Privacy Statement
Cornerstone Advisor Group Privacy Policy
Effective Date: Nov 20, 2024
At Cornerstone Advisor Group, we are committed to protecting your privacy and safeguarding your personal and financial information. This Privacy Policy explains how we collect, use, protect, and share your information, in accordance with applicable U.S. laws and regulations, including the Gramm-Leach-Bliley Act (GLBA), the Right to Financial Privacy Act (RFPA), the California Consumer Privacy Act (CCPA), and other privacy laws.
We encourage you to read this policy carefully to understand how your personal and financial information will be handled. If you have any questions, please contact us using the information provided at the end of this policy.
1. Information We Collect
We collect various types of personal, financial, and transactional information to provide you with financial planning services. This may include:
- Personal Identification Information: Full name, address, date of birth, Social Security number, phone number, email address, and employment information.
- Financial Information: Income, assets, liabilities, credit reports, account balances, investment holdings, tax returns, insurance policies, and other financial data.
- Transactional Information: Records of transactions, investment activities, account balances, and the financial advice and services provided to you.
- Sensitive Information: Information related to health savings accounts, estate planning details, and other private financial information.
How We Collect Your Information
- Direct Collection: We collect information directly from you when you fill out forms, engage in discussions, or interact with us through phone calls, emails, and meetings.
- Indirect Collection: We may collect information from third-party sources such as financial institutions, credit bureaus, and government agencies to verify financial data and assess your financial needs.
- Online Tracking: When you visit our website or use our online portal, we may collect data through cookies and other tracking technologies to improve your experience and analyze site usage.
2. How We Use Your Information
We use your personal and financial information for the following purposes:
- Financial Services: To provide financial planning, investment management, retirement, tax, and estate planning services tailored to your needs.
- Communication: To communicate with you about your accounts, financial plans, and services. This includes providing updates, alerts, and educational materials.
- Legal and Regulatory Compliance: To comply with federal and state laws, such as tax reporting, anti-money laundering (AML) requirements, and other legal obligations.
- Marketing: To offer products and services that may interest you, such as new financial planning tools, investment opportunities, or related services. We will only send marketing materials with your consent, and you can opt-out of marketing communications at any time.
3. How We Protect Your Information
We are committed to ensuring your data is secure. We employ the following safeguards to protect your personal and financial information:
Physical Safeguards
- All physical records are securely stored in locked cabinets, restricted-access rooms, and monitored facilities.
- We limit access to sensitive information to authorized personnel only.
Technical Safeguards
- Encryption: We use encryption protocols (SSL/TLS) to protect sensitive data transmitted over the internet.
- Firewalls and Intrusion Detection: Our network is protected by firewalls and intrusion detection systems to prevent unauthorized access to sensitive data.
- Data Masking: Sensitive data such as Social Security numbers and bank account details are masked when not needed for specific transactions or functions.
- Regular Vulnerability Testing: We conduct regular security assessments and penetration testing to identify and resolve potential vulnerabilities.
Administrative Safeguards
- Access Control: Access to personal and financial data is limited to employees and third-party service providers who need it to perform their job duties.
- Authentication: We require multi-factor authentication (MFA) for accessing sensitive data, including through client portals and employee systems.
- Employee Training: All employees receive training on how to protect personal information and are required to adhere to strict confidentiality agreements.
- Incident Response Plan: In the event of a data breach, we have an incident response plan to quickly address the situation and notify affected individuals.
4. Sharing Your Information
We may share your personal and financial information under the following circumstances:
- Affiliates and Service Providers: We may share your information with affiliates or trusted third-party service providers that help us provide services to you, such as financial custodians, investment managers, and tax professionals. These third parties are contractually obligated to safeguard your information.
- Regulatory and Legal Authorities: We may disclose your information to government agencies, regulators, and law enforcement when required by law or to comply with regulatory investigations, audits, or legal orders.
- Business Transfers: If we merge, acquire, or sell part of our business, your personal information may be transferred as part of that transaction. We will notify you in the event of any such transfer.
- With Your Consent: We may share your information with third parties when you have explicitly consented to such sharing.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Your Rights
You have several rights regarding your personal and financial information:
- Right to Access: You can request access to the personal and financial information we hold about you. This includes information about how and why we use it.
- Right to Correct: If your information is inaccurate or incomplete, you can request that we correct or update it.
- Right to Delete: You can request the deletion of your personal data, subject to certain legal and regulatory exceptions. For example, we are required to retain certain financial records for tax and regulatory purposes.
- Right to Opt-Out: Under the Gramm-Leach-Bliley Act (GLBA), you have the right to opt-out of certain information-sharing practices, including sharing nonpublic personal information with non-affiliated third parties. Please contact us to exercise this right.
- Right to Limit Use of Sensitive Data: You may request that we limit how we use or share sensitive personal information such as health savings accounts or estate planning details.
To exercise any of these rights, please contact us using the contact details provided below.
Cornerstone Advisor Group SMS Privacy Policy
At CAG, we prioritize the privacy of our community members. We are committed to safeguarding the information collected through our Texting and SMS services. This policy outlines the information we collect, how we use it, and your rights and choices regarding this information, ensuring compliance with communication laws and best practices.
Your Rights and Choices: You have the right to:
- Access, update, or delete the information collected through our Texting and SMS services.
- If you need assistance, reply “HELP” to any SMS message or contact us here: 1-866-868-1492 or email advice@cs-ag.com
- You may Opt-out of receiving messages by replying “STOP” to any SMS message. After opting out, no further messages will be sent.
How to Opt-In for Consent to receive SMS messages:
- To join our Texting and SMS service, please go to the "Get in Touch" area, at the bottom of any page on our website, and make your selection to opt-in (which will appear after you complete your phone number).
Message Frequency and rate information
- Message & Data rates may apply.
- Message frequency may vary based on your preferences or activity.
6. California Residents’ Privacy Rights (CCPA)
If you are a resident of California, you have additional privacy rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request to know the categories of personal data we collect, the sources from which we collect it, and the purposes for which we use it.
- Right to Delete: You can request that we delete your personal information, subject to certain exceptions (e.g., for compliance with legal obligations).
- Right to Opt-Out: You may opt-out of the sale of your personal information (though we do not sell personal data).
- Non-Discrimination: You will not be discriminated against for exercising your rights under the CCPA.
For more information or to exercise your CCPA rights, please contact us at the details provided below.
7. Children’s Privacy
We do not knowingly collect personal information from children under the age of 13. If we learn that a child under the age of 13 has provided personal information, we will take steps to delete such information as soon as possible.
8. Data Breach Notification
In the event that your personal or financial information is compromised due to a data breach, we will notify you promptly in accordance with applicable law. This notification will include details about the breach, the steps we are taking to address it, and any actions you can take to protect yourself.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. We will notify you of significant changes by posting the updated policy on our website and, where appropriate, providing direct notice to you.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal and financial information, please contact us:
Cornerstone Advisor Group
4118 E Parham Rd
Henrico, VA 23228
P | 866-868-1492
E | advice@cs-ag.com