How we handle your information.

1. Who we are

Cross Suite Advisory - N M E D LLC ("we," "our," or "the firm") is a boutique executive advisory firm incorporated in New York State. Our principal office is at 125 East State Street, Ithaca, NY 14850, with a New York City office at One World Trade Center, 85th Floor, New York, NY 10007. This Privacy Policy applies to crosssuiteadvisory.com and all subdomains, deliverables, and engagements operated under the firm.

2. What we collect

2.1 Information you provide directly

When you submit our contact form, request an introduction, or correspond with us by email, we collect what you choose to share. That typically includes:

• Your name and title
• Your organization and your role within it
• Your email address and (optionally) phone number
• The reason for your inquiry and the conversation you would like to have
• How you found us

We do not collect information about you that you have not chosen to share with us.

2.2 Information collected automatically

When you visit any page on the site, our infrastructure provider (Cloudflare) records technical information needed to deliver the page and protect the site from abuse. This includes your IP address (used briefly for routing and security, then aggregated), the browser and device you are using, the page you visited, and the page that referred you. This data is anonymized and retained in aggregate form only.

We do not use third-party advertising cookies. We do not use Google Analytics. We do not sell, share, or trade visitor data with advertisers, data brokers, or AI training providers.

2.3 What we do NOT collect

• We do not collect financial information, payment card data, or banking details through this website.
• We do not collect government-issued identification.
• We do not collect health information.
• We do not use behavioral tracking pixels from advertising platforms.

3. How we use what we collect

We use the information you provide solely to:

• Respond to your inquiry, personally, within 48 business hours (Friday cutoff: noon Eastern).
• Determine whether the inquiry is one we are positioned to serve well.
• Maintain a record of correspondence so we can engage with continuity if our conversation continues.

We use the automatically collected technical information to operate the website, protect it from abuse, and understand which content is reaching the audiences we serve.

4. How long we keep it

Contact form submissions and email correspondence are retained for the duration of the inquiry and any resulting engagement, plus seven years thereafter to satisfy our professional records-retention obligations. Anonymized technical analytics data is retained for up to two years in aggregate.

You may request earlier deletion at any time by emailing the address in Section 9.

5. Who we share it with

We do not sell, rent, lease, or trade personal information.

We share information with third parties only in these specific circumstances:

• Service providers we use to deliver the website and our practice (email hosting, form-processing infrastructure, secure cloud document storage). Each is bound by a written confidentiality and data-processing agreement.
• Engagement teams when a client engagement is underway and the information is needed to deliver the work. Always with the client's knowledge.
• Legal obligations if compelled by a valid legal process. In such cases we provide only the minimum information required, and notify the affected party where lawful to do so.

6. AI training and data use

We do not provide visitor data, form submissions, correspondence, or any other information collected through this website to any artificial intelligence model provider for training purposes. The site includes meta tags and a robots.txt directive instructing AI training crawlers (including but not limited to GPTBot, ClaudeBot, Google-Extended, and CCBot) not to crawl the site for training. We honor the same standard internally: client content is never used to train AI systems without explicit written authorization.

7. Your rights and choices

You have the right to:

• Access the information we hold about you.
• Correct information that is inaccurate.
• Delete the information we hold about you, subject only to legal records-retention obligations.
• Withdraw consent for future communications at any time.
• Object to processing of your information for any reason.
• Receive a copy of your information in a portable format.

To exercise any of these rights, email the address in Section 9. We will respond within 30 calendar days.

8. Security

We use industry-standard administrative, technical, and physical safeguards to protect information. The website operates over encrypted HTTPS, sits behind a Web Application Firewall, and is monitored continuously for attempted abuse. Internal correspondence and document storage use encrypted email and encrypted-at-rest cloud storage with two-factor authentication required for all access.

No internet-connected system is perfectly secure. We make every reasonable effort to protect what you share with us, and we will notify you promptly if a breach affecting your information is detected.

9. Contact us about privacy

Questions about this policy, requests under Section 7, or concerns about how your information is handled can be sent to:

Cross Suite Advisory - N M E D LLC
Attn: Privacy Officer
125 East State Street, Ithaca, NY 14850
Email: vernettakinchen@crosssuiteadvisory.com

10. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with the revised "Last updated" date at the top. Material changes will be announced in a notice on the home page for at least 30 days.