PRIVACY POLICY

Website visitors · Enquiries · Consultations · Bookings · Customers

Effective date: 19 October 2026

This Privacy Policy explains how Checkmark Management Group LLC collects, uses, discloses, retains and protects personal information when you visit our website, contact us, request or book a consultation, purchase or receive services, subscribe to communications, or otherwise interact with us.

1. Who We Are

The entity responsible for the processing described in this Privacy Policy is Checkmark Management Group LLC, a limited liability company formed under the laws of New Mexico, United States (“Checkmark,” “we,” “us” or “our”). We provide business and strategic consulting services to individuals, professionals and businesses.


Email: info@checkmark-group.com
Postal address: Seventh Avenue, 20th Floor, New York, NY 10018, United States.

2. Scope

This Privacy Policy applies to personal information processed through our website, contact and consultation forms, booking tools, online purchases and payment flows, email and other communications, marketing subscriptions, and the provision or administration of our services. Third-party websites and services that we do not control are subject to their own privacy notices.

3. Personal Information We Collect

Depending on how you interact with us, we may collect:

• Identity and contact information: name, company or organisation, professional title, email address, telephone number and other contact details you provide.
• Enquiry and consultation information: messages, form responses, consultation topics, booking date and time, preferences, business details, objectives and information you choose to share.
• Booking and service records: appointments, services requested or purchased, communications about delivery and related administrative records.
• Billing and transaction information: billing details, invoices, service descriptions, transaction amounts and status, refunds and dispute records. Payment card details are generally handled by Stripe or the relevant payment provider rather than stored by us.
• Technical and usage information: IP address, device and browser details, operating system, approximate location inferred from IP address, referral source, pages viewed, clicks, session events, timestamps, cookie identifiers and error logs.
• Marketing information: subscription status, communication preferences, consent or opt-out records, and campaign delivery or engagement data where available.
• Security information: information reasonably needed to detect suspicious activity, prevent misuse, protect the website andinvestigate incidents.

Please do not send sensitive personal information through general forms or ordinary email unless it is necessary and an appropriate secure method is available.

4. How We Obtain Information

We collect information directly from you when you submit a form, contact us, book or purchase a service, subscribe to
communications or participate in a consultation. Technical information may be collected automatically through server logs, cookies and similar technologies. We may also receive limited information from providers supporting payments, scheduling, hosting, analytics, email delivery, security and website operation.

5. How We Use Personal Information

We may process personal information to respond to enquiries; schedule and administer consultations; provide, manage and improve our services; administer purchases, payments, invoices, refunds and disputes; communicate about bookings, transactions and service delivery; maintain business, accounting and tax records; operate, troubleshoot and secure the website; measure website performance and campaign effectiveness; send marketing communications where permitted; prevent fraud, abuse and security incidents; enforce agreements and protect rights; comply with legal obligations; and establish, exercise or defend legal claims.

6. Legal Bases Where the GDPR or UK GDPR Applies

Where the EU General Data Protection Regulation (“GDPR”) or UK GDPR applies, we process personal information on an
appropriate legal basis, which may include performing a contract or taking steps at your request before entering into a contract; complying with a legal obligation; pursuing our legitimate interests where those interests are not overridden by your rights and freedoms; or obtaining your consent where required or where we choose to rely on it. Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, you may have the right to object.

7. Payments and Stripe

We use Stripe to process online payments. Depending on the payment method and checkout configuration, Stripe may process your name, email address, billing details, transaction amount and date, service or order description, payment method information, IP address, device information, authentication data and fraud-prevention signals, as well as information needed to process payments, refunds and disputes. We generally receive transaction status and related information needed to administer your purchase. We do not intend to store full payment card numbers on our own systems.

Stripe may process information on our behalf for certain services and may act as an independent controller for activities for which it determines its own purposes and means, including certain fraud-prevention, compliance and platform operations. For further information, please review Stripe’s Privacy Policy and Data Processing Agreement.

8. Service Communications and Marketing

We may send messages necessary to respond to enquiries, confirm bookings, process purchases, deliver services, issue receipts or resolve service issues. We may also send newsletters, updates or promotional messages where permitted by law and, where required, with your prior consent. You may unsubscribe using the link in a marketing email or contact info@checkmark-group.com. Unsubscribing from marketing does not stop essential transactional or service communications. We may retain a limited record of your opt-out to ensure that it is respected.

9. Cookies, Analytics and Advertising Technologies

Our website may use essential cookies and similar technologies for security, network management, core functionality and features you request. We may also use analytics, performance measurement, advertising, conversion tracking, session replay or heatmap technologies. Depending on the services configured, these may include Google Analytics, Google Tag Manager, Google Ads conversion tracking, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, Microsoft Advertising UET, Microsoft Clarity, Hotjar, Matomo and similar tools.

