Privacy Policy

1. Introduction

This Privacy Policy describes how CVA Equity, a brand of CVA Holdings LLC, collects, uses, discloses, retains, and protects personal information when you visit the website located at www.cvaquity.autos, engage with our digital platforms, or use any of our computer systems design and IT services. We are committed to respecting and protecting the privacy of every individual who interacts with our organization, whether you are a prospective client, an active customer, a business partner, or a casual visitor to our online properties.

CVA Holdings LLC operates as a provider of technology consulting services including but not limited to systems architecture design, cloud infrastructure planning, cybersecurity assessment and implementation, data engineering, and DevOps integration. In the course of delivering these professional services, we may interact with various categories of personal and business information. This policy explains our practices comprehensively so that you can make informed decisions about your interactions with us.

By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any portion of this policy, you should discontinue use of our website and refrain from providing personal information to us. Your continued engagement with our digital properties and services following any updates to this policy constitutes your acceptance of the revised terms.

We encourage you to read this document in its entirety. It covers important topics including what data we collect, how we use that data, who we share it with, what rights you have, and how we safeguard your information. We have designed this policy to be transparent, thorough, and accessible. Should any section require clarification, our contact details are provided at the end of this document for your convenience.

2. Information We Collect

We may collect several categories of information in connection with your use of our website and services. The types of information we gather depend on the nature and depth of your interaction with CVA Equity. We categorize the data we collect into distinct groups to provide clarity about what each category entails and how it is obtained.

We collect only the information that is reasonably necessary to provide our services, respond to inquiries, maintain operational functionality, and comply with legal obligations. We do not engage in indiscriminate data collection practices, and we strive to minimize the volume of personal data we process at every stage of our operations.

2.1 Information You Provide Directly

When you contact us via email, phone, our website contact mechanisms, or through any other direct communication channel, you may voluntarily provide certain personal information. This includes but is not limited to your full name, email address, telephone number, company name, job title, industry sector, project description, service requirements, timeline expectations, and any other details you choose to share in your correspondence with us.

If you engage CVA Equity for professional services, additional information may be collected as part of the client onboarding and project delivery process. This may include billing addresses, tax identification numbers (where applicable), contractual details, project specifications, system access credentials (provided by you for the purpose of service delivery), and documentation related to the scope of work. All such information is collected solely to facilitate the business relationship and to provide the services you have requested.

If you subscribe to any newsletters, whitepapers, or informational updates that we may offer, we collect your email address and any preferences you indicate regarding the frequency and type of communications you wish to receive. You may withdraw this consent at any time using the unsubscribe mechanism included in every communication or by contacting us directly.

2.2 Information Collected Automatically

When you visit our website, certain technical and usage information is collected automatically through standard server logs, analytics tools, and similar automated means. This information is gathered regardless of whether you actively submit any data through our contact forms or other interactive elements. The automatically collected data includes but is not limited to your Internet Protocol address, browser type and version, operating system and platform, referring and exit URLs, the pages you view on our site, the date and time of your visit, the duration of your session, your clickstream data, the geographic region associated with your IP address, device type and screen resolution, and other diagnostic and performance data.

We use this information to understand how visitors interact with our website, to identify patterns and trends in usage behavior, to diagnose technical problems, to optimize the performance and layout of our pages, and to maintain the security and integrity of our systems. Automatically collected data is generally processed in aggregated or anonymized form, and we do not use it to identify individual visitors unless we are required to do so for security or legal compliance purposes.

Our server infrastructure also logs access events for security monitoring purposes. These logs may include timestamps, requested resources, HTTP status codes, and user agent strings. Security logs are retained for a limited period and are reviewed periodically to detect and respond to unauthorized access attempts, denial-of-service attacks, and other malicious activity.

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources. This may occur when a business partner or referral source shares your contact details with us after you have expressed interest in our services, when we verify business information through publicly available databases or commercial registries, or when we engage third-party data enrichment services to supplement our understanding of prospective client needs and market trends. Any information received from third parties is handled in accordance with this Privacy Policy, and we take reasonable steps to verify that such third parties have obtained the information lawfully and have the right to share it with us.

