Privacy Policy

1. Information We Collect

Information you provide directly

When you submit our contact form, we collect your name, email address, phone number, company name, and any message you include. This information is provided voluntarily by you and is used solely to respond to your inquiry.

Website chat assistant

Our website has a chat assistant. It is an AI system that answers questions using the content of this website; it is not a person. When you use it, we process the questions you type and the assistant's answers in order to reply to you. We don't save the conversation itself.

If you choose to leave a message for us through the chat, we collect the name, email address, company name and message you enter. We also collect your last few messages in the chat and the page you were on, so we have the context of your question.

To prevent abuse and keep the assistant's running costs in check, we also process limited technical data: a one-way coded (hashed) version of your IP address, a random session ID created when you open the chat, and the time of each message. A message you leave for us is stored with the same hashed IP address and session ID. We also keep daily totals of how many answers the assistant gives and how much text they use, which identify no one. We don't use this data to identify you. Please don't share confidential financial information in the chat.

Information collected automatically

We use Google Analytics 4 (GA4) to understand how visitors use our site. GA4 uses cookies (small text files stored on your device) to collect usage data including pages visited, session duration, device and browser type, approximate geographic location (city/country level), and referral source. This data is pseudonymous — it does not directly identify you by name, but it is linked to a unique identifier assigned to your browser.

If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, Google Analytics runs only after you accept it in our cookie banner. Until then, it sets no cookies on your device. If your device uses a European time zone, Google Analytics doesn't load at all, so it receives no data about your visit; on other time zones, Google may receive limited signals that carry no cookie or identifier, such as the fact that a page was viewed. That stays true if you decline. Everywhere else, Google Analytics runs by default, and you can turn it off at any time with "Cookie settings" (see Section 4). If you do, it stops setting cookies and we remove the ones it set. Google may still receive limited signals that carry no cookie or identifier, such as the fact that a page was viewed.

GA4 data is processed by Google LLC, a U.S.-based company. For more information on how Google handles this data, see Google's Privacy Policy.

We also use Cloudflare Web Analytics, which collects aggregate website performance metrics without using cookies and without collecting any personal data.

Information we do not collect

We do not collect payment information, social media account details, or login credentials. We do not use advertising pixels, retargeting tools, or email marketing trackers on this site.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Contact form submissions — to respond to your inquiry about business acquisitions and to follow up if appropriate.
• Website chat assistant — to answer your questions about the content of this website and, if you ask us to, to pass your message to Three Delta Capital so we can reply.
• Abuse prevention — to limit how often the chat assistant can be used from one connection or session and to stop misuse.
• Analytics data — to understand how visitors use our site so we can improve its content and performance. In the EU/EEA, the UK and Switzerland, we collect it only if you accept analytics cookies. Elsewhere, it is collected by default, and you can turn it off with "Cookie settings".

We do not use your information for advertising, profiling, or automated decision-making. The chat assistant answers questions; it does not make decisions about you.

3. Legal Basis for Processing (for EU/EEA, UK and Swiss visitors)

While Three Delta Capital does not specifically target or market to individuals in the European Union, the European Economic Area, the United Kingdom or Switzerland, our website is publicly accessible, and we may receive inquiries from residents there. For those visitors, we process personal data under the following lawful bases, in line with the EU General Data Protection Regulation (GDPR), the UK GDPR and Swiss data protection law:

• Consent — for Google Analytics and the cookies it sets. You give consent by choosing Accept in our cookie banner, and you can withdraw it at any time with "Cookie settings" (see Section 4). Withdrawing consent does not affect anything processed before you withdrew it.
• Legitimate interest — for Cloudflare Web Analytics, which measures site performance in aggregate without cookies. We have assessed that this interest does not override your privacy rights given the limited and anonymous nature of the data collected.
• Legitimate interest (chat assistant) — for answering the questions you ask the chat assistant and for protecting it from abuse. We have assessed that these interests do not override your privacy rights given the limited data involved.
• Contractual necessity / pre-contractual steps — for processing contact form submissions and messages you leave through the chat assistant, as you are initiating a potential business relationship with us.

4. Cookies

Where you have allowed it (see "Your cookie choice" below), Google Analytics 4 sets cookies on your browser to distinguish unique visitors and track sessions. These cookies include:

Cloudflare Web Analytics does not set any cookies.

The chat assistant does not set cookies. When you open it, it stores a random session ID in your browser's session storage so the conversation can continue while the tab is open. It is deleted when you close the tab, and nothing is stored until you open the chat.

Your cookie choice

If your device is set to a European time zone, a short banner asks whether you accept Google Analytics cookies. It has two buttons, Accept and Decline, which carry equal weight, and the site works the same whichever you choose. Until you choose, Google Analytics doesn't load: no analytics cookies are set and nothing is sent to Google Analytics.

