Upper Echelon Consulting
Privacy, Data Protection, and Your Control
We treat your information as a critical business asset. This policy explains how we collect, use, protect, and give you full control over your data across all UEC platforms and services.
Submit a Privacy RequestWho This Policy Applies To
This Privacy and Data Protection Policy applies to individuals who interact with Upper Echelon Consulting across any of our platforms, services, or advisory programs. It explains how we handle information for:
- Visitors to our website or any UEC-owned digital properties.
- Individuals who complete audits, assessments, applications, or booking forms.
- Clients enrolled in our advisory, consulting, or educational programs.
- Subscribers who sign up for our newsletters, updates, or resources.
- Attendees of UEC events, workshops, webinars, or training sessions.
- Anyone who communicates with us or shares information through our contact channels.
How We Use Your Information
As a founder, you should not have to decode legal language to understand what happens to your data. This section gives you a plain-English view of what we collect, why we use it, and how long we keep it across Upper Echelon Consulting’s websites, tools, and advisory programs.
What we collect and why
We collect information that helps us communicate with you, understand your business, and deliver the services you ask for. Typical examples include:
- Contact details such as your name, email address, role, and company.
- Business information you share in audits, forms, strategy calls, and onboarding.
- Usage and interaction data from our website, emails, and core tools so we can improve content and experience.
- Payment and billing details when you purchase a paid program or engagement.
We use this information to respond to your inquiries, deliver programs you enroll in, tailor recommendations, and send relevant educational or marketing communications where permitted.
How long we keep it
We keep personal information only as long as it is needed to:
- Provide services you have requested or are actively using.
- Maintain accurate business and financial records where the law requires it.
- Understand how our content and offers are performing so we can improve them.
When information is no longer needed for these purposes, we either delete it, anonymize it, or archive it in a restricted environment, subject to applicable legal and regulatory retention requirements.
Legal Bases and Compliance Framework
GDPR Compliance (for visitors and clients in the EEA and UK)
If you interact with Upper Echelon Consulting from the European Economic Area or the United Kingdom, your information is processed only when we have a valid legal basis. These include:
- Consent when you ask to receive marketing communications or voluntarily submit information through forms and assessments.
- Contract performance when we process information needed to deliver programs or services you have purchased or requested.
- Legitimate interest when we improve our site, measure engagement, protect security, or communicate essential updates that help you evaluate or use our services, always balanced with your rights.
- Legal obligation when retention or documentation is required under applicable laws.
United States Federal Requirements
For individuals located in the United States, UEC follows federal regulations that apply to email, communications, and data handling. These include:
- CAN-SPAM Act for email marketing. All marketing messages include an unsubscribe link and accurate sender information.
- TCPA for SMS or phone-based outreach if used. Explicit consent is required before sending automated text messages or similar communications.
- Federal data protection obligations related to billing, record-keeping, and secure storage of financial details.
US State Privacy Laws
Several states provide additional rights related to access, correction, deletion, and limits on data sharing. This policy addresses these requirements in the Your Rights section. These laws include:
- California Consumer Privacy Act and its amendments.
- Virginia Consumer Data Protection Act.
- Colorado Privacy Act.
- Connecticut and Utah privacy laws, along with similar emerging frameworks.
If you reside in one of these states, you may have rights that allow you to request access to your information, request deletion, correct inaccurate information, or limit certain types of data use.
What We Collect
We collect information that helps us understand who you are, how your business operates, and how to deliver the services you ask for. The specific data we collect depends on how you interact with Upper Echelon Consulting, but it generally falls into the categories below.
Identification and contact details
Information that allows us to recognize you and communicate with you about UEC services and resources.
- Name and business email address.
- Role or title and company name.
- Phone number where provided.
- Country, state, or region and time zone where relevant.
Business and engagement information
Information you share so we can understand your operations and recommend the right programs or advisory support.
- Details you provide in audits, assessments, and application forms.
- Context you share during strategy calls, onboarding, or program check-ins.
- Notes related to your goals, constraints, and priorities for your business.
Usage and analytics data
Technical information that helps us understand how people interact with our website, content, and tools.
- Page views, clicks, and navigation patterns on our sites.
- Device type, browser type, and general location derived from IP address.
- Email engagement such as opens and link clicks where permitted.
Communication preferences
Choices you make about how and when we contact you.
- Marketing and newsletter subscription status.
- Topic interests where you have specified them.
- Unsubscribe actions and preference updates.