We may also receive information from service providers who assist us with marketing analytics, lead generation, and customer relationship management. In all such cases, we require the third party to confirm that the data was collected with appropriate consent and in compliance with applicable privacy laws. If you believe that a third party has shared your information with us without your authorization, you may contact us using the details in Section 12, and we will investigate the matter promptly.

2.4 Information We Do Not Collect

CVA Equity does not knowingly collect sensitive personal data as defined under applicable privacy regulations, including but not limited to government-issued identification numbers, financial account credentials (except where required for billing and payment processing through secure third-party providers), biometric data, health or medical information, information about racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or data concerning an individuals sex life or sexual orientation. If we inadvertently receive such sensitive information, we will handle it with enhanced safeguards and will delete or anonymize it as soon as practicable, unless retention is required by law.

3. How We Use Collected Information

CVA Equity uses the information we collect for specific, legitimate business purposes. We do not process personal information in ways that are incompatible with the purposes described below without providing notice and, where required, obtaining your consent. The following list describes each purpose in detail:

• Service Delivery and Operations: To provide, operate, and maintain our computer systems design and IT consulting services. This includes executing project deliverables, managing client accounts, facilitating communication between our team and yours, and ensuring the quality and timeliness of the professional services we offer.
• Client Communication and Support: To respond to inquiries, service requests, and support needs submitted through our website, by email, by telephone, or through any other communication channel. This includes answering questions about our services, providing information about our capabilities, scheduling consultations, and addressing any concerns that may arise during the course of a project.
• Administrative Communications: To send confirmations, invoices, payment receipts, technical notices, project updates, security alerts, and other administrative messages necessary to manage the business relationship. These communications are transactional in nature and are not marketing messages, though they may contain references to relevant service offerings.
• Website Analytics and Improvement: To analyze website usage patterns using aggregated and anonymized data, to evaluate the effectiveness of our content and navigation structure, to identify opportunities for improving the user experience, and to make informed decisions about the design and functionality of our digital properties.
• Security and Fraud Prevention: To detect, prevent, investigate, and address technical issues, unauthorized access, fraud, security incidents, and other harmful or unlawful activity that may affect our systems, our clients, or the public. This includes monitoring server logs, analyzing traffic patterns, and deploying automated threat detection systems.
• Legal Compliance and Enforcement: To comply with applicable laws, regulations, legal processes, and governmental requests. This includes responding to subpoenas, court orders, regulatory inquiries, and other legally binding demands. We also use information to enforce our Terms of Service and other contractual agreements.
• Business Development and Marketing: To evaluate and improve our service offerings, to identify market trends and client needs, and to develop new capabilities that align with evolving technology landscapes. Where permitted by law and where you have provided consent where required, we may send informational content about our services that we believe may be relevant to your business interests.
• Aggregate and De-Identified Data: To create aggregate and de-identified datasets from the information we collect. Such data does not identify any individual and may be used for research, benchmarking, industry reporting, and other analytical purposes without restriction, as it falls outside the scope of personal data protections.

We do not use your personal information for any purpose other than those stated in this section without first providing notice and, where legally required, obtaining your explicit consent. If at any point you wish to understand how your specific information is being used, you may contact us using the details provided in Section 12.

4. Data Sharing and Disclosure

CVA Equity does not sell, trade, rent, or otherwise disclose personal information to third parties for their independent marketing or commercial purposes. We believe that the trust our clients place in us depends on our commitment to keeping their data private. We may share information only in the specific and limited circumstances described below.

4.1 Service Providers

We engage trusted third-party companies and individuals to facilitate various aspects of our operations. These service providers may include website hosting and infrastructure providers, cloud storage and computing platforms, email delivery services, customer relationship management software, analytics platforms, payment processors, and professional advisors such as attorneys and accountants. Each service provider is carefully evaluated prior to engagement, and we enter into written agreements that require them to maintain the confidentiality of personal information, to process it only in accordance with our documented instructions, and to implement appropriate technical and organizational security measures.

