LEGAL DOCUMENT
← Back to Home
Policy

Privacy Policy

How we collect, use, and protect your information

Last Updated: March 2026

1. Introduction

PrismAdvisors LLC (“PrismAdvisors,” “we,” “us,” or “our”) is a marketing strategy and growth advisory firm organized under the laws of the State of New Mexico, with its principal place of business in Santa Fe, NM, United States.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or otherwise interact with us. We are committed to safeguarding your privacy and ensuring that your personal data is handled responsibly and in compliance with applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regulations.

By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

2. Information We Collect

2.1 Personal Information

We may collect the following categories of personal information that you voluntarily provide to us:

  • Identity Data: Full name, job title, and company name
  • Contact Data: Email address, phone number, mailing address, and business address
  • Professional Data: Industry, company size, role, and areas of business interest
  • Communication Data: Content of messages, inquiries, feedback, and any other communications you send to us
  • Financial Data: Billing information and payment details (processed securely through third-party payment processors)

2.2 Usage Data

When you visit our website, we automatically collect certain technical information, including:

  • Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution
  • Log Data: Pages visited, time and date of visits, time spent on each page, referring URLs, and clickstream data
  • Cookie Data: Information collected through cookies, pixels, and similar tracking technologies (see Section 9 for details)

2.3 Communication Data

We may retain records of communications between you and PrismAdvisors, including email exchanges, meeting notes, proposals, and project-related correspondence, to the extent necessary to provide our services and maintain our business relationship.

3. How We Collect Information

3.1 Directly from You

We collect information that you provide directly when you:

  • Submit a contact form or inquiry through our website
  • Send us an email or communicate with us via telephone
  • Participate in meetings, consultations, or discovery sessions
  • Enter into a service agreement or statement of work
  • Subscribe to our newsletter or marketing communications
  • Attend our events, webinars, or workshops

3.2 Automatically

We collect certain information automatically when you interact with our website through:

  • Cookies and similar tracking technologies
  • Web server log files
  • Analytics services (including Google Analytics)

3.3 From Third Parties

We may receive information about you from third-party sources, including:

  • Professional networking platforms such as LinkedIn
  • Client referrals and business introductions
  • Publicly available business directories and databases
  • Our technology and service providers

4. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, manage, and deliver our marketing strategy, growth advisory, and consulting services
  • Communication: To respond to your inquiries, send project updates, and maintain ongoing business communication
  • Website Improvement: To analyze usage patterns, optimize our website content and user experience, and ensure proper functionality
  • Marketing: To send you information about our services, insights, case studies, and industry updates, with your prior consent where required by law
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests
  • Business Operations: To manage our internal operations, including billing, invoicing, record-keeping, and quality assurance
  • Security: To detect, prevent, and address fraud, unauthorized access, and other potentially illegal activities

5. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following grounds:

  • Consent: Where you have given us explicit consent to process your personal data for specific purposes, such as receiving marketing communications. You may withdraw your consent at any time.
  • Contract Performance: Where processing is necessary to perform a contract with you or to take pre-contractual steps at your request, such as preparing a proposal or delivering consulting services.
  • Legitimate Interest: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes improving our services, analyzing website usage, and conducting business development activities.
  • Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject, such as tax reporting, anti-money laundering regulations, or responding to lawful requests from public authorities.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties.

We may share your personal information only in the following limited circumstances:

  • Service Providers: We engage trusted third-party companies to perform functions on our behalf, including website hosting, email delivery, analytics, payment processing, and cloud storage. These providers are contractually bound to use your data only for the purposes we specify and to maintain appropriate security measures.
  • Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.
  • With Your Consent: We may share your information with third parties when you have given us explicit permission to do so.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

  • Active Business Relationship: For the duration of our engagement or business relationship with you
  • Post-Engagement Retention: For a period of three (3) years following the conclusion of our business relationship, for the purposes of record-keeping, legal compliance, and potential future engagement
  • Legal Obligations: For longer periods where required by applicable tax, accounting, or other legal obligations

Upon the expiration of the applicable retention period, or upon your valid request, we will securely delete or anonymize your personal data, unless retention is required by law.

8. Your Rights

8.1 Rights for All Users

Regardless of your location, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request that we correct any inaccurate or incomplete personal information
  • Deletion: Request that we delete your personal information, subject to any legal retention requirements
  • Opt-Out: Unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly

8.2 Additional Rights for EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you also have the right to:

  • Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller
  • Restriction of Processing: Request that we limit the processing of your personal data in certain circumstances
  • Object to Processing: Object to the processing of your personal data based on our legitimate interests
  • Withdraw Consent: Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal
  • Lodge a Complaint: File a complaint with your local data protection supervisory authority

8.3 Additional Rights for California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, please contact us at contact@prismadvisors.io. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage data. We use the following types of cookies:

  • Essential Cookies: Necessary for the basic functionality of our website, such as session management and security. These cookies cannot be disabled.
  • Analytics Cookies: Used to collect information about how visitors use our website, including which pages are visited most often and how users navigate between pages. We use Google Analytics for this purpose.
  • Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. For more detailed information, please refer to our Cookie Policy.

10. International Data Transfers

PrismAdvisors is based in the United States. If you are accessing our website or services from outside the United States, please be aware that your personal data may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where we transfer personal data from the EEA, UK, or other jurisdictions with data transfer restrictions, we implement appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data processing agreements with our service providers that include adequate data protection commitments
  • Compliance with applicable data transfer frameworks

By providing us with your personal information, you acknowledge and consent to its transfer, storage, and processing in the United States.

11. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

  • Encryption of data in transit (TLS/SSL) and at rest where applicable
  • Access controls and authentication mechanisms to limit data access to authorized personnel
  • Regular security reviews and assessments of our systems and practices
  • Secure data storage with reputable cloud infrastructure providers
  • Employee training on data protection and security best practices

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing industry-standard protections.

12. Children’s Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take immediate steps to delete such information from our records. If you believe that a child under 16 has provided us with personal information, please contact us at contact@prismadvisors.io.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

  • Update the “Last Updated” date at the top of this policy
  • Post the revised policy on our website
  • Where required by law, notify you by email or through a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: contact@prismadvisors.io
  • Company: PrismAdvisors LLC
  • Location: Santa Fe, NM, United States

We will endeavor to respond to all inquiries within a reasonable timeframe, and no later than 30 days from receipt of your request.

Privacy Policy Terms of Service Cookie Policy Disclaimer