Privacy policy

Who we are

Surfside is a brand used by two separate companies: Surfside Capital Advisors LLC, for finance, and Surfside Human Capital Solutions LLC, for people and HR. This website is operated by Surfside Capital Advisors LLC.

Each company is responsible for the information it receives:

• Surfside Capital Advisors LLC receives what you send from the Financial pages, including the Financial booking page, and any inquiry routed to Financial.

• Surfside Human Capital Solutions LLC receives what you send from the Human Capital pages, including the Human Capital booking page, and any inquiry routed to Human Capital.

In this policy, “we” means the company that receives your information.

On a contact form, the moment you choose decides which company receives your message, and the form names that company next to the button.

Surfside Human Capital Solutions LLC uses email, a calendar, and a booking sheet that are hosted in the Google Workspace of Surfside Capital Advisors LLC. Surfside Capital Advisors LLC provides that hosting to it.

An inquiry passes between the two companies only when you ask us to or agree to it. If you write to the wrong company, we tell you and ask before we send your message on.

What we collect

We collect what you give us, plus a small amount of technical information your browser sends.

• Contact form: your name, email address, the moment you choose, your message, and the language you prefer.

• Booking: your full name, company, job title, work email address, phone number, an optional business location (city and state), the moment you choose, an optional note, the language for the meeting, and the time and time zone you pick.

• Technical data: when you visit, our hosting provider records your IP address, your browser, and the pages you request in its standard server logs.

• Your cookie choice: saved in a cookie in your browser. We don’t keep a copy.

Please keep confidential details out of forms and notes, and don’t send health information, government ID numbers, or bank account details. We can cover those topics when we talk.

What happens when you book a consultation

A booking sets off these steps:

• Our server checks that the domain of your email address has a mail server. It looks up the domain only.

• Our server uses your IP address, in memory and for a short time, to limit how many requests one address can make. It does not save it.

• An event is created on the host’s Google Calendar, with you as an attendee. It holds the details you gave. Financial consultations also invite David Prieto.

• The host’s Gmail sends you a confirmation with a calendar invitation (an .ics file), the Zoom link, and a link to change or cancel. The link is signed, and it stops working when the meeting starts.

• A row is added to that company’s own Google Sheet, which it uses to keep track of consultation requests. The row holds the date received, the area you chose (Financial or Human Capital), name, email, phone number, company, job title, business location, moment, how soon you need help, note, language, meeting time, host, status (booked, moved, or cancelled), the page and language you came from, and how you reached the site: the kind of source (for example Google, LinkedIn, or an email), the website that sent you (its name only), the first page you saw, the page you saw just before booking, the campaign tags in the link, if any, and whether you came from an ad. We use it to learn which channels and pages bring consultations.

• The video call runs on Zoom, using the host’s personal Zoom link. Zoom receives information only when you join the call, and Zoom’s own privacy policy applies. We do not record consultations unless we tell you first and you agree.

When you change or cancel a booking, we update or remove the calendar event, and the row in the sheet shows the new status.

How we use information

We use what you send us to:

• answer your message and set up the conversation you asked for;

• run the consultation: the calendar invitation, the Zoom link, and any change or cancellation;

• keep a record of requests, so we know who we have spoken with and what they asked;

• protect the site from spam and abuse; and

• meet legal obligations.

We may email you about the consultation you asked for. We will not add you to a marketing list without asking.

The optional business location helps us understand where requests come from and route and prepare your consultation.

We use your phone number only to reach you about your consultation, for example to confirm or reschedule it. We do not use it for promotional calls or texts, and we do not call or text for promotion with an automatic dialer or a prerecorded message without your separate written consent.

What we don’t do

• We do not sell your personal information for money. Some state privacy laws define “sale” more broadly, and some treat advertising tools like the ones described below as a “sale”, “sharing”, or “targeted advertising”. That is why we ask first, wherever you live, and these tools stay off until you say yes.

• Without your permission, we don’t share it for targeted advertising. With your permission, the tools described under “Advertising and measurement” do.

• We don’t make automated decisions about you.

• This site has no accounts, newsletter, payments, or job applications.

Who receives your information

We use a few providers to run the site and the bookings:

• Hosting: Vercel hosts this website and keeps standard server logs.

• Visit counts: Vercel Web Analytics counts page views for every visitor, without cookies. It records the page, the site that sent you, your approximate location (country, region, and city), and your device type, operating system, and browser. It tells visits apart with a code made from your request that Vercel discards after 24 hours, and we see only totals.

• Email, calendar, and spreadsheets: Google Workspace (Gmail, Google Calendar, and Google Sheets).

• Video meetings: Zoom, for the call itself.

• Bot protection: Cloudflare Turnstile checks that a person, not an automated program, is sending the booking form. To do that, Cloudflare receives technical information from your browser and device, such as your IP address, and Cloudflare’s own privacy policy applies.

• A small database: Upstash, through Vercel. It holds the hosts’ connection to Google and, to stop abuse of the booking form, a one-way code (a keyed hash) made from each booking’s email address and email domain, never the address itself. The code is deleted automatically: an hour after the meeting ends, and the daily counts after two days.

• Search: Google Search Console shows us how the site appears in Google Search. It is verified through our domain settings and puts nothing on your device. Planned; not active yet.

• Professional advisers and business changes: we may share information with our lawyers, accountants, and insurers under a duty of confidentiality, and with a buyer or successor if a Surfside company is sold or reorganized.

