Privacy Policy

Advisor Growth Lab LLC ("Advisor Growth Lab," "us," "we," or "our") and advisorgrowthlab.com thank you for visiting the online resources we publish. We use the words "you" and "your" to mean you, the reader, and other visitors to our online resources who are, in all cases, over the age of 18. This privacy policy ("this policy," "this statement," and "our statement") informs you about the types of personal information we collect, how we use it, who we share it with and why, and what we do to protect it.

Online resources means the websites and other internet features we own that allow you to interact with our website and the content we provide, including our readiness assessment, downloadable reports, and lead and contact forms.

Who We Are

Advisor Growth Lab is an online educational resource and independent consultancy that helps experienced financial advisors evaluate business-model fit, transition economics, and next steps. We provide educational content, an assessment with emailed PDF results, and introductions to partner firms. We are NOT a registered investment adviser, broker-dealer, or law firm, and nothing on our online resources is investment, legal, or tax advice. For residents of the GDPR Jurisdictions, as defined below, and under some U.S. state privacy laws, Advisor Growth Lab is the data controller responsible for your personal data. For residents of California, Advisor Growth Lab is a "Business."

Who We Collect Personal Information From

We may collect personal information from the following groups of data subjects: visitors to, and users of, our online resources; our clients and prospective clients; those who apply for any posted roles; and our third-party vendors and business partners.

Personal information generally means information that can be used to identify you or that can be easily linked to you (for example, your name, email address, telephone number, or address). The privacy laws in some jurisdictions include unique elements in what they consider to be the personal information of the consumers or data subjects they protect. Where those laws apply to us, as in the case of the California Consumer Privacy Act ("CCPA") or the European General Data Protection Regulation ("GDPR"), our use of the phrase "personal information" includes the unique elements required by such laws.

The categories of information we collect from each of these groups, and the ways in which we use it, differ. It is possible that the same person could fall into more than one group. Most of this statement addresses our processing and sharing of personal information collected from visitors to and users of our online resources and our clients.

What We Collect

There are two types of information that we obtain from you online and then store and use: (i) non-personal information that is collected automatically from each visitor, such as your device operating system; and (ii) personal information that you voluntarily provide to us or that is collected automatically once you have given any required consent.

By using our online resources or requesting our services, you are signifying to us that you agree with this section of our privacy statement and that we may use and disclose your information as described.

Information You Voluntarily Submit

If you participate in certain activities on our online resources, you may be asked to provide information about yourself. Specifically, we collect:

• Name and email submitted through our readiness assessment and our lead and contact forms;
• Assessment answers — the responses you provide when you complete our readiness assessment, which we use to generate and email your PDF results;
• Booking details if you schedule a call with us, which we collect through our scheduling provider, Calendly (for example, your name, email, and selected time);
• Consent records — when you interact with our cookie banner, we record your choice, a timestamp, your IP address, and your browser user-agent so we can demonstrate and honor your preferences.

If you do not want us to collect this type of personal information, please do not provide it — do not participate in the activities that request or require it. Participation is strictly your choice. Not participating may limit your ability to take full advantage of our online resources, but it will not affect your ability to access information available to the general public.

When you send us an email or complete a form, the personal information in your message is retained by us and used to respond to you and process your request. Depending on the information you provide, communications from us may take the form of emails, telephone calls, and/or text messages. We may also send you information about our services we think may be of interest to you.

Information Collected Automatically

When you visit our online resources, basic information may be passively collected through your web browser via tracking technologies such as a "cookie," which is a small text file downloaded onto your computer or mobile device. Cookies allow us to recognize your device and store information about your preferences or past actions. As described in "Cookies and Tracking Technologies" below, no non-essential tracking loads until you consent through our cookie banner.

