1. Introduction
Welcome to Waypoint Operating Partners ("Waypoint," "we," "us," or "our"). We are committed to protecting your privacy and maintaining the confidentiality of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website WaypointOP.com (the "Site") or engage with our services.
By using our Site or services, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please do not access or use our Site.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide to us when you:
- Complete contact forms on our Site (e.g., requesting information, scheduling consultations)
- Schedule discovery calls or consultations through our booking system
- Subscribe to our newsletter or email communications
- Download resources (e.g., The Exit-Readiness Self-Assessment, guides, templates)
- Create a membership account or subscribe to a membership plan
- Communicate with us via email, phone, or other channels
- Enter into engagement agreements for consulting services
- Submit feedback through our content feedback system
This information may include:
- Contact Information: Name, business name, email address, phone number, mailing address
- Business Information: Company name, job title, industry, annual revenue, number of employees, business location
- Professional Information: Business challenges, operational details, exit timeline, goals and objectives
- Financial Information: Revenue figures, EBITDA, business valuation data (provided during consulting engagements)
- Payment Information: Credit card details, billing address (processed securely by Stripe — we do not store full card numbers)
- Account Information: Email address, membership tier, login credentials (managed by MemberSpace)
- Communication Content: Messages, inquiries, feedback, and other information you choose to share
2.2 Information Collected Automatically
When you visit our Site, we automatically collect certain information about your device and browsing activity:
- Technical Information: IP address, browser type and version, operating system, device type, screen resolution
- Usage Data: Pages visited, time spent on pages, links clicked, referring/exit pages, date and time of visit
- Location Data: General geographic location based on IP address (city/state level, not precise location)
- Cookies and Similar Technologies: See Section 4 for detailed information
2.3 Information from Third-Party Sources
We may receive information about you from third-party sources, including:
- LinkedIn: If you connect with us via LinkedIn or provide your LinkedIn profile
- Referral Partners: Contact information and business details shared by referral sources with your consent
- Public Sources: Publicly available business information used for research and outreach purposes
- Service Providers: Analytics providers, marketing platforms, CRM systems
3. How We Use Your Information
3.1 Service Delivery
- Providing consulting services, diagnostics, and business transformation support
- Communicating with you about your inquiries, consultations, and engagements
- Scheduling and conducting discovery calls, diagnostic interviews, and follow-up meetings
- Creating customized reports, presentations, and deliverables
- Managing client relationships and project delivery
- Providing access to membership content, courses, and interactive tools
3.2 Business Operations
- Processing payments and managing financial transactions (via Stripe)
- Managing membership accounts and access levels (via MemberSpace)
- Maintaining records for legal, tax, and accounting purposes
- Analyzing business performance and improving our services
- Managing customer relationships through our CRM system (HubSpot)
- Internal project management and task tracking (ClickUp — not visitor-facing; does not set cookies on the Site)
3.3 Marketing and Communications
- Sending newsletters, industry insights, and educational content (with your consent)
- Marketing our services to prospective clients
- Conducting market research and understanding client needs
- Creating anonymized case studies and testimonials (with your explicit permission)
- Responding to your inquiries and providing customer support
3.4 Website Improvement
- Analyzing website traffic and user behavior to improve functionality (via Google Analytics)
- Measuring advertising effectiveness (via Google Ads)
- Optimizing content, layout, and user experience
- Troubleshooting technical issues
- Conducting A/B testing and performance optimization
- Collecting content feedback to improve articles, tools, and courses
3.5 Legal Compliance
- Complying with legal obligations and regulatory requirements
- Protecting our rights, property, and safety, and that of our clients and others
- Preventing fraud, security threats, and illegal activities
- Enforcing our terms of service and agreements
4. Cookies and Tracking Technologies
4.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our Site. They help us recognize your browser and capture certain information about your preferences and usage patterns.
4.2 Types of Cookies We Use
Essential Cookies — Required for the Site to function properly. These cannot be disabled.
- Session management
- Security features
- Form functionality
- Membership authentication (MemberSpace)
Analytics Cookies — Help us understand how visitors interact with our Site.
- Google Analytics (tracks page views, session duration, bounce rate)
- Conversion tracking
- Performance monitoring
Marketing Cookies — Used to deliver relevant advertisements and measure campaign effectiveness.
- Google Ads (remarketing and conversion tracking)
- Facebook Pixel (if applicable)
- LinkedIn Insight Tag (if applicable)
- Lead source attribution
Preference Cookies — Remember your settings and preferences.
- Language preferences
- Display settings
- Geographic location preferences
4.3 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to:
- View and delete cookies
- Block all cookies
- Block third-party cookies
- Clear cookies when you close your browser
Please note that disabling cookies may limit your ability to use certain features of our Site, including membership login.
Browser-Specific Instructions:
4.4 Third-Party Analytics
We use Google Analytics to analyze Site traffic and usage. Google Analytics uses cookies to collect information such as how often users visit the Site, what pages they visit, and what other sites they used before coming to our Site.
Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and Google Privacy Policy.
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
For detailed information about all cookies used on this Site, please see our Cookie Policy.
5. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:
5.1 Service Providers
We engage trusted third-party service providers to support our business operations:
- CRM System: HubSpot (customer relationship management, forms, and email)
- Membership Platform: MemberSpace (membership authentication and access control)
- Payment Processing: Stripe (secure payment transactions — PCI DSS compliant)
- Analytics: Google Analytics (website analytics)
- Advertising: Google Ads (conversion tracking and remarketing)
- Hosting and CDN: Cloudflare (website hosting, content delivery, and security)
- Scheduling: Calendly (appointment scheduling)
- Internal Project Management: ClickUp (internal task and project tracking — does not process visitor data)
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
5.2 Legal Requirements
We may disclose your information if required by law or in response to:
- Subpoenas, court orders, or legal processes
- Requests from government or regulatory authorities
- Protection of our rights, property, or safety
- Investigation of fraud, security threats, or illegal activities
- Enforcement of our terms of service or agreements
5.3 Business Transfers
If Waypoint Operating Partners is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information.
5.4 With Your Consent
We may share your information with third parties when you explicitly consent or direct us to do so, such as:
- Creating testimonials or case studies (with your permission)
- Sharing your contact information with referral partners (with your approval)
- Participating in joint marketing initiatives
6. Data Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
Our security measures include:
- Encrypted data transmission (SSL/TLS certificates)
- Secure password protection and access controls
- PCI DSS-compliant payment processing (via Stripe)
- Regular security audits and vulnerability assessments
- Limited employee access to personal information
- Cloudflare DDoS protection and Web Application Firewall
- Secure cloud storage with enterprise-grade providers
- Regular data backups and disaster recovery procedures
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods:
- Active Client Data: Duration of engagement plus 7 years (for legal, tax, and accounting purposes)
- Membership Data: Duration of active membership plus 2 years (or until you request deletion)
- Prospect Data: 3 years from last interaction or until you request deletion
- Marketing Communications: Until you unsubscribe or request deletion
- Analytics Data: 26 months (Google Analytics default retention period)
- Financial Records: 7 years (IRS record-keeping requirements)
- Payment Data: Stripe retains payment data per their retention policy; we do not store full card numbers
When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.
8. Your Privacy Rights
8.1 Access and Portability
- Request access to the personal information we hold about you
- Receive a copy of your personal information in a structured, commonly used format
8.2 Correction and Update
- Request correction of inaccurate or incomplete information
- Update your contact details and preferences
8.3 Deletion
- Request deletion of your personal information (subject to legal retention requirements)
- Withdraw consent for processing activities that require consent
8.4 Opt-Out Rights
- Unsubscribe from marketing emails (click "unsubscribe" in any email)
- Opt out of analytics tracking (see Section 4.4)
- Request restriction of processing activities
8.5 California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information held by businesses
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information (we do not sell personal information)
- Right to limit the use and disclosure of sensitive personal information
- Right to opt out of automated decision-making technology
- Right to non-discrimination for exercising your privacy rights
8.6 Multi-State Privacy Rights
If you reside in any of the following states, you may have additional privacy rights under your state's consumer privacy law: Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Utah (UCPA), Iowa, Indiana, Tennessee, and other states with comprehensive privacy legislation. These rights generally include the right to access, correct, delete, and opt out of certain processing of your personal data. Contact us at privacy@waypointop.com to exercise these rights.
8.7 European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Legal Basis for Processing (GDPR):
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent (e.g., subscribing to newsletters)
- Contract Performance: To provide consulting services you've engaged us for
- Legitimate Interests: For business operations, marketing, and improving our services
- Legal Obligations: To comply with applicable laws and regulations
8.8 Exercising Your Rights
To exercise any of these rights, please contact us at:
We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.
9. Do Not Track and Global Privacy Control
9.1 Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. There is no universally accepted standard for how websites should respond to DNT signals.
9.2 Global Privacy Control (GPC)
We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of your personal information, as required by applicable law (including the CCPA/CPRA). You can enable GPC in supported browsers or through browser extensions. Learn more at globalprivacycontrol.org.
10. Children's Privacy
Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.
11. Third-Party Websites
Our Site may contain links to third-party websites, including:
- LinkedIn
- Google My Business
- Industry association websites
- Educational resources and tools
We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.
12. International Data Transfers
Waypoint Operating Partners is based in the United States. If you are accessing our Site from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
By using our Site or services, you consent to the transfer of your information to the United States. We take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated Privacy Policy on this page with a new "Last Updated" date
- Sending an email notification to our mailing list (for significant changes)
- Displaying a prominent notice on our Site
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Waypoint Operating Partners
We are committed to resolving any privacy concerns in a timely and transparent manner.
15. Consent
By using WaypointOP.com or engaging with our services, you acknowledge that you have read, understood, and agree to this Privacy Policy and our collection, use, and disclosure of your personal information as described herein.