Privacy Policy

Last Updated: Sep 3, 2026

This Privacy Policy describes how Burkhart & Foster Collective Group (“Company,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects your personal information when you access or interact with our website, client portals, platforms, communications, and professional services (collectively, the “Services”).

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data handling practices, please refrain from using our Services.

1. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information received from third parties.

1.1 Information You Provide Directly

Identity & Contact Details: Full name, business email address, phone number, physical mailing address, job title, and company name.
Account Credentials: Usernames, passwords, multi-factor authentication details, and user profile settings.
Payment & Transaction Data: Billing address, payment card details (processed securely through third-party gateways), transaction history, and invoice records.
Communications & Deliverables: Records of correspondence, feedback, inquiries, uploaded project files, and documents shared during client engagements.

1.2 Information Collected Automatically

Device & Technical Data: IP address, browser type and version, operating system, unique device identifiers, network provider, and hardware model.
Usage & Analytics Data: Pages visited, time and duration of visits, referring URLs, interaction paths, clickstream data, and download history.
Cookies & Tracking Technologies: Session cookies, persistent cookies, web beacons, and pixel tags used to facilitate navigation, enhance performance, and analyze site metrics.

1.3 Information from Third-Party Sources

Commercial Partners & Service Providers: Verification services, payment processors, analytics providers, and fraud-detection networks.
Public & Professional Networks: Publicly available business registries, directory listings, and professional social networks (e.g., LinkedIn).

2. How We Use Your Information

We process personal information only for legitimate business and legal purposes, including to:

Provide & Maintain Services: Set up user accounts, execute project deliverables, maintain platforms, and process invoicing and payments.
Customer Support & Communications: Respond to technical inquiries, provide administrative updates, transmit security alerts, and confirm transactions.
Personalization & Platform Improvement: Analyze operational trends, troubleshoot technical bugs, monitor usage, and optimize user experience.
Marketing & Business Development: Send industry insights, newsletters, promotional offers, and event invitations (subject to your opt-out preferences).
Security & Fraud Prevention: Detect, investigate, and prevent fraudulent transactions, unauthorized account access, and cybersecurity threats.
Legal & Regulatory Compliance: Enforce our Terms and Conditions, satisfy statutory recordkeeping mandates, and comply with subpoenas, court orders, or applicable regulations.

3. Legal Bases for Processing (EEA/UK/Applicable Laws)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we rely on the following lawful bases:

Legal Basis	Typical Processing Activities
Contractual Necessity	Account administration, service delivery, client billing, and direct onboarding.
Legitimate Interests	Platform security, fraud prevention, service analytics, and direct business communications.
Consent	Marketing newsletters, certain cookies, and specific non-essential trackers.
Legal Obligation	Tax accounting, financial reporting, and responding to judicial warrants.

4. How We Share and Disclose Information

We do not sell, rent, or trade your personal data. We disclose your data only under the following circumstances:

Authorized Service Providers: Trusted third-party vendors who provide IT hosting, data storage, payment handling, analytics, customer support software, and email delivery under strict confidentiality agreements.
Professional Advisors: Legal counsel, auditors, insurers, accountants, and financial advisors as necessary for risk management and compliance.
Corporate Transactions: In the event of a merger, acquisition, corporate reorganization, asset sale, or bankruptcy, user information may be transferred as an acquired business asset.
Legal Disclosures: When required to do so by applicable law, search warrant, court order, or to protect the vital interests, safety, or legal rights of Burkhart & Foster Collective Group, our clients, or the public.

5. Cookies and Similar Tracking Technologies

We deploy cookies and equivalent technologies to maintain sessions, track preferences, and collect aggregated site traffic data.

Essential Cookies: Mandatory for security, user authentication, and basic site functionality. These cannot be disabled in our systems.
Analytics & Performance Cookies: Help us understand visitor interactions, track bounce rates, and improve website navigation (e.g., Google Analytics).
Functional Cookies: Store user preferences, language selections, and display settings.

Managing Cookies: You can adjust cookie preferences through your web browser settings. Disabling essential cookies may impair the functionality of our client portal and services.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was gathered, including:

Maintaining your active account and service relationship.
Satisfying statutory tax, accounting, and legal document retention obligations (commonly 5 to 7 years following contract conclusion).
Resolving active disputes and enforcing our legal agreements.

When information is no longer needed, it is either securely deleted, overwritten, or irreversibly anonymized.

7. Data Security Safeguards

Burkhart & Foster Collective Group implements technical, administrative, and physical security standards designed to protect your information, including:

Encryption: Data in transit is protected using TLS/SSL encryption; sensitive stored records are encrypted using modern cryptographic standards.
Access Governance: Role-based access controls (RBAC) restrict internal personnel access on a strict “need-to-know” basis.
Audits & Monitoring: Continuous system monitoring, vulnerability scans, and routine logging of administrative actions.

Please note: No method of transmission over the internet or electronic storage is 100% impenetrable. While we strive to maintain robust safeguards, absolute security cannot be guaranteed.

8. International Data Transfers

Your personal information may be transferred to, stored, and processed in jurisdictions outside your home country, including countries whose data protection standards may differ from your domestic laws.

Where cross-border transfers occur, Burkhart & Foster Collective Group ensures appropriate legal safeguards are implemented, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Equivalent regulatory data transfer agreements.
Direct consent where permitted by applicable local laws.

9. Your Privacy Rights

Depending on your jurisdiction (such as the EU/UK under GDPR, or US states such as California, Virginia, or Colorado), you may hold specific privacy rights:

Right to Access: Request copies of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate, incomplete, or outdated data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal records, subject to legal and retention exemptions.
Right to Restrict or Object: Limit or object to our processing of your data, including direct marketing.
Right to Data Portability: Request transfer of your data to you or a third party in a structured, machine-readable format.
Right to Withdraw Consent: Revoke previously granted consent for marketing or tracking at any time without affecting prior lawful processing.
Non-Discrimination: We will not deny services, charge different prices, or alter service quality if you exercise any statutory privacy rights.

To exercise these rights, submit a written request to Info@burkhartfoster.com. We verify the identity of requesters before fulfilling access or deletion requests.

10. Children’s Privacy

Our Services are directed exclusively toward professionals and adults. Burkhart & Foster Collective Group does not knowingly collect, solicit, or store personal information from individuals under the age of 16 (or 13, where applicable). If we learn that personal data of a minor has been collected without parental consent, we will take immediate steps to expunge that data from our servers.

11. Third-Party Links

Our platform may contain links to external websites, services, or plug-ins not owned or controlled by Burkhart & Foster Collective Group. We assume no responsibility for the privacy practices, content, or policies of third-party websites. We encourage you to review the privacy documentation of any external service you visit.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect technological changes, service improvements, or evolving legal frameworks. When revisions are made:

We will update the “Last Updated” date at the top of this document.
For material modifications, we will provide prominent notice via email or an alert banner across our platforms prior to the effective date.
Continued use of our Services following notification indicates acceptance of the revised terms.

13. Contact Information & Data Protection Requests

If you have questions, feedback, complaints, or wish to exercise your privacy rights, contact our privacy compliance team:

Legal Entity: Burkhart & Foster Collective Group
Email: summer@burkhartfoster.com
Physical Address: 1400 S. International Pkwy., Lake Mary, FL 32746
Phone: (407) 519-0007