PRIVACY POLICY

This Privacy Policy explains how Nick Richards Consulting, LLC (“Nick Richards Consulting,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you visit our website, interact with us, and use our services.

It also explains your privacy rights and how applicable law protects you.

Please read this Privacy Policy together with our Terms of Service and any other privacy notices we may provide.

This Privacy Policy was last updated on September 28, 2026.

1. Who We Are

1.1 Data Controller. Nick Richards Consulting, LLC, an Illinois limited liability company.

1.2 Affiliates. Nick Richards Consulting’s affiliates may process personal data on Nick Richards Consulting’s behalf in connection with the operation of the Services, including any entities that own Nick Richards Consulting’s intellectual property and operate Nick Richards Consulting’s infrastructure. Such processing is governed the data protection obligations equivalent to those described in this Privacy Policy.

1.3 Scope. This Privacy Policy applies to www.nickrichards.io, xchange.nickrichards.io, admin.nickrichardsconsulting.com, and any subdomains, related URLs, mobile applications, used by the NickRichards.io Platform (collectively, the “Site”). See Domains Network. The Services are not intended for children under 13, and we do not knowingly collect personal data from children under 13.

2. Personal Data We Collect

We collect information from you when you:

Register on our site
Place an order
Subscribe to our newsletter
Respond to a survey
Fill out a form

When ordering or registering on our site, you may be asked to enter your name, email address, mailing address, phone number, or other relevant details. However, you can also visit our site anonymously.

We may use the information we collect for the following purposes:

Processing Transactions – Your information will only be used to fulfill orders, deliver services, and provide customer support. We do not sell, trade, or transfer your personal information without your consent.
Sending Periodic Emails – The email address provided for order processing will be used solely to send you order-related updates, promotional materials (if opted-in), and relevant business communications.
Marketing Communications – If you subscribe to our newsletter, we may send occasional marketing messages regarding products, services, or company updates. You can unsubscribe at any time.
Personalization & Analytics – To improve user experience, we may use collected data to tailor content, measure engagement, and enhance website functionality.

2.1 Categories. We collect the following categories of personal data:

Identity Data: title, first name, last name, username or similar identifier, and an encrypted version of your login credentials.
Contact Data: billing address, delivery address, phone number, and email address.
Financial Data: encrypted token data linking your account to your payment method, which is stored by our third-party payment processors (Braintree and Stripe).
Transaction Data: details of payments to and from you and other details of products and services you have purchased from us.
Profile Data: username and password, purchases or orders made by you, preferences, feedback, and survey responses.
Technical Data: IP address, login data, browser type and version, time zone, location, browser plug-ins, operating system, and other device technology.
Usage Data: information about how you use our website, products, and services.
Tracking Data: information collected via cookies, web beacons, pixels, mobile identifiers, and similar technologies.
Marketing and Communications Data: preferences in receiving marketing and communication preferences.

2.2 Special Categories. We do not collect Special Categories of Personal Data (race, ethnicity, religious beliefs, sex life, sexual orientation, political opinions, trade union membership, health data, or genetic and biometric data) about you. If you choose to upload such data into your portal or otherwise submit it through the Services, we will treat it as ordinary personal data and we will not be able to identify or specially handle it. Protected Health Information is governed by Section 5.

2.3 Aggregated Data. We may aggregate or anonymize personal data so that it can no longer be associated with you. Aggregated data is not personal data. If we combine aggregated data with personal data such that you can be identified, we treat the combined data as personal data.

3. How We Collect Personal Data

3.1 Direct Interactions. You provide personal data when you sign up for a free trial, subscribe to paid services, submit a contact or support form, sign up for a webinar, contact customer service, leave reviews, or otherwise correspond with us.

3.2 Automated Technologies. As you interact with the Services, we automatically collect Technical Data and Usage Data via cookies, server logs, and similar technologies.

3.3 Third Parties. We may receive personal data from analytics providers, advertising networks, payment and fraud prevention providers, data partners, and other third parties permitted by law to share your data with us.

4. How We Use Personal Data

We use personal data to:

Provide, operate, secure, and improve the Services;
Process payments and manage subscriptions;
Authenticate users and protect against fraud and abuse;
Communicate with you about your account, support requests, and Service updates;
Send marketing communications where permitted by law and where you have not opted out;
Comply with legal obligations and enforce our agreements;
Conduct research, analytics, and product development.

We do not sell your personal data, and we do not share your personal data with third parties for their own marketing purposes without your consent.

5. Protected Health Information (HIPAA)

5.1 Capability. Nick Richards Consulting is HIPAA-capable but not HIPAA-by-default. The Nick Richards Consulting platform may be used to store, transmit, and process Protected Health Information (“PHI”) as defined under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) only by customers who have first executed a Business Associate Agreement (“BAA”) with Nick Richards Consulting.

5.2 Required BAA. If you are a Covered Entity or Business Associate as defined under HIPAA and intend to use the Services in connection with PHI, you must request and execute a BAA with Nick Richards Consulting before doing so. PHI handled under an executed BAA is governed by the terms of that BAA, which controls in the event of any conflict with this Privacy Policy with respect to PHI.