Once you allow analytics cookies, we collect first-party analytics signals — such as page views, scroll depth, outbound clicks, UTM parameters, engagement milestones (for example, opening the assessment, answering its questions, reading an article, or clicking toward scheduling a call), and a session identifier — using our own first-party cookies (af_sid, af_email, and af_uid). These signals are sent to our own advisor-intelligence platform at i.advisorgrowthlab.com. Information you submit directly through our forms — such as your name, email address, and assessment responses — is also sent to that same platform and to our customer relationship management system so we can prepare your results and follow up appropriately, and once you submit a form, activity previously collected under your session identifier may be linked to your email address. The internet activity information collected in this way may include such things as the IP address from which you accessed our online resources; the type of browser and operating system you use; the date, time, and length of your visit; the specific pages visited and documents downloaded; and the links you used to enter or leave our online resources.

We use both automatically collected information and the details you submit to compile reports about how visitors use our online resources, to administer and improve those resources, and to make your activities more convenient and efficient.

Information We Share to Deliver Results and Follow-Ups

To deliver your assessment results and follow up with you, we share the information you provide with our customer relationship management provider, GoHighLevel, and our transactional email provider, Resend. These vendors process your information on our behalf to store your records, deliver your emailed PDF results, and send follow-up communications. Partner firms may be introduced to you only as described on the site; we do not sell your personal information.

External Sites, Apps, Links, and Social Media

We may maintain a presence on external social media platforms, and our online resources may contain links to other websites or apps controlled by third parties, including partner firms. We are not responsible for the content on, or the privacy practices of, social media platforms or any third-party sites or apps to which we link. Those apps, sites, and platforms are not controlled by us and have their own privacy policies and terms of use. If you have questions about how they collect and use personal information, you should read their privacy policies and contact them directly.

Cookies and Tracking Technologies

We use first-party and, when enabled, third-party cookies. We organize the cookies and similar technologies we use into five categories: essential, functional, analytics, advertising, and unclassified.

No non-essential tracking loads until the visitor consents through our cookie banner. Essential cookies, which are required for the site to function, may operate without consent; all other categories load only after you opt in.

The full, always-current list of tools and cookies lives at our Cookie Policy. You can change your choices at any time via the "Cookie Preferences" link in the footer.

We honor the Global Privacy Control ("GPC") browser signal as a valid opt-out of the "sale" or "sharing" of personal information. The "Do Not Sell or Share My Personal Information" link in the footer opens those same controls.

How We Use Your Information

Advisor Growth Lab may use the information we collect from and about you for a variety of business purposes; in general, to provide our services, improve the visitor experience, and develop our services. We are committed to protecting and maintaining the privacy of your information, and we will process your data only in accordance with applicable data protection law and this Privacy Policy.

We will have a lawful basis for processing your data if:

• we need to process your information in order to provide you with the service you have requested or to enter into a contract;
• you have consented to such processing;
• we have a legitimate interest for processing your data — e.g., for fraud prevention; direct marketing; network and information systems security; data analytics; enhancing, modifying, or improving our services; identifying usage trends; and determining the effectiveness of our communications; and/or
• we are legally obliged to process it.

We may use the information that we collect from you for the following purposes:

• To provide the requested services to you, including generating and delivering your emailed assessment results.
• To manage your requests and any account you may have with us.
• To personalize your experience and better respond to your individual needs.
• To improve our online resources based on the information and feedback we receive.
• To diagnose problems with our servers or services.
• To respond more effectively to your customer service requests and support needs.
• To process transactions, such as consulting engagements and subscriptions.
• To develop new services and enhance current services.
• To send periodic emails about service updates, your requests, or your engagements.
• To protect the security or integrity of our services and our business, such as by protecting against and preventing fraud, unauthorized transactions, claims, and other liabilities.
• To introduce you to partner firms, but only as described on the site.

We may use your information for commercial purposes, such as to send you marketing and promotional emails and to reach prospective clients with our services (such targeting is only performed with your permission where your consent is required by applicable law). We may also use information you provide for other purposes disclosed at the time you provide it or otherwise with your consent.

When and With Whom We Share Personal Information

We use voluntarily provided personal information to respond to your inquiries and provide you with the services you have requested, among other uses described in this statement. We do not sell or rent your personal information to third-party data vendors or marketing companies. As you might expect, we disclose your information when required by law.

