Privacy

Who runs this site

This site is operated by SUM Equities ("we," "us," "our"). For privacy questions or requests, contact hi@sumequities.com.

[VET WITH LAWYER: include the legal entity name, registered address, and responsible data controller's name + role once established.]

What we collect

When you submit the contact form, we collect:

• Your name
• Your email address
• Your phone number, if you choose to provide it
• The message you write us
• The timestamp of submission

We do not use cookies for analytics or tracking. We do not run third-party analytics pixels on this site. Server logs generated by our hosting provider (Cloudflare) may transiently include IP addresses and user-agent strings in accordance with Cloudflare's own privacy practices.

How we use it

• To respond to your inquiry.
• To keep a minimal record of inbound communication for continuity across a conversation.

We do not add you to any marketing list. We do not sell, rent, or trade your data. We do not use your data to train machine-learning models.

How long we keep it

We retain contact-form submissions for up to three (3) years, after which they are deleted. You can request earlier deletion at any time — see "Your rights" below.

[VET WITH LAWYER: 3-year retention is a placeholder. Confirm this matches any applicable regulatory floor (e.g., tax records, contract retention) and update to your chosen term.]

Third parties

The following services process limited data on our behalf:

• Cloudflare — hosts the site and provides DDoS / TLS.
• FormSubmit (formsubmit.co) — receives contact-form submissions and forwards them to our email inbox. We do not store submissions on FormSubmit beyond the forwarding step.
• Our email provider (Proton Mail at pm.me) — delivers the contact-form email to us.

Each of these services has its own privacy policy. Using our contact form implicitly routes your submission through them.

Your rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion.
• Object to our processing.
• Request a machine-readable copy of your data (data portability).

Email hi@sumequities.com with "Privacy request" in the subject line. We respond within 30 days.

[VET WITH LAWYER: 30 days matches GDPR's one-month deadline. Confirm and adjust to jurisdictions that require faster response (e.g., certain CCPA timelines).]

Children

This site is not directed to children under 16. We do not knowingly collect data from them. If you believe a child has submitted data, email us and we will delete it.

Changes

We may update this policy. The "Last updated" date at the top reflects the most recent version. Material changes will be surfaced in a visible banner for 30 days.

Jurisdiction

[VET WITH LAWYER: state the governing law and jurisdiction for disputes. Common patterns: operator's country of residence; EU operators often cite the EU-member-state; US operators often cite a specific state. This section must match the corresponding clause in the Terms.]