Visitors in the EU/EEA, the UK or Switzerland whose device uses another time zone don't see the banner. For them, Google Analytics sets no cookies unless they turn it on with "Cookie settings", although Google may receive limited signals that carry no cookie or identifier.

Accepting allows analytics cookies only. We don't use advertising cookies.

We remember your choice in your browser's local storage, as an item named tdc_consent, for 12 months. After that, the choice lapses and, if your device uses a European time zone, the banner asks again. This item is not a cookie. It holds only your choice and is strictly necessary to remember it.

You can change your choice at any time with "Cookie settings" at the bottom of every page, or with this button: Cookie settings. If you decline after accepting, we remove the Google Analytics cookies already set.

Managing cookies

You can control cookies in several ways:

• Browser settings — most browsers allow you to block or delete cookies. Check your browser's help documentation for instructions.
• Google Analytics Opt-out — install the Google Analytics Opt-out Browser Add-on.
• Cookie settings — accept or decline Google Analytics at any time (see "Your cookie choice" above).

5. Third-Party Services

We use the following third-party service providers:

We do not sell, rent, or trade your personal information to third parties. We do not share your data with third parties for their own marketing purposes.

Google LLC processes GA4 data on servers located in the United States. For visitors in the EU/EEA, the UK and Switzerland who accept analytics cookies, this constitutes an international data transfer. Google participates in the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, and maintains standard contractual clauses to support these transfers. See Google's data transfer policies for more information.

Chat messages are processed by Lovable and by Google (through the Lovable AI gateway), which may process them outside your country, including in the United States. Please don't include confidential financial information in the chat.

6. Data Retention

• Contact form submissions — we retain the information you provide for up to 24 months after your last interaction with us, unless a longer retention period is required for legal or business purposes (e.g., an ongoing acquisition). You may request deletion at any time. Our form provider, Formspree, also keeps a copy of each submission for a limited period under its own retention settings.
• Messages left through the chat assistant — handled like contact form submissions: we retain them for up to 24 months after your last interaction with us, unless a longer retention period is required for legal or business purposes (e.g., an ongoing acquisition). A backup copy kept in our website's database is deleted after 24 months. You may request deletion at any time.
• Chat conversations — not stored. Only the last few messages you send along with a message for us are kept, as part of that message.
• Abuse-prevention data (hashed IP address, session ID and message times) — deleted automatically after 30 days.
• Chat usage totals (the number of answers per day and how much text they used, with nothing that identifies anyone) — deleted automatically after 90 days.
• Google Analytics data — GA4 data is retained for 14 months by default, after which it is automatically deleted from Google's servers.
• Cloudflare Web Analytics — collects only aggregate data with no personal data retained.
• Your cookie choice — stored only in your browser, for 12 months, then it lapses (see Section 4).

7. Your Privacy Rights

All visitors

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of any inaccurate information.
• Request deletion of your personal information.
• Opt out of analytics cookies using the methods described in Section 4.

To exercise any of these rights, email us at deals@threedelta.com.

Additional rights for California residents

The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide additional rights to California residents. While Three Delta Capital may not currently meet the CCPA's revenue or data-volume thresholds, we provide these disclosures as a best practice:

• Right to know — you may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to delete — you may request that we delete your personal information, subject to certain exceptions.
• Right to opt out of sale or sharing — we do not sell or share your personal information as defined by the CCPA/CPRA, so there is nothing to opt out of.
• Non-discrimination — we will not discriminate against you for exercising your privacy rights.

To make a request, email deals@threedelta.com. We will respond within 45 days as required by law.

Additional rights for EU/EEA, UK and Swiss residents

Under the GDPR and the equivalent UK and Swiss laws, you also have the right to:

• Data portability — receive your personal data in a structured, machine-readable format.
• Object to processing — object to processing based on our legitimate interests.
• Withdraw consent — withdraw your consent to analytics cookies at any time with "Cookie settings" at the bottom of any page or in Section 4. You can also clear your browser's cookies or use the Google Analytics opt-out tool.
• Lodge a complaint — file a complaint with your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, email deals@threedelta.com. We will respond within 30 days.

8. Data Security

We take reasonable measures to protect the personal information you provide to us. Our website is served over HTTPS (encrypted connections), and our service providers maintain their own security practices. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

This website is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe a child has submitted information through our site, please contact us at deals@threedelta.com.

10. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this privacy policy or want to exercise your privacy rights, contact us at:

Three Delta Capital LLC
Miami Beach, Florida
Email: deals@threedelta.com