Service Providers and Business Partners. We share your information, including personal information, with the vendors and other third parties with whom we have a contractual relationship and who process information on our behalf — for example, GoHighLevel (CRM), Resend (email delivery), Calendly (scheduling), and our own advisor-intelligence analytics platform. We attempt to disclose only the information each party needs, and we attempt to bind such vendors and business partners, via written contracts, to use the personal information we provide only to the extent necessary to carry out the business purpose for which it was provided; not to disclose it to anyone else without our consent or instruction; to treat it as our property; and not to transfer it out of the United States without our consent. Partner firms may be introduced to you only as described on the site.

Please note, however, that we cannot guarantee that all of our vendors and business partners will agree to these contractual requirements; nor can we ensure that, even when they do agree, they will always fully comply.

Affiliates. We may share your information, including personal information, within our family of companies, if any. Those companies will use such information in generally the same manner as we do under this privacy statement.

Legally Compelled Disclosures. We may disclose your information, including personal information, to government authorities and to other third parties when compelled to do so, or at our discretion or otherwise as required or permitted by law, including responding to court orders and subpoenas.

To Prevent Harm. We may disclose your information, including personal information, when we have reason to believe that someone is causing injury to or interference with our rights or property, other users of our online resources, or anyone else who could be harmed by such activities.

Business Transfer. If we or any of our affiliates, or substantially all of our or their assets, are acquired by one or more third parties as a result of an acquisition, merger, sale, reorganization, consolidation, or liquidation, personal information may be one of the transferred assets.

Email Communications and Marketing

We may use your personal data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any or all of these communications by following the unsubscribe link or instructions provided in any email we send, or by contacting us. We use Resend as our email service provider to manage and send emails to you. Some communications from us are considered transactional or service communications (for example, delivery of your assessment results or billing notices); to ensure you have accurate information, you do not have the option to unsubscribe from these messages.

Payments

Where we provide paid consulting services, we use third-party payment processors to handle payment. We do not store or collect your payment card details; that information is provided directly to our third-party payment processors, whose use of your personal information is governed by their privacy policies. These processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which help ensure the secure handling of payment information.

Your Rights and Options

You may need to provide personal information to enjoy most of the features of our online resources. You can opt out of certain activities like newsletters and announcements. Residents of California and EU data subjects whose personal information was obtained while they were in California or a GDPR Jurisdiction, respectively, have certain additional rights, described below.

Emails. If you consented to receive direct marketing from Advisor Growth Lab, we provide you with the opportunity to opt out of our marketing communications or change your preferences by following a link in the footer of all non-transactional email messages from us, or by emailing us at support@chrisaevans.com. If we are using your personal information to send you materials via text or email and you decide you no longer want to receive them, you may opt out by following the instructions in the communication (e.g., by replying "STOP" to a text) or by contacting us using the information below. When we receive your request, we will take reasonable steps to remove your name from our distribution lists, though it may take a period of time to do so and you may still receive materials for a period after you opt out. In addition to opting out, you have the ability to access, amend, and delete your personal information by contacting us.

GPC and Do Not Track. As described in "Cookies and Tracking Technologies" above, we honor the Global Privacy Control signal as a valid opt-out of the sale or sharing of personal information. Some browsers also offer a "Do Not Track" feature; because there is no common industry standard for responding to such signals, we do not currently respond to browser "Do Not Track" signals specifically.

Online Tracking Technologies and Advertising

We, certain service providers operating on our behalf, and — only where you have consented — third parties may collect information about your activity on our online resources using tracking technologies such as cookies, pixels, tags, and web beacons. This tracking data may be used, for example, to provide useful features that simplify your experience, to deliver relevant content, to monitor and optimize the use and operation of our online resources, and to analyze traffic.

Some states provide residents or, in some cases, their authorized agents, with the right to opt out of the "selling" or "sharing" of their personal information, or of "targeted advertising" based on their personal information. To submit an opt-out request, use the "Do Not Sell or Share My Personal Information" link in the footer, which opens our cookie controls, or contact us at support@chrisaevans.com. Please note that your opt-out choice is specific to the device and browser you are using; if you use another browser or device, or clear your cookies, you may need to opt out again.

