Privacy Policy

1. Definitions

• “Personal Information” Means information that identifies, relates to, or could reasonably be linked with a particular individual, including the categories of information described in Section 2 below.
• “Services” Means the credit strategy, financial positioning, consulting, document preparation, and related services offered by GRC.
• “Client” Means an individual who has engaged GRC for services, submitted an intake form, signed an agreement, or otherwise become a client of GRC.
• “Website” Means therealgrc.com and any associated landing pages, forms, portals, or booking pages operated by GRC.

2. Information We Collect

• Contact information: Such as your name, phone number, email address, and mailing address.
• Consultation information: Such as your biggest financial challenge, service interest, consultation notes, booking details, and communication preferences.
• Payment information: Such as payment amount, payment date, payment method, sender name, and service paid for. Card or bank details are processed by third-party payment processors and are not stored by GRC in plain text.
• Client intake information: Such as date of birth, last four digits of SSN, credit goals, housing goals, business funding goals, consent acknowledgments, and other information you provide through approved intake forms, when provided as part of a client intake process.
• Documents and supporting materials: Such as identification, proof of address, credit reports, bureau responses, creditor letters, funding documents, or other documents you choose or are required to upload through an approved secure process.
• Communication information: Including text messages, emails, form submissions, appointment confirmations, portal notes, and related records.
• Website and device information: Such as pages visited, browser type, device type, IP address, and general analytics or cookie-related data.
• Client intake information: Such as date of birth, last four digits of SSN, credit goals, housing goals, business funding goals, consent acknowledgments, and other information you provide through approved intake forms, when provided as part of a client intake process.

3. How We Use Your Information

• Responding to inquiries: And providing information about consultations, services, and next steps.
• Booking and managing consultations: Including reminders, confirmations, payment status, and meeting links.
• Providing services: Including credit strategy, financial positioning, client onboarding, document review, dispute-related support, round updates, and funding-related preparation where applicable.
• Complying with legal and contractual obligations: Including required disclosures, consent records, signed agreements, and documentation of services.
• Improving operations: Including internal tracking, workflow management, customer support, and business reporting.
• Sending communications: Including SMS, email, appointment reminders, portal updates, and service-related notices.
• Maintaining client records: Including contact history, agreement status, payment notes, intake notes, document notes, and service updates.

4. SMS and Email Communications

When you submit a form, book a consultation, or provide consent, GRC may contact you by SMS, phone, email, or other approved communication methods regarding your inquiry, appointment, client file, documents, payments, or service updates. Message and data rates may apply. You may opt out of marketing text messages by replying STOP, and you may request not to receive non-essential email communications. Service-related communications may still be sent when necessary to manage appointments, agreements, payments, or active client work.

4. SMS and Email Communications

Consultation and service payments may be processed through GHL Payments, Zelle, or another approved payment method. GRC may record payment details such as payment amount, payment date, payment method, sender name, and service paid for. GRC does not store full debit card, credit card, or bank account details in standard forms or plain text fields.

6. Client Documents and Sensitive Information

Some services may require sensitive information or documents, including identification, proof of address, credit-related documents, limited identity information, credit monitoring access details, or bureau account access details. GRC will request these materials only when needed for the consultation or service process. Clients should submit sensitive information only through GRC's approved process, such as an approved GHL pre-consultation form, secure upload page, secure portal, or other method specifically provided by GRC. Clients should not send Social Security numbers, identification documents, credit reports, bureau login credentials, or other sensitive documents by unsecured text message, direct message, or ordinary email unless GRC specifically instructs otherwise through an approved secure method.

7. How We Share Information

GRC shares personal information only as necessary to operate the business and provide services. Third-party service providers are permitted to access personal information solely to perform the specific functions GRC engages them for, and are not authorized to use that information for their own independent purposes.

• Service providers and platforms: Such as CRM, email, SMS, calendar, scheduling, and secure document management tools used to operate the business.
• Payment processors: Such as GHL Payments or another approved processor, only as needed to process payments.
• Electronic-signature providers: Such as DocuSign, when agreements, disclosures, or authorizations must be signed.
• Credit bureaus, creditors, lenders, dealers, mortgage professionals, or funding-related parties: Only when applicable, authorized, and necessary for the service or next step requested.
• Legal, compliance, or professional advisors: When needed for business, legal, compliance, accounting, or risk management purposes.
• Authorities or required parties: If required by law, court order, subpoena, legal process, or to protect the rights, safety, or property of GRC, clients, or others.

8. We Do Not Sell Personal Information

GRC does not sell personal information to third parties. We use information to operate the business, respond to inquiries, manage consultations, provide services, maintain records, and communicate with clients or prospective clients.

9. Data Security

GRC uses administrative, technical, and physical safeguards designed to protect personal information appropriate to the nature of the information collected. These measures may include restricted access to client files, secure platforms for document exchange and e-signature, and internal practices intended to limit unauthorized access, use, or disclosure. However, no website, CRM, payment processor, email system, or online transmission method can be guaranteed to be 100% secure. Clients are responsible for using secure devices, protecting their own account credentials, and avoiding the transmission of sensitive information through unsecured channels.

10. Data Breach Notification

If GRC becomes aware of a security incident that compromises the confidentiality, integrity, or availability of personal information in a manner that requires notification under applicable law, GRC will notify affected individuals and any required regulators or authorities in accordance with that law, and will take reasonable steps to investigate and address the incident.

11. Data Retention

GRC retains personal information and client records for as long as reasonably necessary to provide services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of information, service relationship, and applicable legal or operational requirements.

12. Your Choices and Rights

Where required by applicable law, you may request access to, correction of, or deletion of certain personal information associated with your client file, and you may request that we stop sending non-essential communications. GRC will respond to verifiable requests within a reasonable time. Some information may need to be retained, and some requests may need to be limited or declined, where necessary for legal, compliance, accounting, contractual, security, or operational reasons, or to preserve records related to an active or completed client engagement.

13. Cookies and Website Tracking

Our website and landing pages may use cookies, pixels, analytics tools, or similar technologies to understand website activity, improve user experience, and support marketing or business operations. You may adjust your browser settings to block or limit cookies, although some website features may not function properly.

14. Third-Party Links and Tools

Our website, forms, calendar pages, payment links, or communications may link to third-party websites or tools, including payment processors, calendar tools, video meeting platforms, electronic-signature platforms, CRM systems, social media platforms, or other service providers. GRC is not responsible for the privacy practices, security, or content of third-party websites or platforms.

15. Children’s Privacy

GRC services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will take appropriate steps to delete it or handle it as required by law.

16. Governing Law

This Privacy Policy is governed by the laws applicable to GRC's business operations, without regard to conflict-of-law principles, unless otherwise required by applicable state or federal law.

17. Changes to This Privacy Policy

GRC may update this Privacy Policy from time to time. The updated version will be posted on the website or landing page with a revised effective date. Continued use of the website, forms, consultations, or services after changes are posted means you accept the updated Privacy Policy.