Payment and billing information
Information needed to complete transactions for paid programs or engagements.
- Billing contact details and invoicing information.
- Details related to the programs or services you have purchased.
- Payment method details handled by our payment processors, which store full card data on our behalf where applicable.
Information we avoid collecting
UEC does not intentionally collect sensitive personal information such as government ID numbers, health records, or information about children.
- We do not direct our services to children under 16.
- We do not use your information to profile you for unrelated third party advertising.
- If you believe you have shared sensitive information that should be removed, you can use our privacy request process.
Specific information we process about you will depend on the forms you complete, the programs you join, and the channels you use to interact with us. You can review, correct, or request deletion of your information at any time through our privacy request process described below.
How We Use Your Information
We process personal information to deliver services you ask for, improve your experience with UEC, communicate effectively, and meet our legal and operational responsibilities. Each processing purpose aligns with specific legal bases described earlier in this policy.
Delivering services and programs
We use your information to provide and manage services you request or purchase.
- Scheduling strategy calls, onboarding sessions, and program check-ins.
- Preparing assessments, recommendations, and materials tailored to your business.
- Managing contracts, billing, and client account records.
Communicating with you
We use your contact information to respond to your inquiries and send updates relevant to your engagement with UEC.
- Responding to questions submitted through forms or email.
- Sending onboarding information, program instructions, and service updates.
- Sending educational or marketing communications where you have given consent or where permitted under legitimate interest.
Improving our website and content
We analyze usage information to understand how people interact with our website, emails, and resources.
- Evaluating which pages, programs, or resources are most helpful.
- Supporting quality control and testing new site features.
- Maintaining security and preventing fraudulent or harmful activity.
Legal and operational requirements
Some information is required to comply with applicable laws or internal operational standards.
- Maintaining accurate financial and tax records.
- Honoring data access, correction, and deletion requests.
- Preserving records for compliance and dispute resolution where needed.
We do not sell personal information. We use your information only for the purposes described above, and only when there is a valid legal basis for doing so.
Data Sharing, Processors, and International Transfers
We share personal information only when it is needed to operate our services, deliver the programs you request, maintain security, or meet legal requirements. We do not sell personal information. When we use third party processors, they are required to protect your information and use it only according to our instructions.
Why we share information
We share information with trusted service providers when it is needed to operate essential business functions. These providers support tasks such as hosting, analytics, communication tools, payment processing, and customer relationship management.
- Hosting and infrastructure providers that keep our website and tools available.
- Analytics services that help us understand engagement and site performance.
- Email and communication tools that deliver messages you request or expect.
- Payment processors that handle billing for paid programs.
- Scheduling and form platforms that support audits, assessments, and calls.
Categories of service providers we use
The specific providers we use may change over time, but they usually fall into the categories below.
- Website hosting and content delivery providers.
- CRM and marketing automation platforms such as HubSpot.
- Video conferencing and communication tools such as Zoom.
- Payment processors that securely handle transactions.
- Form and scheduling tools used for audits and strategy calls.
- Email delivery and newsletter tools.
- Analytics and performance measurement tools.
International data transfers
Some of our service providers are located in other countries. When information is transferred to a provider outside your home region, we take steps to ensure it is protected under appropriate safeguards. These may include standard contractual clauses, similar transfer mechanisms, or other legally recognized protections.
In all cases, processors must handle your information only for the purposes described in this policy and must maintain appropriate security controls.
If you would like more detail about our service providers or international transfer safeguards, you can submit a privacy request at any time. We will respond in accordance with the applicable laws in your region.
Data Retention and Security
We keep personal information only for as long as it is needed for the purposes described in this policy and for as long as laws or regulations require. We also apply technical and organizational measures to protect that information from accidental loss, misuse, or unauthorized access.
How long we keep information
Retention periods depend on the type of information and how it is used.
- Contact and engagement records are kept while we are actively working with you or you are subscribed to our communications, and for a reasonable period after that to maintain accurate records and respond to follow up questions.
- Client and billing records are kept for the time needed to meet accounting, tax, and legal obligations.
- Usage and analytics data is generally kept for shorter periods that allow us to analyze trends and improve performance.
When information is no longer required, we either delete it, anonymize it, or move it into a restricted archive, subject to any legal retention requirements that still apply.
How we protect information
We treat client and visitor data as part of the core operating system of UEC and apply safeguards that are appropriate to the sensitivity of the information.
- Using reputable service providers that maintain strong security controls.