Children's Privacy

Our online resources are intended for financial-industry professionals and are not directed to anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that anyone under the age of 18 has submitted personal information to our online resources, we will delete that information and will not use it for any purpose whatsoever. If you believe that someone under the age of 18 has submitted personal information to our online resources, please contact us at support@chrisaevans.com.

How We Protect Collected Personal Information

We take all reasonable security precautions to protect the personal information provided to our online resources. We have adopted a security program that includes technical, organizational, administrative, and other security measures designed to protect, in a manner consistent with accepted industry standards and applicable law, against anticipated or actual threats to the security of personal information (the "Security Program"). We cannot, however, guarantee that your information, whether during transmission or while stored on our systems or otherwise in our care, will be free from unauthorized access, or that loss, misuse, destruction, or alteration will not occur. Except for our duty to maintain the Security Program under applicable law, we disclaim any other liability for any such theft or loss of, unauthorized access or damage to, or interception of any data or communications, including personal information. We periodically review and update our Security Program, including as required by applicable law. As part of our Security Program, we maintain incident response and management procedures that are activated whenever we become aware that your personal information was likely to have been compromised, and we require our vendors and business partners to notify us immediately if they have reason to believe that an incident adversely affecting personal information we provided to them has occurred.

Data Retention

We use and retain your personal information in accordance with applicable law and for as long as necessary to carry out the purposes described above, in accordance with our internal data retention procedures. We will also retain usage data for internal analysis purposes; usage data is generally retained for a shorter period, except where it is used to strengthen the security or improve the functionality of our services, or where we are legally obligated to retain it for a longer period.

The California Consumer Privacy Act

When we collect personal information from California residents, we become subject to, and those residents have rights under, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"). This section allows us to fulfill our obligations and explain your rights. For purposes of this section, the words "you" and "your" mean only such California residents.

Categories of personal information we collect from California residents. In the past 12 months, we have collected the following categories of personal information:

Category	Examples	Collected
Identifiers	Name, email address, IP address, session identifier, and similar identifiers	Yes
Personal information under Cal. Civ. Code § 1798.80(e)	Name, contact information, and, where you engage paid services, payment information processed by our payment processor	Yes
Commercial information	Services requested and records of assessments completed	Yes
Internet or other electronic network activity	Browsing activity on our online resources, page views, scroll depth, outbound clicks, and UTM parameters	Yes (after consent)
Geolocation data	Approximate location inferred from IP address	Yes
Professional or employment-related information	The fact that you are a financial-industry professional and related details you volunteer	Yes
Inferences	Inferences drawn from the above to assess business-model fit and transition readiness	Yes

We may disclose this information for one or more business purposes permitted by the CCPA/CPRA. We do not sell, and within the last 12 months have not sold, personal information to third parties. Where analytics or advertising cookies are enabled, certain activity may constitute "sharing" for cross-context behavioral advertising under California law; you may opt out as described in "Cookies and Tracking Technologies" above.

Rights of California residents. If you are a California resident, you have the right to request the following:

• Right to Know / Access. You may request that we disclose (1) the categories and specific pieces of personal information we have collected about you; (2) the sources of that information; (3) the business or commercial purpose for collecting it; (4) the categories of personal information we have disclosed for a business purpose; and (5) the categories of third parties with whom we have shared it.
• Right to Delete. You may request that we delete personal information we have collected from or about you. There may be instances where we cannot fully comply, such as where we need the information to complete a transaction, detect and protect against fraudulent or illegal activity, exercise our rights, for internal purposes, or to comply with a legal obligation.
• Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out. You may opt out of any "sale" or "sharing" of your personal information as described above.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.

To exercise your rights under California law, contact us at support@chrisaevans.com. We may ask you to complete a request form. The CCPA/CPRA only allows us to act on your request if we can verify your identity or your authority to make the request, so you will also need to follow our instructions for identity verification. If you make a verifiable request, we will confirm receipt and respond within the time frames prescribed by law.

