Effective Date: February 23, 2026    |    Last Updated: February 23, 2026

This Privacy Policy explains how Arq Advisory LLC (“Arq,” “we,” “us,” “our”) collects, uses, discloses, and protects personal information when you visit ArqAdvisoryllc.com (the “Site”) or contact us.

1) Scope

This Policy applies to personal information collected through the Site, including when you:

• submit a contact form,
• request information or services, or
• communicate with us by email, phone, or other electronic means.

This Policy does not apply to third-party websites or services that may be linked from the Site.

2) Personal Information We Collect

We collect personal information that you voluntarily provide, including:

• Identifiers: name, email address, phone number
• Professional / business information: company/organization, job title, industry
• Inquiry content: message details, service interests, and any information you choose to provide in attachments
• Communications: records of emails and other correspondence with us

Automatically collected information (limited): Our Site (and infrastructure providers) may collect basic technical data such as IP address, browser type, device information, pages viewed, and approximate location derived from IP address for security and site operation purposes.

3) Notice on How Your Contact Information Is Processed (Microsoft Email + HubSpot CRM)

When you submit a contact form or otherwise provide information to Arq:

• your submission may be delivered to Arq via Microsoft email services, and
• your information may be recorded and stored in HubSpot CRM for inquiry management and relationship administration.

HubSpot is used only as a CRM (not for marketing tracking, targeted advertising, or HubSpot tracking code). Access to Microsoft email and HubSpot CRM is restricted to authorized Arq personnel.

4) How We Use Personal Information

We use personal information to:

• respond to inquiries and provide requested information
• evaluate, propose, and deliver services
• communicate about engagement discussions (including scheduling)
• maintain internal business records and manage our relationships
• secure and administer the Site and our systems
• comply with legal obligations and enforce agreements

5) How We Disclose Personal Information

We do not sell your personal information.

We do not share your personal information with third parties for their own direct marketing purposes.

Important distinction: While Arq personnel are the only authorized users of our Microsoft and HubSpot accounts, your information is necessarily processed by service providers that provide the email and CRM infrastructure. These service providers act as processors on our behalf under their data protection terms and agreements.

We may disclose personal information only in these limited circumstances:

5.1 Service Providers / Processors

We use vendors to operate our business systems, including Microsoft (email and related collaboration services) and HubSpot (CRM database used for inquiry and relationship management only). These service providers may process personal information solely to provide services to Arq and pursuant to contractual/data protection terms (e.g., data processing addenda).

5.2 Legal, Regulatory, and Safety Disclosures

We may disclose personal information if required by law, subpoena, court order, or regulatory request, or when we believe disclosure is necessary to protect rights, safety, or security.

5.3 Business Transfers

If Arq engages in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

5.4 With Your Direction/Consent

We may disclose personal information when you request or authorize us to do so.

6) Cookies, Similar Technologies, and Analytics

We use limited cookies and similar technologies that are necessary for basic website operation and security, such as enabling core site functionality and protecting against misuse.

We do not use HubSpot tracking cookies, HubSpot marketing features, or HubSpot tracking code. HubSpot is used only as a CRM to store and manage inquiry submissions and relationship records.

You can control cookies through your browser settings. If you disable cookies, some site features may not function properly.

If we add analytics, marketing pixels, or other tracking technologies in the future, we will update this Policy and, where required, provide additional disclosures and choices.

7) Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including responding to requests, maintaining business records, complying with legal obligations, and resolving disputes.

8) Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9) Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10) U.S. State Privacy Rights

Depending on your state of residence, you may have certain privacy rights regarding personal information, which may include:

• Access (confirm and obtain a copy)
• Correction
• Deletion (subject to exceptions)
• Portability
• Opt-out of certain processing in some states (e.g., targeted advertising, sale of personal information, certain profiling)

How to submit a request: Email [privacy@arqadvisory.com] with the subject line “Privacy Request” and include your name, state of residence, and the request. We may need to verify your identity before completing your request.

Appeals (where applicable): If we deny your request, you may appeal by emailing [privacy@arqadvisory.com] with “Appeal” in the subject line.

11) California Notice at Collection (CCPA/CPRA)

If you are a California resident, we provide this “notice at collection” summary:

• Categories of personal information collected: identifiers (name, email, phone), professional/business information (company/title), and the content of your inquiry that you submit.
• Purposes of collection/use: to respond to you, manage relationships, provide services, maintain security, and comply with law.
• Selling / sharing: we do not sell personal information and do not share personal information for cross-context behavioral advertising.
• Retention: retained only as reasonably necessary for the purposes described in this Policy.

12) Do Not Track

Some browsers offer “Do Not Track” signals. Because standards vary, the Site does not respond to Do Not Track signals.

13) Changes to This Privacy Policy

We may update this Policy from time to time. We will post the updated version on this page and update the “Last Updated” date.

14) Contact Us

Arq Advisory LLC

Email: privacy@arqadvisory.com