Privacy Policy

Madrigal Partners, LLC (“Madrigal Partners,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you visit our website, contact us, or otherwise engage with us as a prospective or current client. By using our website or services, you agree to the practices described in this policy.

This policy applies to information we collect on our website and in the course of our business relationships. It does not apply to client data that we process on behalf of our clients in a service-provider (processor) capacity; that information is governed by the applicable client engagement agreement and data processing agreement.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide to us, including:

• Contact information — first name, last name, email address, phone number, company name, country, job title, tax identification number, and number of employees, when you submit our contact form, request a consultation, or correspond with us.
• Scheduling information — meeting details, availability, and any calendar information you provide when you book a call through our scheduling tools.
• Communications — the contents of messages, attachments, and any other information you choose to share with us.

1.2 Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain technical information, including:

• IP address and approximate location derived from it
• Browser type, version, and language
• Device type, identifiers (including universally unique identifiers, or UUIDs), and operating system
• Pages viewed, links clicked, scroll depth, and the date and time of your visit
• Referring website or source
• System logs and interaction records used to operate, secure, and maintain the site

This information is collected through standard server logs, cookies, and similar technologies. See Section 6 for more on cookies.

2. How We Use Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide the information or services you request
• To schedule and conduct meetings and consultations
• To send you communications about our services, including marketing emails (you may opt out at any time)
• To operate, maintain, secure, and improve our website and underlying systems
• To detect, prevent, and respond to fraud, abuse, security incidents, and unlawful activity
• To comply with legal obligations, enforce our agreements, and protect our rights and the rights of others

3. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on one or more of the following legal bases under the General Data Protection Regulation (GDPR) and equivalent laws:

• Consent — where you have given us specific consent for a particular purpose (you may withdraw consent at any time)
• Contract — where processing is necessary to perform a contract with you or to take steps at your request before entering into one
• Legal obligation — where processing is required to comply with a legal obligation we are subject to
• Legitimate interests — where processing is necessary for our legitimate interests (or those of a third party), provided those interests are not overridden by your fundamental rights and freedoms — for example, securing our website, communicating with prospective clients, and improving our services

Madrigal Partners is based in the United States and does not currently target our services to individuals in the EEA, UK, or Switzerland. Where these laws apply, we will identify the legal basis for any specific processing on request.

4. How We Share Information

We do not sell your personal information. We share information only as described below:

• Service providers. We use trusted third-party providers to operate our business — including web hosting, email delivery, scheduling, form spam protection, and analytics. These providers process information only on our instructions and under contractual obligations to protect it.
• Legal and safety. We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to detect or prevent fraud or security incidents.
• Business transfers. If Madrigal Partners is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections and continued application of this policy or a successor policy.
• With your consent. We may share information for any other purpose with your consent.

Key third-party service providers we currently rely on include:

• Hostinger — website and infrastructure hosting (United States)
• Google reCAPTCHA — protection of our forms from automated abuse (United States); see Google’s Privacy Policy
• Calendly and Google Calendar — meeting scheduling (United States)

Each of these providers maintains its own privacy policy governing its handling of information. We review our subprocessors regularly and update this list as our service providers change.

5. No Sale or Sharing for Targeted Advertising

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or targeted advertising as those terms are defined under applicable US state privacy laws. We do not knowingly engage in profiling that produces legal or similarly significant effects.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the site, remember your preferences, analyze traffic, and personalize content. Cookies are small text files stored on your device.

We use the following categories of cookies:

• Strictly necessary — required for the site to function (for example, security, caching, and form protection)
• Functional — remember your preferences and settings
• Analytics — help us understand how visitors use our site so we can improve it

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Where required by law, we obtain your consent before placing non-essential cookies.

7. Global Privacy Control

Some browsers and browser extensions transmit a Global Privacy Control (GPC) signal indicating that you do not want personal information to be sold or shared. We honor valid GPC signals received from your browser as an opt-out request for sale and sharing for targeted advertising, in a frictionless manner consistent with applicable law.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit using TLS 1.2 or higher, encryption at rest for sensitive information, multi-factor authentication for systems handling sensitive data, role-based access controls, and regular security reviews. Despite these measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, plus any additional period required by law, regulation, or contractual obligation. In general:

• Marketing and business development records are retained for three years from your last activity, subject to opt-out requests
• Records related to a specific client engagement are retained for the duration of the engagement plus seven years
• Security and audit logs are retained for at least twelve months, and longer for incident-related logs

When we no longer need information, we securely delete or anonymize it in accordance with industry-standard practices.

10. Your Privacy Rights

10.1 Rights Available to All Users

Subject to applicable law and verification of your identity, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to certain exceptions
• Portability — request a copy of your information in a structured, commonly used, machine-readable format
• Opt out of marketing — unsubscribe from marketing communications at any time using the link in our emails, or by contacting us; we honor opt-out requests within ten business days
• Non-discrimination — we will not discriminate against you for exercising your privacy rights

10.2 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you also have the right to:

• Withdraw consent at any time, where processing is based on consent
• Object to processing based on legitimate interests
• Request restriction of processing
• Lodge a complaint with your local data protection authority

We will respond to verifiable requests within one month of receipt, with the possibility of a two-month extension for complex requests, consistent with the GDPR.

10.3 California Residents (CCPA/CPRA)

California residents have the rights described in Section 10.1, plus the right to:

• Know what categories of personal information we have collected, the sources, the purposes, and the categories of third parties with whom it is shared
• Opt out of the sale or sharing of personal information (we do not sell or share)
• Limit the use and disclosure of sensitive personal information
• Designate an authorized agent to submit requests on your behalf

10.4 Other US State Residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Montana have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale of personal information, and certain profiling activities. Residents of Minnesota and Maryland may also request a list of the third parties to whom we have disclosed their personal information. Minnesota residents have additional rights to question profiling results, understand the reasons for decisions, review the data used, and correct inaccurate data used in profiling. Specific rights vary by state; we apply each state’s rights to residents of that state as required by law.

10.5 How to Submit a Request

To exercise any of these rights, contact us using the information in Section 14. We may need to verify your identity before completing your request and may ask for additional information to do so. We will respond without undue delay and within the timeframes required by applicable law. We do not charge a fee unless a request is manifestly unfounded or excessive. If you are not satisfied with our response, you may have the right to appeal — contact us and we will explain the process for your jurisdiction.

11. Children’s Privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

12. International Visitors

Madrigal Partners operates from the United States, and any information we collect is stored and processed in the United States. If you access our website or contact us from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have data protection laws different from those in your country. Where required by applicable law, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses or equivalent safeguards) to govern cross-border transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise any of your privacy rights, contact us at:

Madrigal Partners, LLC
2163 S Shellee Dr
St. George, UT 84790
United States
Email: admin@madrigalpartners.com
Web: Contact form