Privacy Policy

By using our website or engaging our services, you acknowledge that you have read andunderstand this Privacy Policy.

1. Introduction

Next Step Advisory ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information through our website, client engagements, and related business activities.

By using our website or engaging our services, you acknowledge that you have read and understand this Privacy Policy.

2. Scope

This policy applies to personal information collected through:

• Our website and any forms used for contact, inquiries, or service requests
• Personal information shared during consulting engagements or prospective client discussions
• Personal information collected in the course of providing HR advisory, compliance, and consulting services
• Data collected both online and offline

3. Information We Collect

Personal Information

For purposes of this Privacy Policy, "personal information" means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, to a particular individual.

We may collect the following categories of personal information:

• Name, email address, phone number, and business contact information
• Company information and role/title
• Information related to HR matters you choose to share (e.g., organizational structure, employee-related concerns)
• Resumes or employment-related information, if provided
• Any other information voluntarily submitted

Usage Data

When you visit our website, we may automatically collect the following information through cookies, analytics tools (such as Google Analytics), and similar technologies:

• IP address and general location data
• Browser type and device information
• Pages visited and time spent on the site

Cookies and Tracking

We may use cookies and similar tracking technologies to improve website functionality and understand user engagement, including:

• Session and persistent cookies
• Tracking identifiers
• Referral sources (e.g., LinkedIn, Google search)
• You can manage cookie preferences through your browser settings. Limiting cookies may impact site functionality.

4. How We Use Your Information

We may use the personal information we collect for the following purposes:

• To respond to your inquiries, process service requests, and communicate with prospective or current clients
• To deliver, manage, and improve our HR consulting, advisory, and compliance services
• To establish, maintain, and administer client relationships, including scheduling, invoicing, and follow-up communications
• To operate, analyze, and improve our website, including monitoring usage trends and enhancing user experience
• To comply with applicable legal and regulatory obligations, enforce our agreements, and protect our rights or the rights of third parties
• To send periodic updates, newsletters, or thought leadership content where you have consented or where otherwise permitted by applicable law, with the ability to opt out at any time

5. Use of Artificial Intelligence and Technology Tools

We may use technology tools, including artificial intelligence (AI)-enabled platforms, to support the delivery of our services and improve efficiency. These tools may assist with tasks such as drafting documents, analyzing information, summarizing content, or organizing data.

We do not rely on AI to make employment decisions or provide automated recommendations that produce legal or similarly significant effects without human review. All work product and

guidance provided to clients is reviewed and finalized by Next Step Advisory.

When using such tools:

• We limit the inclusion of personal or sensitive information wherever possible
• We use commercially reasonable safeguards to protect confidentiality
• We select tools that align with industry standards for data protection

Client confidentiality remains a priority. We do not use client-specific confidential information to train public AI models.

6. Sharing and Disclosure

We do not sell personal information. We may share personal information in the following circumstances:

With trusted service providers and independent contractors who assist in the delivery of our services or support our business operations (e.g., technology platforms, document storage providers, subcontractors engaged for client projects)

• With clients, where information is provided in the context of a consulting engagement
• When required by law, regulation, or legal process
• With professional advisors, such as attorneys, accountants, or insurers, as necessary for the operation of our business
• In connection with a merger, acquisition, reorganization, or sale of assets, in which case personal information may be transferred to the successor entity

7. Confidentiality and Client Information

As part of our HR consulting services, we may have access to sensitive employee or organizational information. We treat all client information as confidential and use it solely for the purpose of providing services, consistent with our contractual obligations.

8. Data Retention

We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy applicable legal, regulatory, accounting, or contractual requirements. In general, client engagement records are retained for a minimum of

three (3) years following the conclusion of services, unless a longer retention period is required by law or contract. When personal information is no longer needed, it is securely deleted or anonymized in accordance with our data retention practices.

9. Your Rights

We believe in transparency and respect your ability to manage your personal information.

Regardless of your location, you may submit a request to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Delete your personal information, subject to applicable legal or contractual retention requirements
• Opt out of receiving marketing communications at any time
• Object to or restrict certain processing of your personal information

We will respond to verified requests within thirty (30) days of receipt. We may request additional information to verify your identity before processing a request. To the extent any federal, state, or local privacy law grants you additional rights, we will honor those rights in accordance with applicable law. To submit a request, please contact us at: Debbie@NextStepAdvisory.us.

10. Third-Party Links

Our website may contain links to third-party websites, applications, or services, including but not limited to social media platforms, scheduling tools, and payment processors. This Privacy Policy does not apply to any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit, as we are not responsible for their privacy practices or content.

11. Children’s Privacy

Our services are intended for businesses and professionals. We do not knowingly collect personal information from individuals under 18.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below. We will endeavor to respond to all inquiries within thirty (30) days.

Next Step Advisory LLC

Attn: Data Privacy

Debbie@NextStepAdvisory.us