Skip to content

Privacy Policy

Effective Date: March19, 2026
Last Updated: March 19, 2026

1. Introduction

The M Jordan Group (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy and security of personal information. As a provider of privacy, cybersecurity, and compliance advisory services, we collect, use, and safeguard personal information in accordance with applicable laws and regulations, including:

  • The Gramm-Leach-Bliley Act (GLBA) and Regulation P (12 CFR Part 1016)

  • The FTC Safeguards Rule (16 CFR Part 314)

  • The California Consumer Privacy Act (CCPA/CPRA)

  • The Colorado Privacy Act (CPA)

  • The General Data Protection Regulation (GDPR)

This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

2. Information We Collect

We may collect the following categories of personal information:

A. Identifiers

  • Name

  • Email address

  • Phone number

  • Business name

B. Professional & Commercial Information

  • Business details

  • Compliance needs and service inquiries

  • Service engagement and billing information

C. Internet Activity

  • IP address

  • Browser type

  • Website usage data (via cookies and analytics tools)

D. Sensitive Information (if applicable)

  • Information provided in the course of compliance engagements

3. How We Collect Information

We collect information through:

  • Website forms and inquiries

  • Client onboarding processes

  • Email and direct communications

  • Cookies and tracking technologies

  • Third-party integrations and marketing tools

4. How We Use Personal Information

We use personal information to:

  • Provide and manage compliance services

  • Communicate with clients and respond to inquiries

  • Process transactions and manage accounts

  • Improve our website and services

  • Conduct marketing and promotional activities

  • Comply with legal and regulatory obligations

5. Sharing and Disclosure of Information

We may share personal information:

A. For Business Operations

  • With service providers and vendors that support our operations

B. For Marketing Purposes

  • With third-party marketing platforms, partners, and applications

C. Legal and Compliance Requirements

  • To comply with applicable laws, regulations, or legal processes

D. Business Transfers

  • In connection with a merger, sale, or acquisition

We do not sell personal information in exchange for monetary compensation; however, certain sharing for marketing purposes may be considered a “sale” or “sharing” under applicable laws such as CCPA.

6. GLBA & Regulation P Notice (Financial Privacy)

In accordance with Regulation P (12 CFR §1016):

  • We may collect nonpublic personal information (NPI) about clients

  • We limit disclosure of NPI to:

    • Service providers

    • Marketing partners

    • As permitted by law

  • We implement safeguards consistent with federal standards to protect customer information

7. FTC Safeguards Rule Compliance

Pursuant to the FTC Safeguards Rule (16 CFR Part 314), we maintain a comprehensive information security program that includes:

  • Administrative safeguards (policies and training)

  • Technical safeguards (access controls, encryption where applicable)

  • Physical safeguards (secure systems and data storage)

8. Your Privacy Rights (CCPA & CPA)

If you are a resident of California or Colorado, you have the right to:

A. Access

Request the personal information we collect, use, or disclose about you

B. Deletion

Request deletion of your personal information

C. Opt-Out

Opt-out of:

  • Sale or sharing of personal information

  • Targeted advertising

D. Correction (CPA/CPRA)

Request correction of inaccurate personal information

E. Non-Discrimination

You will not be discriminated against for exercising your rights

How to Exercise Your Rights

You may submit requests by contacting:

Email: info@themjordangroup.com

We will respond in accordance with applicable legal requirements.

9. GDPR Rights (EU/EEA Residents)

If you are located in the European Economic Area (EEA), you have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Object to processing

  • Withdraw consent at any time

Legal Basis for Processing

We process personal data based on:

  • Contractual necessity

  • Legitimate interests

  • Legal obligations

  • Consent (where applicable)

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Improve website functionality

  • Analyze traffic and usage

  • Support marketing efforts

By continuing to use this website, you consent to our use of cookies.
You may manage your cookie preferences through your browser settings.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. However, no system can be guaranteed to be 100% secure.

12. Data Retention

We retain personal information only as long as necessary to:

  • Fulfill the purposes outlined in this policy

  • Comply with legal and regulatory obligations

13. Third-Party Links and Services

Our website may contain links to third-party websites or applications. We are not responsible for their privacy practices.

14. Artificial Intelligence (AI) and Automated Processing

We may use artificial intelligence (AI), machine learning tools, and automated technologies in connection with our services, website functionality, and client interactions.

  • AI tools may be used to assist with:

    • Customer support and communications

    • Compliance analysis and recommendations

    • Content generation and automation

    • Data processing and workflow optimization

  • Information you provide may be processed through AI-powered tools, including third-party platforms integrated into our website.

  • We take reasonable steps to ensure that:

    • AI systems are used in a manner consistent with applicable privacy laws

    • Data shared with AI tools is limited to what is necessary

    • Appropriate safeguards are in place where applicable

  • Users should avoid submitting highly sensitive personal information through automated tools unless specifically requested as part of a secured engagement.

15. Children’s Privacy

Our services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children.

16. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date.

17. Contact Information

For questions, privacy requests, or to exercise your rights, contact:

The M Jordan Group
Email: info@themjordangroup.com