Service providers are contractually prohibited from using the personal information we share with them for any purpose other than providing the contracted services to CVA Holdings LLC. They are not permitted to sell, rent, or independently exploit the data in any manner. We conduct periodic reviews of our service provider relationships to ensure ongoing compliance with these requirements.

4.2 Legal Compliance

We may disclose personal information if we determine in good faith that such disclosure is required to comply with applicable law, regulation, legal process, or enforceable governmental request. This includes responding to subpoenas, court orders, search warrants, national security letters, or requests from law enforcement agencies or regulatory authorities with competent jurisdiction. Before making any such disclosure, we evaluate the validity and scope of the request and, unless prohibited by law, make reasonable efforts to notify the affected individual so that they may have the opportunity to contest the disclosure.

We may also disclose information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of CVA Holdings LLC, our employees, our clients, or members of the public. This includes exchanging information with other companies and organizations for the purposes of fraud protection, security incident response, and credit risk reduction.

4.3 Business Transfers

If CVA Holdings LLC is involved in a merger, acquisition, consolidation, reorganization, asset sale, financing, or other corporate transaction involving the transfer of all or substantially all of its business assets, personal information under our control may be among the assets transferred to the successor entity or acquiring party. In such an event, we will make reasonable efforts to ensure that the recipient of the data agrees to honor the terms of this Privacy Policy and to provide notice to affected individuals before their personal information is transferred or becomes subject to a materially different privacy policy.

In the unlikely event of a bankruptcy, insolvency, or receivership proceeding, personal information may also be transferred as part of the proceedings, subject to the oversight of the relevant court or tribunal. We will take reasonable steps to ensure that any transferee in such circumstances commits to handling personal data in a manner consistent with this policy and applicable law.

4.4 Consent-Based Sharing

We may share your information with third parties when we have obtained your express consent to do so. For example, if you request that we coordinate with another vendor or service provider on your behalf, we may share relevant information to facilitate that collaboration. Any sharing based on your consent is limited to the specific purpose you have authorized, and you may withdraw that consent at any time, subject to contractual or legal restrictions.

4.5 Aggregated and De-Identified Data

We may share aggregated, de-identified, or anonymized information that does not identify any individual person or organization. This type of data may be used for industry analysis, published reports, marketing materials, or other legitimate business purposes, and it is not subject to the restrictions described in this section because it falls outside the definition of personal information under applicable privacy laws.

5. Data Security

CVA Equity implements a comprehensive set of technical, administrative, and physical safeguards designed to protect personal information from unauthorized access, alteration, disclosure, destruction, or misuse. Our security program is developed in alignment with industry best practices and is reviewed and updated periodically to address evolving threats and vulnerabilities. The measures we employ include but are not limited to the following:

• Encryption in Transit and at Rest: We deploy Transport Layer Security protocols to encrypt data transmitted between your browser and our servers, protecting information from interception during transmission. Where technically feasible, personal data stored on our systems is also encrypted at rest using industry-standard encryption algorithms.
• Network Security Infrastructure: Our network perimeter is protected by firewalls, intrusion detection and prevention systems, and real-time threat monitoring services. These systems continuously analyze network traffic for indicators of compromise and automatically block or alert on suspicious activity.
• Access Control and Authentication: We enforce strict access controls that limit data access to authorized personnel with a legitimate business need. Access is granted based on the principle of least privilege, meaning each team member receives only the minimum access necessary to perform their job functions. Multi-factor authentication is required for access to systems containing personal data.
• Security Assessments and Testing: We conduct regular vulnerability assessments, penetration testing, and security audits of our systems, applications, and third-party integrations. Findings from these assessments are prioritized based on risk severity and remediated according to established timelines.
• Data Minimization and Classification: We practice data minimization by collecting only the personal information that is necessary for the stated purposes. Data is classified according to its sensitivity level, and handling procedures are applied accordingly to ensure that higher-risk data receives correspondingly stronger protections.
• Incident Response and Breach Notification: We maintain a documented incident response plan that outlines procedures for detecting, containing, investigating, and recovering from security incidents. In the event of a data breach involving personal information, we will notify affected individuals and relevant regulatory authorities in accordance with applicable legal requirements and within the timeframes prescribed by law.
• Personnel Training and Awareness: All employees and contractors who handle personal information receive privacy and security training upon onboarding and on an ongoing basis. This training covers data protection obligations, secure handling practices, phishing awareness, and incident reporting procedures.
• Physical Security: Physical access to our offices and data center facilities is restricted through access card systems, surveillance monitoring, and visitor management protocols. Equipment containing personal data is stored in secured areas and is subject to asset tracking and secure disposal procedures at end-of-life.