Agent Authorization

You may authorize someone to make a privacy rights request on your behalf (an authorized agent). Authorized agents need to demonstrate that you have authorized them to act on your behalf, or must demonstrate that they hold a valid power of attorney pursuant to applicable probate law. Advisor Growth Lab retains the right to request confirmation directly from you that the agent is authorized to make such a request, or to request additional information to confirm the agent's identity. An authorized agent is prohibited from using a consumer's personal information for any purpose other than to fulfill the consumer's requests, for verification, or for fraud prevention.

Virginia Residents

If you are a Virginia resident, you may take advantage of certain privacy rights pursuant to the Virginia Consumer Data Protection Act (Virginia Code § 59.1-575 et seq.). For example, you may request to access, correct, or delete your personal information, and to obtain a portable copy of it. Because "selling" personal information and engaging in "targeted advertising" (as those terms are defined in Virginia law) may occur where advertising cookies are enabled, you may also exercise your right to opt out of such sales or targeted advertising. You have the right to appeal a denial of your privacy rights. To exercise your rights under Virginia law, or to submit an appeal, please contact us at support@chrisaevans.com. We may ask you to complete a request form and to verify your identity or authority. If you make a verifiable request, we will confirm receipt and respond within the time frames prescribed by Virginia law.

Rights of Data Subjects in Other U.S. States

In other U.S. states with comprehensive data privacy laws, we may collect from you the categories of personal information already described. We collect and manage (including disclose) such data in compliance with applicable state law, which may provide rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of the sale or sharing of personal information and of targeted advertising. To exercise any available rights, contact us at support@chrisaevans.com. As noted, we do not sell your personal information to third parties, nor do we use it for automated decision making that produces legal or similarly significant effects.

The EU General Data Protection Regulation

Our online resources are directed to financial-industry professionals in the United States and are not intended for individuals located in the GDPR Jurisdictions. If we do collect or otherwise obtain personal information from data subjects located in the GDPR Jurisdictions, this section describes how we comply with the GDPR for such personal information. For purposes of this section, the words "you" and "your" mean only such GDPR Jurisdiction-based visitors and users.

What we collect and how we use it. We collect from you the categories of personal information already described. The lawful basis on which we rely for such collection, use, and disclosure is typically consent or, where applicable, our legitimate interest. As stated elsewhere in this statement, we do not sell any of your personal information to third parties, nor do we use it for automated decision making.

Cross-border data transfers and third-party processors. If we transfer personal information from the GDPR Jurisdictions to a location that has not been deemed by the European Commission to have adequate privacy protections, we do so in the manner the GDPR permits.

Rights of data subjects in the GDPR Jurisdictions. With respect to personal information collected from you while you were in a GDPR Jurisdiction, you have the rights of transparency, access, correction and deletion, portability, information about who, what, why, and where, and restriction/objection. If you would like to exercise any of these rights, please contact support@chrisaevans.com. Your ability to exercise these rights is subject to certain conditions and exemptions set out in Articles 12 through 23 of the GDPR, including our right to decline part or all of a request if we cannot resolve reasonable doubts about your identity. We will respond to all requests without undue delay and in accordance with the time frames prescribed by the GDPR. If you are not satisfied with how we use your personal information or respond to your requests, you have the right to complain to your data protection regulator.

GDPR Jurisdictions means the countries composing the European Economic Area (including Iceland, Liechtenstein, and Norway) and the following countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden. Since the United Kingdom has formally left the European Union, the processing of personal data in the UK is governed domestically by the United Kingdom General Data Protection Regulation ("UK-GDPR").

Changes to This Privacy Statement

This privacy statement is effective as of the "Last updated" date above. The English-language version of this privacy statement is the controlling version regardless of any translation you may attempt. We reserve the right to change or update this statement from time to time. Please check our online resources periodically for such changes, since all information collected is subject to the statement in place at that time.

Contacting Us

If you have questions about our privacy statement or privacy practices, please contact us:

Advisor Growth Lab LLC
Attn: Chris
57 Union St S
Concord, NC 28025
support@chrisaevans.com (support and privacy requests)
accounts@chrisaevans.com (billing and accounts)