Privacy Policy

Effective date: October 10th, 2026

I don't sell your personal information, and I don't share it for advertising. Everything you send me is stored in encrypted systems and used only to respond to you and serve your business.

This policy explains what information Zamit Advisory Group, LLC ("Zamit," "I," or "me") collects, how I use and protect it, and the choices you have. It covers zamitadvisory.com, the intake and booking forms linked from it, email with me, and my business outreach. Information you share during a paid engagement is also governed by our signed agreement, which controls if the two differ.

Information I collect

I collect business contact information, plus what you choose to tell me about your company's technology. I don't ask for sensitive personal information, and I ask that you not send passwords, health information, or payment card data.

Intake or contact form: name, work email, phone, company, job title, company size, and anything you write in the message.
Booking (Google Calendar): name, email, the time you choose, and any answers to booking questions.
Email: your email address, signature details, and what you write.
Calls and meetings: notes I take about your IT environment and priorities.
Invoices and online payments (Wave): billing contact name, email, company name and address, invoice details, and the payment information you enter on Wave’s payment page. Wave and its payment processors handle card and bank details; I don’t receive or store full card or bank account numbers. I use this information only to send invoices and collect payment for services.
Business contact data providers: name, job title, company, work email, and business phone, from providers such as Apollo.io, used for outreach to businesses.
Public sources: information from company websites, professional profiles, job postings, and public internet records such as a domain’s email and certificate settings.
Website visits: basic, aggregated visit counts provided by Google Sites. I don’t add advertising cookies or third-party tracking tools.

How I use information

I use your information only to run my advisory practice. Specifically, to:

respond to your inquiry and schedule calls;
prepare your IT Risk Snapshot scorecard, assessment, or other deliverables;
deliver services under our agreement, and send invoices and collect payment through Wave;
contact businesses that may benefit from my services, with an easy way to opt out;
check for conflicts of interest before taking on work;
improve my methodology, using only aggregated scores that don't identify you or your company; and
meet legal, tax, and accounting obligations.

I don't use your information for automated decision-making or profiling.

I don't sell or share your information

I have never sold personal information, and I never will. I don't share it with anyone for their own marketing or for targeted advertising, and I take no compensation from any vendor I recommend.

I share information only in these limited cases:

Service providers that run the tools my business depends on, only as needed to provide their service. They are Google Workspace (email, file storage, website, and forms), Google Calendar (appointment booking), Apollo.io (business contact data and outreach email), Wave (invoicing and online payments), and Claude by Anthropic (a paid Claude Pro account, with the setting that allows conversations to be used for AI model training turned off). Each is bound by its own privacy and security terms.
With your direction, such as introducing you to a provider you ask me to contact.
When the law requires it, such as a valid subpoena, or to protect my legal rights.
In a business transfer, if Zamit Advisory Group is merged or sold, in which case this policy continues to apply to your information.

Google states that it does not use Google Workspace customer data for advertising.

How I store and protect information

Your information is encrypted at rest and in transit. I protect it the way I advise clients to protect theirs:

Encrypted cloud storage. I store business records in a paid Google Workspace business account. Google encrypts this data at rest using industry-standard AES encryption and encrypts it in transit using TLS.
Encrypted devices. Any device that holds copies of business files uses full-disk encryption.
Access control. Only I have access to client and prospect records. My accounts require multi-factor authentication, and I don't use shared logins.
Separation. Zamit records are kept in Zamit's own systems, separate from any other employer or personal accounts.
Secure sharing. I never ask for passwords by email. If an engagement requires system access, we agree on a secure method and I delete the credentials when the work ends.

No system is perfectly secure. If I learn of a breach affecting your personal information, I will notify you as required by law.

How long I keep information

I keep information only as long as I need it:

Inquiries and prospects who don't become clients: up to 2 years after our last contact, then deleted.
Client records: for the engagement and 7 years after it ends, for tax and legal purposes.
System credentials: deleted when the engagement ends.

Your choices and rights

You can ask me at any time to see the personal information I hold about you, correct it, delete it, or stop contacting you. I honor these requests for everyone, wherever you live, within 30 days, and I won't treat you differently for asking.

Every outreach email includes a way to opt out, and I stop contacting you when you do. I'll keep your email on a do-not-contact list so I don't reach out again by mistake.

Children

My services are for businesses. I don't knowingly collect information from anyone under 18.

Changes to this policy

If I change this policy, I'll post the new version here with a new effective date. If a change materially affects how I use information you've already given me, I'll tell you by email first.

Contact

Zamit Advisory Group, LLC, Kansas City, Missouri 64158, hello@zamitadvisory.com

Page updated

Report abuse