Privacy Policy

Effective Date: July 29, 2026

Last Updated: July 29, 2026

This Privacy Policy explains how Summiters Consulting collects, uses, shares, retains, and protects personal information when you use www.summitersconsulting.com, any redirected or successor domain where this policy is posted, and related pages, forms, applications, assessments, downloads, gated resources, and services (collectively, the "Site").

The Site is operated by Angelissa McArthur, a sole proprietor operating under the business name Summiters Consulting. In this policy, "Summiters Consulting," "Summiters," "we," "our," and "us" refer to

Angelissa McArthur and the Summiters Consulting business.

This policy applies to information processed through the Site and our online products and services. It does not apply to a third-party website or service that has its own privacy policy, even when the Site links to or relies on that service.

1. Scope

This policy applies when you:

Visit or interact with the Site.
Submit a contact form, request information, subscribe to communications, or communicate with us.
Purchase a product or service.
Use a quiz, assessment, scan, application, report generator, or other automated tool.
Access a gated resource, tokenized link, download, workbook, template, or digital product.
Engage Summiters for advisory, consulting, workshops when offered, or related services.

2. Information We Collect

A. Information You Provide

Depending on how you interact with us, we collect the following categories of information:

Contact and business information, such as your name, email address, telephone number, company, role, website, and business contact details.
Inquiry and communication information, including messages, form responses, meeting requests, support questions, feedback, and correspondence.
Purchase and transaction information, including the product or service purchased, amount, date, order or invoice number, payment status, billing contact details, and limited payment identifiers provided by the payment processor.
Assessment and application information, including answers, business details, goals, preferences, uploaded materials, prompts, and other information you choose to submit to generate a result or report.
Advisory and consulting information, including intake responses, project materials, documents, examples, decisions, approvals, and information needed to provide contracted services.
Marketing preferences, including subscriptions, communication choices, and information you provide when downloading a resource or registering for an event.
Account information, if the Site offers member or login features, such as login credentials, access status, and account preferences.

B. Information Collected Automatically

When you visit or use the Site, our systems and service providers collect certain technical and usage information, including:

Internet Protocol address and approximate location derived from it.
Browser type, device type, operating system, language, and similar technical details.
Pages viewed, links selected, referring pages, dates, times, session duration, and general interaction data.
Cookie identifiers and information collected through similar technologies.
Application and security logs, including access attempts, errors, token status, report generation status, and actions needed to operate, protect, and troubleshoot the Site.

C. Information Received from Other Sources

We receive limited information from service providers and other sources, including:

Payment processors, which provide payment status, transaction details, and limited billing information.
Website, analytics, and application providers, which provide usage, performance, and diagnostic information.
Email, scheduling, customer-relationship, and communication providers, which provide delivery, engagement, and appointment information.
Social media or other platforms when you interact with our pages, content, or messages through those services.
Referral sources or business partners when they are authorized to provide your information.

3. Payment Information

Payments are processed by third-party payment providers. When payment is processed through those providers, Summiters does not receive or store the full payment card number or card security code. We receive transaction information needed to confirm payment, deliver the purchase, maintain accounting records, prevent fraud, and respond to billing questions.

Payment providers process payment information under their own privacy notices and security requirements.

4. How We Use Personal Information

We use personal information for the following business purposes:

Operate, maintain, secure, and troubleshoot the Site and related systems.
Provide products, gated access, assessments, scans, reports, downloads, workshops when offered, advisory services, consulting services, and support.
Generate automated results based on the information you submit.
Process purchases, confirm transactions, send receipts, deliver access, and maintain payment and accounting records.
Respond to inquiries, schedule meetings, provide support, and communicate about an existing purchase or engagement.
Manage access limits, tokens, security controls, misuse prevention, and product eligibility.
Understand Site performance and improve usability, reliability, content, and service design.
Use aggregated or de-identified information to test and improve products and workflows.
Send marketing or educational communications when permitted, and maintain your communication preferences.
Protect our rights, prevent fraud or abuse, enforce agreements, resolve disputes, and comply with legal obligations.
We do not use identifiable assessment responses, generated reports, or client materials in unrelated marketing examples, public case studies, or promotional content without your permission. Our practices concerning artificial intelligence model training and de-identified information are described in Sections 5 and 9.

5. Automated Tools and Artificial Intelligence

Some quizzes, assessments, scans, applications, reports, recommendations, and service workflows use artificial intelligence, automation, scoring logic, templates, analytics, or related technology.

When you use these tools, the information you submit is processed to generate the requested result, operate the tool, provide support, maintain security, and improve reliability. Unless the applicable offer expressly includes human review, no person reviews your specific inputs or outputs before delivery.

Our current automated tools are not designed or used to make decisions about you that produce legal or similarly significant effects, including decisions concerning employment, credit, housing, insurance, education enrollment, or access to essential services.

We do not use identifiable assessment responses, generated reports, or client materials to train general-purpose artificial intelligence models. We may use aggregated or de-identified information to test workflows, improve reliability, and develop products, provided that the information does not reasonably identify you. We select and configure service providers, where available, so submitted materials are used to provide the requested service, maintain security, and comply with law.

