Legal
Privacy Policy
Effective Date: January 31, 2026
Steele Nash LLC (“Steele Nash,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at steelenash.com or engage our services.
Please read this policy carefully. By using our website or services, you agree to the practices described below.
1. Information We Collect
1.1 Information You Provide Directly
We collect information you voluntarily provide when you:
- Submit an inquiry, book a discovery call, or contact us (name, email address, company name, phone number, message content)
- Download resources such as our AI Readiness Checklist (name, email address)
- Execute a service agreement or Statement of Work (business and contact information, payment details processed by our payment processor)
- Communicate with us by email, phone, or video call
1.2 Information Collected Automatically
When you visit our website, we and our service providers may automatically collect:
- Device and browser type, operating system, and IP address
- Pages visited, time spent on pages, and referring URLs
- Cookies and similar tracking technologies (see Section 5)
1.3 Client Business Data
In the course of performing services, you may provide us access to your business systems, data, and information. This data is used solely to perform the agreed services and is governed by our Terms of Service and any applicable data processing agreement. We do not use client business data for any other purpose and we do not use it to train AI models.
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide requested services
- Schedule and conduct discovery calls and project engagements
- Send service-related communications, invoices, and project updates
- Send marketing communications (with your consent where required by law)
- Improve our website, services, and business operations
- Comply with legal obligations and enforce our agreements
- Protect against fraud, security threats, and unauthorized access
We do not sell your personal information to third parties.
3. Legal Bases for Processing (EEA/UK Visitors)
If you are located in the European Economic Area or United Kingdom, we process your personal data on the following legal bases:
- Contract performance: to fulfill our service obligations
- Legitimate interests: to communicate with prospects, improve our services, and protect our business
- Consent: for marketing emails (which you may withdraw at any time)
- Legal obligation: to comply with applicable laws
4. How We Share Your Information
We do not sell or rent your personal information. We may share it with:
4.1 Service Providers
Third-party vendors who assist us in operating our business, including website hosting, scheduling software, payment processing, and email delivery. These vendors are contractually obligated to protect your information and may only use it as directed by us.
4.2 Professional Advisors
Attorneys, accountants, and insurers where necessary for our business operations, under duties of confidentiality.
4.3 Legal Requirements
If required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Steele Nash, our clients, or the public.
4.4 Business Transfers
In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance functionality and understand how visitors use our site.
Types of cookies we use:
- Essential cookies: Required for the website to function properly
- Analytics cookies: Help us understand site traffic and usage patterns (e.g., page views, session duration)
- Marketing cookies: Used to track visits for remarketing purposes (where applicable)
You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. We honor Do Not Track signals where technically feasible.
6. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to comply with legal obligations, resolve disputes, and enforce agreements. Specifically:
- Prospect inquiry data: Up to 2 years after last contact if no engagement occurs
- Client information: For the duration of the engagement and 7 years thereafter for legal and accounting purposes
- Website analytics data: Up to 26 months in aggregated or anonymized form
Client business data accessed during service engagements is deleted or returned to you within 30 days of engagement completion unless otherwise required by law or agreed in writing.
7. Data Security
We implement reasonable technical and organizational safeguards to protect your information, including:
- Encryption of data in transit (TLS) and at rest
- Access controls limiting data access to personnel who need it
- SOC 2-aligned practices for client data environments
- Regular review of our security practices
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.
8. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to certain exceptions
- Portability: Request your information in a structured, machine-readable format
- Opt-out: Unsubscribe from marketing emails at any time using the link in any email or by contacting us directly
- Restriction: Request that we limit processing of your information in certain circumstances
To exercise any of these rights, please contact us at legal@steelenash.com. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. This section describes those rights and how to exercise them.
9.1 Categories of Personal Information We Collect
In the preceding 12 months, we have collected the following categories of personal information:
- Identifiers: name, email address, company name, IP address, and similar identifiers
- Commercial information: services requested, transaction history, and payment records
- Internet or network activity: website browsing behavior, pages visited, and cookie data
- Professional or employment-related information: job title, company, and business context provided during engagements
- Inferences: assessments about your business's AI readiness or automation needs drawn from information you provide
We do not collect sensitive personal information as defined under CPRA (such as Social Security numbers, precise geolocation, or biometric data) in the ordinary course of our business.
9.2 Purposes for Collection
We collect the above categories of personal information for the business purposes described in Section 2 of this Privacy Policy.
9.3 Sharing of Personal Information
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We may share personal information with service providers as described in Section 4 of this Privacy Policy, solely to perform services on our behalf.
9.4 Your California Rights
As a California resident, you have the right to:
- Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business or commercial purpose for collecting it, and the categories of third parties with whom we share it
- Delete: Request deletion of personal information we have collected, subject to certain exceptions
- Correct: Request correction of inaccurate personal information
- Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising; no opt-out is required
- Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond permitted purposes
- Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights
9.5 How to Submit a Request
To exercise your California privacy rights, please submit a verifiable consumer request to us at legal@steelenash.com. You may submit a request on your own behalf or authorize an agent to do so by providing written permission. We will respond to verifiable requests within 45 days, with one possible 45-day extension where reasonably necessary.
9.6 Shine the Light
California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes without your consent.
10. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.
11. Third-Party Links
Our website may contain links to third-party websites or tools. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the effective date at the top of this policy and, where appropriate, provide additional notice. Your continued use of our website or services after the effective date of any changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy, please contact us at:
We take privacy inquiries seriously and will respond promptly.