- Limiting access to personal information to team members and partners who need it for legitimate work purposes.
- Applying authentication, role based access, and similar controls to systems that store or process data.
- Reviewing how data is collected, stored, and used as our services and tools evolve.
No method of transmission or storage is completely risk free, but our goal is to keep your information protected at a level that is consistent with good industry practice for businesses like ours.
You can request more detail about how long we keep specific types of information or ask us to delete certain records where the law allows. Details on how to make these requests are set out in the Your Rights and Choices section below.
Your Rights and Choices
The rights available to you will depend on where you live and which laws apply. This section summarizes the core rights that are commonly available under GDPR and various United States privacy laws, and explains how you can exercise them through our privacy request process.
Your key privacy rights
Subject to local law, you may have some or all of the rights below.
- Access to a copy of the personal information we hold about you.
- Correction of inaccurate or incomplete personal information.
- Deletion of personal information in certain circumstances, for example when it is no longer needed for the purposes for which it was collected.
- Restriction of certain types of processing while a request or objection is being reviewed.
- Portability of certain information in a structured, commonly used format where technically feasible.
- Objection to processing that is based on legitimate interests, including profiling linked to those interests.
- Withdrawal of consent where processing is based on consent, without affecting the lawfulness of processing that took place before withdrawal.
Additional rights in some U.S. states
If you live in a state with a comprehensive privacy law, you may have additional rights, such as:
- Requesting more detailed information about how we collect and use your information.
- Requesting that we correct or delete certain information.
- Requesting that we limit certain types of sharing or targeted advertising where applicable.
- Submitting an appeal if you are not satisfied with our response to a privacy request.
Submit a privacy request
You can exercise your rights by submitting a request through our privacy request center. This route helps us verify your identity, review your request accurately, and respond within the timelines set by applicable law.
Submit a Privacy RequestWe may ask for additional information to confirm your identity and to ensure that we are responding to the correct person. Where local law sets specific response timelines, we will aim to respond within those periods and will let you know if we need more time.
Marketing Communications and Opt Out
We use email and other communication channels to share updates, resources, and information about services you may be interested in. This section explains the types of messages you may receive and how you can change or stop these communications.
Types of communications we send
You may receive communications from us in the categories below, depending on how you interact with UEC.
- Service and transactional messages that are necessary to deliver programs you are enrolled in or to respond to direct inquiries.
- Educational content such as newsletters and resources when you subscribe or show interest in specific topics.
- Marketing communications about UEC programs, events, or offers, sent only when allowed by consent or legitimate interest.
How to manage or stop marketing communications
You can control your communication preferences at any time using the methods below.
- Use the unsubscribe link included at the bottom of any marketing email.
- Adjust preferences in emails that include a preference management link.
- Submit a privacy request if you want to stop all marketing communications or wish to delete your information entirely.
Children’s Privacy
Upper Echelon Consulting provides services to business owners, leaders, and professionals. Our website, programs, and communications are not directed to children under the age of 16, and we do not knowingly collect personal information from children.
If you believe that a child under 16 has provided personal information to us, please contact us using the details in the Contact for privacy questions section of this policy. We will review the situation and take appropriate steps to remove the information where required by law.
Contact for Privacy Questions
If you have questions about this policy, how your information is handled, or a concern that is not covered by the privacy request center, you can contact us using the details below. We review privacy related inquiries and aim to respond in a way that is clear, practical, and aligned with the laws that apply to you.
Email: [email protected]
Mailing address:
Upper Echelon Consulting
6852 W. County Road 500 N., Mulberry, IN 46058
For requests to access, correct, or delete your information, or to exercise other rights described in this policy, we recommend using our privacy request center so we can verify your identity and track your request through completion.
Changes to This Policy
We may update this Privacy and Data Protection Policy as our services, tools, or legal requirements change. When we make changes, we will revise the Last updated date at the bottom of the policy so you can see when it was most recently reviewed.
For changes that materially affect how we use your personal information, we will take additional steps that may include highlighting the update on this page, providing a notice on our website, or sending a direct communication where appropriate. In some cases, we may ask for your consent again if the law requires it.
We encourage you to review this policy from time to time so you stay informed about how we handle information as our work with founders and leadership teams evolves.
Last updated: 20221120
We Treat Your Information With Discipline and Care
If you have questions about how your information is handled, or if you want to review, correct, or delete your information, you can use the options below. We are committed to handling every request quickly, clearly, and in line with the laws that apply to you.