone number (optional)
We do not currently use analytics, advertising pixels, or tracking cookies on this site. We are planning to add Google Analytics 4 and Microsoft Clarity (a heatmap and session-replay tool) to understand how visitors use the site. When activated:
- IP addresses are anonymized.
- "Do Not Track" browser signals are respected — no analytics load.
- Form fields (name, email, phone, revenue, industry) are never recorded by analytics or session-replay tools. Clarity is configured to mask all input fields by default.
- No advertising, remarketing, or cross-site tracking is enabled.
Standard server logs (IP address, timestamp, basic request metadata) may be retained briefly by our hosting provider for security and abuse prevention.
Why we collect it
We use the information you submit only to respond to your inquiry, schedule and conduct an initial conversation, and follow up if a formal engagement makes sense for both sides. We do not use your information for marketing campaigns, lead resale, or buyer prospecting.
How it's stored
Inquiries are delivered to a secure inbox controlled by SD Exit Advisory. Form submissions are not retained in any third-party database, CRM, or analytics platform without a clear operational need. Where service providers are used (see below), data is held only as long as necessary to deliver the service.
Who it's shared with
We treat your inquiry as confidential. The only parties who may process your information are the service providers we rely on to run the practice — for example, the email service that delivers your message and any calendar or scheduling tool used to set up a call. These providers are bound by their own confidentiality and security obligations and only see what's necessary to perform their function.
We do not sell your information. We do not share your information with brokers, buyers, marketers, data aggregators, or business listing services. If sharing your information ever became part of serving you — for example, introducing you to a vetted attorney or CPA at your request — it would only happen with your explicit written consent first.
We may disclose information if required by law (subpoena, court order, or comparable legal process) or where necessary to protect our rights or the safety of others.
Data retention
If a conversation does not lead to a formal engagement, inquiry information is deleted within 90 days. If we begin working together, your information is retained for the duration of the engagement and a reasonable period afterward to meet professional and legal recordkeeping obligations. You can request earlier deletion at any time.
Your California privacy rights (CCPA / CPRA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
- Right to know — the categories and specific pieces of personal information we have collected about you, the sources, and the purposes.
- Right to delete — request deletion of personal information we've collected from you, subject to limited legal exceptions.
- Right to correct — ask us to correct inaccurate personal information.
- Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising. There is nothing to opt out of, but the right is preserved if our practices ever change.
- Right to non-discrimination — we will not deny you service, charge you a different price, or provide a different level of service for exercising any of these rights.
To exercise any of these rights, email privacy@sdexit.com. We will respond within the timeframe required by law (generally 45 days). We may need to verify your identity before fulfilling certain requests.
Children's privacy
This site and the services it describes are intended for adults who own or operate a business. The site is not directed to anyone under 18, and we do not knowingly collect information from minors.
Security
We take reasonable steps to protect the information you submit, including encrypted transmission (HTTPS) and access controls on the systems we use. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
Updates to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of the page, and where appropriate, by a more prominent notice on the site.
Contact
Questions about this policy or your information can be sent to privacy@sdexit.com.
See also our Terms of Use.