Legal
Privacy Policy
How Invest Strategy Way collects, uses, stores and shares personal information on investstrategyway.com — written to be read, not to be skipped.
Last updated
1 September 2026
Version 4.2
This policy explains what we collect when you use investstrategyway.com, contact us, subscribe to The Strategy Memo, or become a client. It applies to the website and to our email communications. Loan and insurance products placed through third-party lenders and carriers are governed by those parties' own privacy notices, which we will always point you to before you apply.
The short version
- We collect the minimum needed to answer you and, if you become a client, to advise you.
- We never sell, rent, trade or syndicate your personal information for marketing.
- We do not embed third-party advertising trackers or social pixels on this website.
- Documents are encrypted in transit and at rest, on servers located in the United States.
- You can request access, correction or deletion at any time by emailing contact@investstrategyway.com.
- Newsletter consent is opt-in and every email contains a one-click unsubscribe link.
1. Information we collect
1.1 Information you give us
- Contact details: name, email address, phone number, mailing address.
- Enquiry content: the message you submit, the service you select, and any figures you choose to describe (income range, balances, target amount).
- Marketing preferences: topics selected, email frequency, subscription and suppression status.
- Client file data (when you engage us): identification, household income and assets, credit reports, tax returns, benefit and policy documents, and correspondence.
1.2 Information collected automatically
- Server logs: IP address, browser type, referring page, date and time of visit, pages viewed.
- Aggregate, non-identifying statistics from our own privacy-respecting analytics tool.
- Email engagement: opens and clicks at the aggregate level, and individual engagement for people we already correspond with, so we know when a secure document needs a chase.
1.3 What we ask you NOT to send
Do not send Social Security numbers, full account or card numbers, passwords or driver's licence images by ordinary email or through our website forms. When those items are genuinely required, we use our encrypted client portal, and we tell you in writing why they are needed.
2. Why we use it
- To reply to enquiries and schedule consultations — our legitimate interest in operating the service.
- To prepare, price and document financial strategy work you have engaged us for.
- To send The Strategy Memo and any guides you requested, based on your consent.
- To meet legal, regulatory, anti-fraud, record-keeping and dispute-resolution obligations.
- To improve our website's reliability and content, using aggregate data.
We do not use your information for automated decision-making that produces legal effects, and we do not build marketing profiles from your financial documents.
3. Sharing and disclosure
We share information only in these circumstances:
- Service providers bound by contract: secure hosting and email delivery, document storage, telephony, and our practice-management platform. They may process data only on our written instructions and may not use it for their own marketing.
- Lenders, brokers and insurance carriers: only with your written or recorded instruction, and only the information needed to quote or underwrite a specific product.
- Professional parties you introduce: for example your accountant or attorney, when you ask us to coordinate with them.
- Legal requirement: courts, regulators, law enforcement or tax authorities where we are compelled to disclose. We notify you first unless legally prohibited from doing so.
- Business transfer: in a merger or acquisition, client records are an asset, and any acquirer inherits the obligations in this policy.
No sale of data. We do not sell or share personal information for cross-context behavioural advertising, and we do not receive compensation for disclosing it.
4. How long we keep it
- Enquiry records that never become clients: 24 months from last contact, then deleted.
- Newsletter records: until you unsubscribe, then moved to a suppression list for up to 3 years so the unsubscribe is honoured.
- Client engagement files: 7 years after the end of the engagement, or longer where state insurance or lending regulations require it.
- Tax-related working papers: 7 years from filing.
- Server logs: 90 days.
5. Cookies and local storage
This website uses a small number of first-party technical items: a session preference (mobile menu and theme state), form-draft convenience storage in your browser, and no advertising or cross-site tracking cookies. Form submissions you send from this site are stored locally in your browser so that the subscribe and unsubscribe pages can recognise your address on your own device; clearing your browser storage removes it. Because we do not use advertising cookies, we do not require a consent wall — but if you enable "block all cookies" in your browser, forms still work and no functionality is withheld.
6. How we protect it
TLS 1.2+ for all transmission, AES-256 encryption at rest, role-based least-privilege access, mandatory multi-factor authentication for every staff account, encrypted laptops, annual third-party penetration testing, staff privacy training, and vendor due diligence reviewed each year. Email remains an imperfect medium; we will never ask you to send sensitive identifiers by email, and we will tell you when a channel is unsuitable.
7. Your rights
Depending on where you live, you may request: access to the personal information we hold; correction of inaccuracies; deletion; a portable copy in a machine-readable format; restriction of processing; notice of the categories disclosed to third parties in the preceding 12 months; and, for California residents under the CCPA/CPRA, the right to opt out of "sale" or "sharing" (we do neither), to limit use of sensitive personal information, and not to be discriminated against for exercising any right. We verify requests with two data points we already hold and respond within 45 days, extendable once by 45 days with notice. There is no charge for a reasonable request.
8. Children
Our services are not directed to anyone under 18 and we do not knowingly collect their data. Education funding planning involves minors' interests, but the accounts and personal data we handle belong to the adult account holders.
9. Third-party links
Pages on this site link to lender portals, carrier tools, maps and external publications. Those sites
operate under their own policies, which we do not control and cannot warrant. We place
rel="noopener" on outbound links and keep external embeds to the minimum required for a
feature to work.
10. Changes to this policy
We review this policy at least annually. Material changes to how we use personal information are announced by email to existing clients and subscribers at least 30 days before they take effect, and the revision date at the top of this page always reflects the current version. Prior versions are available on request.
11. Complaints
Raise a privacy concern with our Compliance Officer at contact@investstrategyway.com (subject line "Privacy"). We acknowledge within two business days and respond substantively within fifteen. If you are unsatisfied, you may contact the consumer protection authority or state Attorney General in your jurisdiction — in Tennessee, the Division of Consumer Affairs — and we will co-operate with any inquiry.