While we implement these and other measures to protect your information, it is important to acknowledge that no method of electronic transmission or storage is one hundred percent secure. Despite our best efforts, we cannot guarantee absolute security. You also play an important role in protecting your information by maintaining the confidentiality of any credentials, passwords, or access methods associated with your interactions with our services, and by promptly notifying us of any suspected unauthorized activity.

6. Data Retention

CVA Equity retains personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Our retention practices are governed by a documented data retention schedule that specifies retention periods for each category of information we process.

When determining the appropriate retention period for a given type of data, we consider several factors: the nature and sensitivity of the information, the volume of data involved, the potential risk of harm from unauthorized use or disclosure, the purposes for which we originally collected and processed the data, the likelihood that the data may be needed for legitimate business purposes in the future, any contractual obligations that require retention for a specified duration, and applicable statutory or regulatory requirements under federal, state, or international law.

In general, the following retention principles apply to our data handling practices:

• Personal information provided through our website contact forms is retained for up to twenty-four months following the resolution of the corresponding inquiry, unless a longer business relationship is established.
• Client account and project-related data is retained for the duration of the active business relationship plus an additional period of seven years to satisfy tax, accounting, contractual dispute resolution, and regulatory compliance obligations.
• Server logs and automatically collected technical data are retained for a period of twelve months, after which they are automatically purged or anonymized through our log rotation and data lifecycle management processes.
• Marketing communications data, including email subscription preferences, is retained until you withdraw your consent or unsubscribe, at which point your contact details are removed from our active marketing lists within thirty days.
• Aggregated and anonymized data that does not identify any individual may be retained indefinitely for research, analytical, and benchmarking purposes.

When personal information reaches the end of its defined retention period, we securely delete or irreversibly anonymize it using methods appropriate to the data format and storage medium. Deletion methods may include cryptographic erasure, secure overwriting, or physical destruction of storage media, depending on the context. We periodically audit our stored data against our retention schedule to identify and remediate any data that should have been purged.

7. Your Rights and Choices

Depending on your jurisdiction of residence, you may have certain rights regarding the personal information we hold about you. CVA Equity respects these rights and has established procedures to facilitate their exercise. The rights described below represent the protections most commonly available under privacy laws such as the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, the General Data Protection Regulation (applicable to individuals in the European Economic Area and the United Kingdom), and similar frameworks in other jurisdictions.

7.1 Right to Know and Access

You have the right to request that we disclose what personal information we collect, use, disclose, and share about you. You may request a copy of the specific pieces of personal information we hold, and you may ask us to confirm whether we are processing your personal data. Upon receiving a verifiable request, we will provide a response that details the categories and specific pieces of personal information we have collected, the categories of sources from which the information was collected, the business or commercial purpose for collecting or sharing the information, and the categories of third parties with whom we have shared the information.

7.2 Right to Data Portability

Where applicable, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format. This right is designed to allow you to transfer your data to another service provider without hindrance. We will provide the data electronically in a format such as CSV, JSON, or another structured format that facilitates portability. You may request that we transmit the data directly to another organization where technically feasible.

7.3 Right to Rectification

You have the right to request that we correct or update any inaccurate or incomplete personal information we maintain about you. If you become aware that the data we hold is incorrect or has changed, you may contact us to request a correction. We will process rectification requests promptly and will make reasonable efforts to notify any third parties to whom we have disclosed the inaccurate data, where doing so is appropriate and feasible.

7.4 Right to Deletion

You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions. These exceptions include situations where we need to retain the data to complete a transaction, to comply with a legal obligation, to detect security incidents or protect against malicious or illegal activity, to exercise free speech, to engage in research in the public interest, or to use the data for internal purposes that are reasonably aligned with your expectations based on your relationship with us.