• AI assistants: we may use AI assistants, such as those from Anthropic and OpenAI, to help draft replies and summarize notes about inquiries and consultations. We do not put identification numbers, financial account numbers, or health information into them.

We may also disclose information if the law requires it.

Advertising and measurement

With your permission, we use tools from other companies to measure our ads, show them to people who visited this site, and see how the site is used:

• Meta Pixel, from Meta Platforms, Inc. Lets Meta measure our ads on Facebook and Instagram and show them to people who visited this site. Meta privacy policy Planned; not active yet.

• LinkedIn Insight Tag, from LinkedIn Corporation (LinkedIn Ireland Unlimited Company in the EU, the EEA, and Switzerland). Lets LinkedIn measure our ads and show them to people who visited this site. LinkedIn privacy policy Planned; not active yet.

• Google Analytics 4, from Google LLC. Shows us how the site is used: the pages visited and the devices and browsers. Google privacy policy Not in use.

No advertising tool, and no analytics tool that uses cookies, loads before you allow it in the cookie banner, wherever you are, including in the United States. If you reject them or don’t answer, none loads. None loads on the page where you manage a booking, either.

When you allow them, they collect the pages you visit, your device, your browser, your IP address, and cookie identifiers. When a booking is confirmed, they also learn whether it was with Financial or Human Capital and which language you used the site in.

The site is built so that it does not send these tools your name, email address, company, or anything you type into a form, and we do not use their advanced matching features. Before a tool loads, we remove every parameter from the address we give it except campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content, utm_id, fbclid, and li_fat_id). fbclid and li_fat_id are identifiers Meta and LinkedIn add to ad links, and they let those companies connect your visit to the ad you clicked. We also drop any parameter whose value looks like an email address or a token. The tools you allowed can see the parameters that remain.

Meta and LinkedIn may link what they collect to your account on their platform, if you have one and are signed in. They use it to measure ads and to show ads to people who visited this site, under their own privacy policies.

Some state privacy laws count this as “sharing” personal information or as “targeted advertising”. That is why we ask first, wherever you live: these tools stay off until you say yes.

You can change your mind at any time with “Your privacy choices” at the bottom of any page. If your browser sends a Global Privacy Control signal, marketing stays off. The banner says so. Our cookie policy lists every cookie.

Each company uses its own advertising and measurement accounts. The Surfside Capital Advisors pages use the accounts of Surfside Capital Advisors LLC, the Surfside Human Capital Solutions pages use the accounts of Surfside Human Capital Solutions LLC, and the shared pages (home, About, Contact, Insights, and the legal pages) use the accounts of Surfside Capital Advisors LLC, which operates this website. Each company accepts the Meta and LinkedIn business terms for its own accounts and is responsible for how its tools are set up.

Cookies

This site sets one cookie of its own, only after you choose, to remember your choice. If you allow the advertising and analytics tools described above, they may set more: some on this site’s address (such as _fbp, _fbc, li_fat_id, and _ga) and some on their own addresses. Read our cookie policy.

Where your information is processed

Both companies are in the United States (Boston, Massachusetts), and we process your information here. If you use the site from another country, your information travels to the United States. Meta and LinkedIn may process the information their tools collect in other countries, under their own policies: Meta in the United States, Ireland, Denmark, and Sweden, among others, and LinkedIn inside and outside the United States. Our services and our advertising are directed to businesses in the United States.

How long we keep it

We keep inquiries and booking details for as long as we need them to answer you and manage our business relationship, and for 24 months after our last contact if we do not start working together, unless the law requires us to keep them longer. Then we delete them. You can ask us to delete them sooner. If you become a client, we keep your engagement records as the engagement letter and the law require. Our hosting provider keeps its standard server logs under its own schedule.

Cancelling a booking removes the calendar event. The row in the sheet stays and shows the status cancelled. If you ask us to delete your information, we delete the row in the sheet and the calendar event, except where the law requires us to keep a record.

Your choices

You can ask us what information we have about you, ask us to correct it, or ask us to delete it. To ask, use the contact details below. We answer within 45 days. If we need more time, we tell you why. We may need to confirm that the request comes from you.

You can change or cancel a booking before it starts, with the link in your confirmation email.

You can change your cookie and advertising choices at any time with “Your privacy choices” at the bottom of any page.

Depending on where you live, the law may give you more rights than these. Tell us where you live when you write, and we will follow the rights that apply to you.

Security

We take reasonable steps to protect your information. Change and cancel links are signed, and they stop working when the meeting starts. No website or service is completely secure, so we can’t promise absolute security.

Children

This site is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, write to us and we will delete it.

Other sites and our social media pages

Links to other sites, such as LinkedIn, and the Zoom call are covered by those companies’ own policies.

We run pages on Facebook, Instagram, and LinkedIn. When you visit or interact with one, that platform’s own privacy policy applies. The platform may give us statistics about the people who visit or follow the page, and it handles its own information about you.

Changes to this policy

When we change this policy, we update the date at the top. If a change is material, we note it on this page.

Contact us

For privacy questions or requests, write to info@surfcapadvisors.com with “Privacy request” in the subject line, and tell us which Surfside company you dealt with. We answer within 45 days. If we need more time, we tell you why. You can also write to us at 6 Liberty Square, Suite 2511, Boston, MA 02109, or use the contact form on our home page.