CBB Consulting & Coaching LLC ("We," "Us," or "Our") respects your privacy and is committed to protecting your personal information. This Privacy Policy (and in some cases, Our Terms of Service) explains how we collect, use, disclose, and safeguard your information when you use The Performance Builder (the "Service"). By using the Service, you consent to the practices described in this policy. If you do not agree, please do not use the Service. To the extent defined terms are used in this Privacy Policy but not defined herein, such terms shall have the meaning prescribed to them in Our Terms of Service.

We adhere to data minimization and purpose limitation principles: we collect only the personal information necessary for the purposes outlined below and do not repurpose it without your consent or as required by law.

We are based in Colorado, United States, and primarily serve U.S. customers, but we may process data from users outside the U.S. This policy complies with applicable U.S. laws, including the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act (CPA), Virginia Consumer Data Protection Act (VCDPA), and similar state laws. For users in the European Union or other regions subject to the General Data Protection Regulation (GDPR) or equivalent laws, we ensure appropriate safeguards, such as Standard Contractual Clauses for international transfers. If you are in a jurisdiction with specific requirements, you may have additional rights as described below.

1. Information We Collect

We collect information you provide directly to Us, including:

• Account information (name, email, company details)
• Funnel and business metrics from integrated platforms
• Usage data and analytics

We do not collect sensitive personal information (e.g., health, racial, or biometric data) unless explicitly provided by you for Service functionality, in which case we will handle it with additional safeguards and only for the intended purpose. We do not collect payment or other financial information. All such information is processed through applicable third party providers (such as Stripe), and use of the Services may require use of such third parties. To the extent third parties are utilized, You may be required to comply with those applicable Terms of Service. To the extent necessary, We may share account information for accounting purposes with these third party processors.

2. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process payments and send transaction notifications
• Send reminders and achievement updates
• Generate anonymized industry benchmarks
• Improve our platform and develop new features
• Comply with legal obligations

3. Information Sharing and Behavioral Advertising

We do not sell your personal information. However, we may share information for behavioral advertising purposes, which under CCPA/CPRA, CPA, VCDPA, and similar laws constitutes "sharing" or "targeted advertising":

• Analytics and Advertising: We use Google Analytics and may share usage data with advertising partners for targeted advertising. This constitutes "sharing" under applicable laws
• Service providers (payments, email, hosting)
• Your designated Growth Strategist: If you're a Business Owner, your coach can access your performance data.
• Legal compliance: Law enforcement when required by law.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

Your Right to Opt-Out: You can opt-out of the "sharing" or "sale" of your personal information for behavioral advertising or targeted advertising by using Our Cookie Settings, clicking "Do Not Sell or Share My Personal Information" in Our footer, or submitting a request via Our Contact form. We support Global Privacy Control (GPC) signals for automated opt-outs where applicable. For CPA/VCDPA users, this includes opting out of profiling for targeted ads.

4. Data Security

We implement industry standard technical and organizational measures to protect your data, including:

• Encryption in transit and at rest
• Regular security audits
• Access controls and authentication
• Secure data centers via Our hosting provider

Despite these measures, no system is completely secure. For limitations on liability related to data security, please refer to the Limitation of Liability section in Our Terms of Service.

5. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt-out of marketing communications
• Object to automated processing or profiling (including a right to human review)
• For CCPA/CPRA, CPA, VCDPA users: Opt-out of sales/sharing, targeted advertising, or profiling; non-discrimination for exercising rights.
• For GDPR users: Additional rights to restrict processing, withdraw consent, or lodge a complaint with a supervisory authority.

To exercise these rights, submit a verifiable request via Our Contact form. We will respond within applicable timelines (e.g., 45 days under CCPA/CPA/VCDPA, extendable; 1 month under GDPR). We may verify your identity to protect your data.

6. Cookies & Tracking

We use cookies and similar technologies with your consent:

• Essential cookies: Required for login, security, and basic site functionality
• Analytics cookies: Google Analytics to analyze platform usage and improve user experience (requires consent)
• Marketing cookies: For behavioral advertising and measuring ad effectiveness (requires consent)
• Functional cookies: To remember your preferences and provide enhanced features (requires consent)

You can manage your cookie preferences at any time using Our Cookie Settings banner or the "Cookie Settings" link in Our footer/sidebar. We respect your choices and will not use non-essential cookies without your consent.

7. Third-Party Integrations

When you connect to any third-party services (GoHighLevel, Calendly, etc.), you authorize Us to access and store data from those platforms as needed to provide Our services.

8. Data Retention

We retain your personal information for specific periods based on the type of data and legal requirements:

• Account information: Retained while your account is active, plus 3 years after account deletion for business records
• Payment data: Processed by Stripe; We retain transaction records for 7 years for tax and accounting purposes
• Performance metrics: Retained for 5 years or while your account is active, whichever is longer
• Usage analytics: Google Analytics data retained for 26 months maximum
• Support communications: Retained for 3 years to improve Our services
• Legal compliance data: Retained as required by applicable laws (typically 7 years for business records)

After these retention periods, We securely delete or anonymize your personal information. You can request earlier deletion subject to legal and business requirements

9. Data Breach Notification

In the event of a data breach that poses a risk to your personal information:

• We will notify relevant authorities and affected users as required by applicable law (e.g., within 72 hours under GDPR for high-risk breaches; 30 days under Colorado law).
• Notifications will include the nature of the breach, data involved, and steps We're taking to address it.
• We maintain an incident response plan with immediate containment, investigation, and remediation procedures.

10. Legal Basis for Processing (GDPR)

We process your personal information based on the following legal grounds:

• Contract performance: Account creation, service delivery, payment processing
• Legitimate interests: Platform improvement, security, fraud prevention, essential functionality
• Consent: Marketing communications, non-essential cookies, analytics tracking, behavioral advertising
• Legal obligation: Tax records, regulatory compliance, law enforcement requests

11. Children's Privacy

The Services are not directed to individuals under 18. We do not knowingly collect personal information from children. By using the Services, you represent and warrant to Us that you are 18 years of age or older.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses or equivalent mechanisms for GDPR compliance.

13. Changes to This Policy

We reserve the right to modify this Policy at any time. We will endeavor to timely notify users of any material changes via email or platform notification. Notwithstanding the foregoing, any failure on Our part to notify users shall not invalidate Our right to make such change.

14. Contact Us

For privacy-related questions, please use Our Contact form in the Support Center or email Us atprivacy@CBB.Services.

CBB Consulting & Coaching LLC

1800 Wazee St

Ste 300 #106

Denver, CO 80202