If we determine that an exception applies and we are unable to delete your data in full, we will inform you of the reasons for the partial denial and provide you with information about the data that will be retained and the applicable retention period. We will also delete or de-identify any information that is not covered by an applicable exception.

7.5 Right to Opt Out of Communications

You may opt out of receiving non-essential communications from us at any time. Promotional and marketing emails include an unsubscribe link in the footer of each message, and clicking this link will remove you from the corresponding mailing list. You may also contact us directly at the address provided in Section 12 to request removal from our communications. Please note that even if you opt out of marketing communications, we may still send transactional and administrative messages related to your account, ongoing services, or legal obligations, as these are not subject to opt-out rights.

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of the privacy rights described in this policy. This means we will not deny you goods or services, charge you different prices or rates, provide a different level or quality of services, or suggest that you may receive a different price or level of service as a result of exercising your rights. This non-discrimination commitment applies to all individuals, regardless of whether they choose to exercise their rights.

7.7 Exercising Your Rights

To exercise any of the rights described in this section, please submit a verifiable request using the contact information provided in Section 12. You may also designate an authorized agent to submit a request on your behalf, provided that the agent presents written authorization signed by you and verifies their own identity. We will acknowledge receipt of your request within ten business days and will provide a substantive response within the time frame required by applicable law, generally within thirty to forty-five calendar days depending on the jurisdiction and the complexity of the request.

Before processing your request, we may need to verify your identity to prevent unauthorized access to personal information. Verification may require you to confirm specific pieces of information that we already hold about you, such as your name, email address, or recent interaction history. If we are unable to verify your identity to a reasonable degree of certainty, we may decline to process the request and will explain the basis for our inability to verify.

There is no fee for making a verifiable request unless the request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or decline to act on the request. In either case, we will provide an explanation for our determination.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, to remember your preferences, to understand how you navigate and interact with our content, and to gather analytical data that helps us improve the performance and usability of our digital properties over time.

8.1 What Are Cookies

Cookies are small text files that a web server places on your device through your web browser. They serve various functions, from enabling essential website features such as session management and form submission to remembering your language or display preferences between visits. Cookies do not typically contain information that directly identifies an individual, but they may be linked to other data we hold about you. In addition to cookies, we may use locally stored objects such as HTML5 web storage for similar purposes.

8.2 Types of Cookies We Use

We deploy the following categories of cookies on our website:

• Essential Cookies: These cookies are strictly necessary for the operation of our website. They enable core functionality such as page navigation, session maintenance, and secure access to certain areas of the site. The website cannot function properly without these cookies, and they are typically set in response to actions you take, such as setting your privacy preferences or filling out a form. You may set your browser to block or alert you about these cookies, but some parts of the website will not work if you do so.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, including which pages are most frequently visited, how long visitors stay on each page, whether visitors encounter error messages, and how they arrived at the site. We use this aggregated information to measure and improve the performance of our website. The analytics services we use may set their own cookies for this purpose, but the information collected is aggregated and does not identify individual visitors.
• Functional Cookies: These cookies allow our website to remember choices you make, such as your preferred language, the region you are in, or display preferences, and to provide enhanced and more personalized features. The information these cookies collect is usually anonymized, and they do not track your browsing activity on other websites.

We do not use advertising or targeting cookies on our website. CVA Equity does not participate in behavioral advertising networks, and we do not allow third-party advertising companies to place cookies on our site for the purpose of tracking your browsing activity across different websites to serve interest-based advertisements.

8.3 Managing Your Cookie Preferences

You have control over cookies through your browser settings. Most modern web browsers allow you to view, manage, and delete cookies, as well as to configure your preferences regarding when cookies may be set. You can typically find these controls in the settings, preferences, or options menu of your browser. The Help function within your browser should provide detailed instructions on how to adjust these settings.

If you choose to block or delete cookies, please be aware that certain features of our website may not function as intended. For example, form submissions or session-based interactions may be disrupted. However, the core informational content of our website will remain accessible even if cookies are disabled.