5.3 Without a BAA. For users who have not executed a BAA with Nick Richards Consulting, you agree not to store, transmit, or process PHI on or through the Services. Nick Richards Consulting has no obligation to monitor user content for PHI, and any submission of PHI without an executed BAA is at your sole risk and liability and is governed by this Privacy Policy and the Terms of Service as ordinary personal data.

6. Data Security

We implement a variety of security measures to maintain the safety of your personal information when you place an order or access your personal data. These measures include encryption, firewalls, secure servers, and access controls to prevent unauthorized access, disclosure, or alteration of your data.

Do we disclose any information to outside parties?
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our Site, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our Site policies, or protect ours or others rights, property, or safety.

Third party links
Occasionally, at our discretion, we may include or offer third party products or services on our website or one of our blogs. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

6.1 Safeguards. We implement administrative, physical, and technical safeguards designed to protect personal data from unauthorized access, disclosure, alteration, and destruction. These safeguards include encryption of data in transit and at rest using industry-standard methods, access controls limiting access to personal data on a need-to-know basis, audit logging, multi-factor authentication for administrative access, and regular review of security controls.

6.2 No Absolute Security. No method of electronic transmission or storage is completely secure. While we use commercially reasonable efforts to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6.3 Security Incidents. In the event of a security incident affecting your personal data, we will notify you without undue delay in accordance with applicable law.

7. Data Retention

7.1 Active Accounts. We retain personal data for as long as your account is active and as needed to provide the Services.

7.2 Free Trials. Data from inactive free trial accounts is deleted approximately 3 months after inactivity begins.

7.3 Paid Accounts. Data from cancelled or expired paid accounts is retained for approximately 12 months following cancellation or expiration, after which it is deleted unless the account is reactivated.

7.4 Legal Obligations. We may retain personal data longer where required by law or for the establishment, exercise, or defense of legal claims.

7.5 Backups. We may retain residual copies in routine system backups for a limited period after deletion.

8. Data Storage and Subprocessors

8.1 Storage. Nick Richards Consulting uses third-party vendors and hosting partners to provide the necessary infrastructure to operate the Services. Although Nick Richards Consulting owns the code, databases, and all rights to the Nick Richards Consulting applications, you retain all rights to your data.

8.2 Subprocessors. We engage the following third-party subprocessors. We enter into data processing agreements with each subprocessor that extend appropriate data protection safeguards.

Amazon Web Services — cloud infrastructure
Braintree — payment processing
Cloudflare — security and performance
Stripe — payment processing
GoDaddy — domains, site hosting, professional email infrastructure
Google Analytics — web analytics
Google Workspace — phone and professional email infrastructure
Google Console — cloud infrastructure
PayPal — payment processing
Postmark — email delivery
HelpScout — help desk software
FirstPromoter — referral tracking
Wix — website infrastructure
Microsoft — phone and professional email infrastructure

This list is current as of the effective date and may be updated. Material changes will be reflected in updates to this Privacy Policy.

9. Your Privacy Rights

9.1 California (CCPA/CPRA). If you are a California resident, you have the right to know what personal data we collect, the right to delete personal data, the right to correct inaccurate personal data, the right to opt out of any sale or sharing of personal data, the right to limit use of sensitive personal information, and the right to non-discrimination for exercising these rights. We do not sell personal data.

9.2 Other U.S. States. Residents of other U.S. states with applicable privacy laws have similar rights, which we honor in accordance with applicable law.

9.3 How to Exercise. Many of these rights can be exercised by signing in and updating your account directly. To exercise other rights, contact us at privacy@nickrichards.io. We will need to verify your identity before fulfilling your request.

10. Cookies and Tracking

A cookie is a small data file sent from a website’s server and stored on your device. Cookies are required to use the Nick Richards Consulting services. We use cookies to record current session information. We also use similar technologies including pixels, web beacons, and local storage. For more information, please see our Cookie Policy.

11. Law Enforcement and Legal Disclosures

While we may be required to disclose your personal information in response to a lawful request by public authorities (including to meet national security or law enforcement requirements), Nick Richards Consulting will not otherwise disclose data to law enforcement unless a court order requires it. We reject requests from local and federal law enforcement that seek data without a court order. Unless legally prevented from doing so, we will inform you when such requests are made.

12. Business Transfers

If Nick Richards Consulting is acquired by or merged with another company, or if we sell substantially all of our assets, we may transfer your personal data to the acquirer. We will notify you of any such transfer and any changes to applicable privacy practices.

13. Notice of Non-Affiliation

On nickrichards.io, we make comparative references to other software products only for the purpose of market comparison. We are not affiliated with, associated with, authorized, endorsed by, or in any way officially connected with these products or their owners. Names, marks, emblems, and images of third-party products are registered trademarks of their respective owners.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by sending notice to the primary email address on your account or by posting a prominent notice on the Site. Your continued use of the Services after the effective date of any change constitutes acceptance.

17. Contact

Questions about this Privacy Policy should be directed to:

Nick Richards Consulting, LLC
738 E Dundee Rd #199

Palatine, IL 60074
privacy@nickrichards.io