These technologies may collect information such as IP addresses, device or browser identifiers, approximate location, pages viewed, referral URLs, clicks, session interactions, campaign attribution, timestamps and cookie identifiers. Third-party providers may process information under their own terms and privacy notices. Stripe components may use technologies necessary for checkout, authentication, fraud prevention and related payment services. Where applicable law requires prior consent, non-essential analytics or advertising technologies will be activated only after valid consent.

Where a cookie preference tool is available, you can use it to accept, reject or customise non-essential categories and later change your preferences. You can also manage cookies through your browser settings, although disabling some cookies may affect website functionality.

10. How We Share Personal Information

We may disclose personal information, as necessary, to website hosting, cloud, IT, security and technical support providers; booking and scheduling platforms; customer management tools; payment processors including Stripe and relevant banks or payment networks; invoicing and accounting providers; email and newsletter platforms; analytics and advertising-measurement providers; professional advisers; courts, regulators, law enforcement or public authorities where required or legally permitted; and parties involved in a business sale, financing, merger, restructuring or transfer, subject to appropriate safeguards.

We do not sell personal information for money. Depending on the technologies and settings used, certain disclosures to analytics or advertising providers may nevertheless be treated as “sale,” “sharing” or targeted advertising under specific privacy laws. Where applicable law requires it, we will provide the relevant notice and opt-out mechanism.

11. International Data Transfers

Because we serve customers internationally and may use providers operating in different countries, personal information may be transferred to or accessed from countries outside your country of residence, including the United States. Where applicable law requires safeguards for international transfers, we will use an appropriate legal mechanism, such as an adequacy decision or contractual safeguards, and any additional measures required by law.

12. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, customer support, accounting, tax and legal compliance, dispute resolution, security and enforcement of agreements. Retention periods depend on the type of information, the relationship, applicable limitation periods, legalrequirements and any ongoing dispute or investigation. When information is no longer required, we will delete it, anonymise it or retain it only where permitted or required by law.

13. Data Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage method can be guaranteed completely secure. If a personal data incident occurs, we will assess it and provide notifications to individuals or authorities where and as required by applicable law.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights to access personal information, obtain a copy, correct inaccuracies, request deletion, restrict or object to certain processing, receive portable information, withdraw consent, or complain to a data protection authority. These rights are subject to applicable conditions and exceptions.

To make a request, email info@checkmark-group.com with the subject “Privacy Request.” We may ask for information
reasonably necessary to verify your identity and authority or clarify the request. We will respond within the period required by applicable law. We may retain information where necessary to comply with law, protect security, resolve disputes or establish or defend legal claims, to the extent permitted by law. We will not unlawfully discriminate against you for exercising an applicable privacy right.

15. Additional Rights Under Certain US State Laws

Depending on the state and whether its law applies to Checkmark, residents may have rights to know or access personal information, correct it, request deletion, obtain a portable copy, or opt out of certain targeted advertising, sale or sharing of personal information, or profiling. Certain laws may provide appeal rights or authorised-agent procedures. If applicable law requires a notice at collection, appeal process, authorised-agent procedure, recognition of a universal opt-out signal, or “Do Not Sell or Share My Personal Information” or targeted-advertising opt-out link, we will provide the required mechanism.

16. European and UK Privacy Rights

Where the GDPR or UK GDPR applies, you may have rights to access, rectify, erase, restrict or object to processing, receive portable information and withdraw consent where consent is the legal basis. You may also lodge a complaint with the supervisory authority in the country where you live, work or where you believe an infringement occurred. Some rights are subject to legal exceptions.

17. Children’s Privacy

Our website and consulting services are intended for adults, professionals and business users and are not directed to children under 13. We do not knowingly collect online personal information from children under 13. If you believe a child has provided personal information to us, contact info@checkmark-group.com so that we can assess the circumstances and take appropriate steps. We will comply with any higher age threshold or additional requirements that apply under local law.

18. Third-Party Websites and Services

Our website may link to third-party websites, platforms or services. We do not control their content, security or privacy practices. A link does not mean that we endorse a third party or that this Privacy Policy governs its processing. Please review the relevant provider’s terms and privacy notice before providing information.

19. Automated Decision-Making

We do not intend to make decisions producing legal or similarly significant effects about you solely through automated processing of personal information collected through our website. If this changes and applicable law requires additional disclosures or rights, we will update this Privacy Policy and provide the required information.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, data practices, technology, providers or legal requirements. The effective date at the beginning identifies the current version. We will publish updates on our website and provide additional notice where required by law.

21. Contact Us

For questions about this Privacy Policy or to exercise a privacy right, contact:

Checkmark Management Group LLC
Email: info@checkmark-group.com
Seventh Avenue, 20th Floor
New York, NY 10018
United States