Automated outputs can contain errors, omissions, outdated information, incomplete reasoning, or unsupported assumptions. Review outputs before relying on or implementing them.

6. Sensitive and Regulated Information

Our Site and automated tools are not designed to collect sensitive personal data unless a specific service expressly requests it and explains why it is needed.

Do not submit health information, financial account credentials, full payment card information, government identification numbers, Social Security numbers, precise geolocation, genetic or biometric information, information about children, passwords for third-party systems, trade secrets, regulated client records, or other highly sensitive information unless we have expressly agreed in writing that it is necessary and appropriate safeguards are in place.

If we receive sensitive information that is not needed to provide the requested service, we may delete, restrict, or decline to process it, subject to legal, accounting, transaction-record, security, contractual, and dispute-resolution obligations. Where applicable law requires consent to process sensitive data, we will request consent separately.

7. Cookies and Similar Technologies

The Site uses cookies and similar technologies to operate core features, remember settings, protect security, understand Site performance, and measure general engagement. Depending on the Site configuration, these technologies include:

Essential cookies needed for security, checkout, access, forms, and core Site functions.
Functional cookies that remember preferences or support optional features.
Analytics cookies that help us understand traffic, page performance, and general interaction patterns. We use Google Analytics and site performance tools provided by our host platform Wix to measure website traffic and interaction trends. You can opt out of Google Analytics tracking through available browser add-ons or browser settings.

Where required by law, the Site provides controls to accept or reject nonessential cookies. You can also control cookies through your browser settings. Blocking some cookies can limit Site features or prevent parts of an application from working correctly.

We do not currently sell personal data or use personal data for targeted advertising as defined by applicable state privacy laws. If our practices change, we will update this policy and provide any required notice and opt-out controls before using personal data for those purposes.

Where applicable law requires recognition of an authorized opt-out preference signal, we will process a technically valid signal for the covered activity.

8. How We Share Personal Information

We do not sell personal information. We disclose personal information only as described in this policy, including to service providers that perform work for us, to professional advisors, when required by law, or in connection with a business transaction.

Website, Application, Hosting, and Storage Providers

Information disclosed: Contact, device, usage, form, assessment, application, report, token, and support information

Purpose: Host and operate the Site, applications, files, reports, databases, and access controls

Payment Processors

Information disclosed: Billing contact, purchase, transaction, payment-status, and limited payment-identifier information

Purpose: Process and confirm payments, prevent fraud, and support billing records

Artificial Intelligence and Automation Providers

Information disclosed: Assessment responses, prompts, task-related inputs, and technical information needed to generate the requested result

Purpose: Generate reports or outputs, run workflows, maintain security, and troubleshoot service delivery

Analytics Providers

Information disclosed: Device, browser, cookie, page, referral, and general usage information

Purpose: Measure traffic, Site performance, and user interaction

Email, Scheduling, and Communication Providers

Information disclosed: Name, email, communication preferences, purchase, appointment, delivery, and message information

Purpose: Send requested communications, access links, receipts, service messages, and marketing where permitted

Contractors, Advisors, and Professional Service Providers

Information disclosed: Information reasonably needed for the assigned work, subject to confidentiality and access limits

Purpose: Provide operational, technical, legal, accounting, security, or client-service support

Government Authorities or Parties to Legal Proceedings

Information disclosed: Information required or reasonably necessary in the circumstances

Purpose: Comply with law, legal process, safety obligations, or protect rights and security

Legal, Safety, and Business Transfers

We disclose information when reasonably necessary to comply with law, respond to lawful process, investigate fraud or misuse, protect the rights or safety of Summiters or others, enforce agreements, or address a security incident.

If Summiters is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal information may be transferred as part of that transaction. A successor may continue processing the information under the privacy commitments in effect at the time of transfer. Before using previously collected information for a materially different and incompatible purpose, the successor must provide any notice and obtain any consent required by applicable law.

9. De-identified and Aggregated Information

We use information that has been aggregated or de-identified so it does not reasonably identify an individual to analyze patterns, improve products, test workflows, measure performance, and develop general business insights. We maintain de-identified information in de-identified form and do not attempt to re-identify it except as permitted by law to test whether de-identification controls remain effective.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to legal, accounting, security, contractual, and dispute-resolution needs. Retention depends on the information category and context, including:

Assessment inputs, generated reports, access records, and support information are retained for delivery, support, security, product administration, and the period needed to address disputes or legal obligations.
Transaction, invoice, payment-status, and tax records are retained for accounting, tax, fraud-prevention, and legal requirements.
Advisory and consulting materials are retained according to the applicable agreement, project needs, professional recordkeeping, and legal obligations.
Contact-form and inquiry information is retained while the inquiry is active and for a reasonable follow-up and recordkeeping period.
Marketing subscription information is retained until you unsubscribe or we no longer need it, except that we keep a limited suppression record to honor an opt-out.
Security logs, token records, and system diagnostics are retained for the period reasonably needed to protect the Site, investigate incidents, and maintain reliability.
Backup copies can remain for a limited period until they are overwritten through normal backup cycles.
We delete, de-identify, or restrict information when it is no longer reasonably needed, unless retention is required or permitted by law.

11. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Depending on the system and information involved, safeguards include access restrictions, account security controls, vendor security settings, confidentiality obligations, secure transmission features provided by our vendors, backups, monitoring, and procedures for responding to suspected incidents.

No method of transmission or storage is completely secure. You are responsible for protecting access links, passwords, tokens, and devices used to access our services. Contact us promptly if you believe your information or access credentials have been compromised.

12. International Processing

Summiters is based in the United States. We and our service providers process information in the United States and in other countries where providers operate. Privacy laws in those locations can differ from the laws where you live. We use service providers subject to applicable contractual and legal obligations for the information they process on our behalf.

13. Your Privacy Rights

Depending on where you live and whether the applicable law covers Summiters and the information involved, you can have the right to:

Confirm whether we process your personal information and access that information.
Correct inaccurate personal information.
Request deletion of personal information, subject to legal and operational exceptions.
Receive a portable copy of certain information you provided.
Request information about categories of third parties receiving personal information, where required.
Opt out of the sale of personal data, targeted advertising, or qualifying profiling, if we engage in those activities.
Withdraw consent when processing relies on consent.
Appeal a decision denying a privacy request, where applicable.
Exercise privacy rights without unlawful discrimination.

These rights are subject to legal exceptions. For example, we can retain information needed to complete a transaction, maintain accounting or legal records, protect security, exercise legal rights, prevent fraud, or comply with law.

How to Submit a Request

Email amcarthur@summitersconsulting.com with the subject line "Privacy Request." Describe the right you want to exercise and identify the email address, purchase, or interaction connected to the request. Do not send a government identification document unless we specifically request it through a secure method.

We can request information reasonably needed to verify your identity and authority. Verification can include confirming access to the email address associated with the interaction, confirming order or account details, or requesting other limited information. We will not require you to create a new account to submit a privacy request.

Authorized Agents

Where applicable law permits, an authorized agent can submit a request on your behalf. We can request proof that the agent is authorized and can require you to confirm the request directly, unless law provides otherwise. We will process recognized opt-out preference signals where required and technically applicable.

Response Timing and Appeals

We will respond within the period required by applicable law. For a covered Maryland request, this is generally within 45 days. When legally permitted and reasonably necessary because of complexity or request volume, we can extend the response period by an additional 45 days and will explain the extension within the initial period.

If we deny a request, we will explain the reason and provide appeal instructions where required. To appeal, reply to the decision or email amcarthur@summitersconsulting.com with the subject line "Privacy Appeal." For a covered Maryland appeal, we will respond in writing within 60 days. If an appeal is denied and applicable law requires it, we will provide information about how to contact the appropriate state consumer-protection authority.

Consent and Withdrawal

Where applicable law requires consent, we will request it separately. You can withdraw consent by using the method presented when consent was requested or by contacting us. Withdrawal does not affect processing completed before withdrawal and can limit our ability to provide a feature or service that requires the information.

14. Marketing Communications

We send marketing or educational emails when you request them, subscribe, download certain resources, or when otherwise permitted by law. You can unsubscribe through the link in a marketing email or by contacting us. Unsubscribing from marketing does not stop transactional, access, billing, security, or service communications connected to a purchase or active engagement.

15. Age Eligibility and Children

The Site and services are intended for adults and are not directed to individuals under 18. Public portions of the Site may be accessible to individuals under 18, but they should not submit personal information, purchase products, or use assessments. You must be at least 18 to purchase paid products or enter into an advisory or consulting engagement.

We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13 without legally valid authorization, we will take reasonable steps to delete it. A parent or legal guardian can contact us regarding a child’s information.

16. Third-Party Websites and Services

The Site can link to or rely on third-party websites, applications, payment services, social media platforms, or other tools. Their privacy practices are governed by their own policies. Review those policies before providing information directly to a third party.

17. Changes to This Privacy Policy

We can update this Privacy Policy to reflect changes in our services, systems, vendors, legal obligations, or data practices. We will post the updated policy with a revised effective or last-updated date.

If a change materially affects how we use personal information, we will provide additional notice where required. We will not use previously collected information for a materially different and incompatible purpose without providing notice and obtaining consent when applicable law requires it.

18. Relationship with the Terms of Use

The Terms of Use govern use of the Site, purchases, access rights, and service conditions. This Privacy Policy governs our collection, use, disclosure, retention, and protection of personal information. If the documents conflict regarding privacy or data practices, this Privacy Policy controls, except where applicable law requires otherwise.

19. Contact

For privacy questions, requests, appeals, or concerns, contact:

amcarthur@summitersconsulting.com

Website

www.summitersconsulting.com

Operator

Angelissa McArthur, a sole proprietor operating under the business name Summiters Consulting

Summiters Consulting | Privacy Policy