We do not currently respond to browser-initiated Do Not Track signals. The Do Not Track standard has not yet been universally adopted, and there is no consensus on how companies should interpret these signals. Until a clear industry or legal standard emerges, we will continue to apply our existing privacy practices as described in this policy.

9. Privacy for Children

Our website and services are not directed toward, designed for, or intended to attract individuals under the age of thirteen. We do not knowingly collect, solicit, or maintain personal information from children under thirteen years of age, and we do not sell the personal information of minors under sixteen years of age. If you are under the age of thirteen, you should not provide any personal information to us through our website or any other channel.

The online activities of their children should be supervised by parents and legal guardians. We encourage parents and guardians to take an active role in monitoring the online experiences of the children in their care and to teach them about the importance of protecting their personal information when using the internet. If you are a parent or guardian and you become aware that your child has provided us with personal information without your consent, please contact us immediately at the email address listed in Section 12, and we will take prompt steps to identify and delete the information from our systems.

If we learn that we have inadvertently received personal information from a child under the age of thirteen without verified parental consent, we will take immediate measures to remove such information from our records and to terminate any associated accounts within a reasonable time frame not to exceed thirty calendar days from the date of discovery. We may, where required by applicable law, notify the relevant regulatory authority of any such incident.

10. International Data Transfers

CVA Equity is headquartered in Heber City, Utah, United States of America, and our primary servers, data storage infrastructure, and business operations are located within the United States. If you access our website or use our services from outside the United States, including from the European Economic Area, the United Kingdom, Canada, Australia, Asia, or any other jurisdiction, your personal information will be transferred to the United States for processing and storage.

Data protection laws in the United States may differ from, and in some cases may not provide the same level of protection as, the laws in your country of residence. The United States has not received an adequacy decision from the European Commission, meaning that under EU law, the United States is not automatically recognized as providing an adequate level of data protection. Nevertheless, CVA Equity is committed to applying the protections described in this Privacy Policy to all personal information we process, regardless of its geographic origin.

By accessing our website, submitting information through our online forms, or engaging our services, you acknowledge and consent to the transfer of your personal information to the United States and to its processing in accordance with this Privacy Policy. If you do not consent to such transfer, you should not provide personal information to us through our digital properties. Where required by applicable law, we will implement additional safeguards for international data transfers, such as standard contractual clauses approved by relevant regulatory authorities or other lawful transfer mechanisms.

We take commercially reasonable measures to ensure that any international transfer of personal data is conducted in compliance with applicable legal requirements and that your information receives an adequate level of protection throughout the transfer and processing lifecycle. These measures include contractual commitments from any third-party recipients of the data and, where appropriate, technical measures such as encryption during transit.

11. Third-Party Websites and Services

Our website may contain links to external websites, platforms, or services that are not owned, operated, or controlled by CVA Holdings LLC. These links are provided for your convenience and informational purposes only. If you click on a link to a third-party website, you will be directed to a site that is governed by its own terms of service and privacy policy, which may differ materially from ours.

CVA Equity does not endorse, monitor, or assume any responsibility for the content, privacy practices, or security measures of any third-party websites or services. We encourage you to review the privacy policy and terms of service of every website you visit online, particularly before submitting any personal information. Our inclusion of a link to a third-party site does not constitute an affiliation, sponsorship, or endorsement of that sites products, services, or privacy practices.

Our services may also integrate with third-party platforms or tools at the request of our clients as part of a consulting engagement. In such cases, the handling of data within those third-party environments is governed by the respective platforms privacy policies and the contractual arrangements established between the client and the platform provider. CVA Equity is not responsible for the data practices of platforms that we do not own or control.

12. Changes to This Privacy Policy

CVA Equity reserves the right to update, amend, or modify this Privacy Policy at any time and for any reason. As our business evolves, as technology changes, and as legal requirements are updated, this policy will be revised to reflect new practices and obligations. The date indicated at the top of this page tells you when the policy was last revised.

When we make material changes to this Privacy Policy, we will make reasonable efforts to communicate those changes through one or more of the following methods: posting a prominent notice on our websites homepage or privacy policy page, sending an email notification to clients and contacts with whom we have an active business relationship and for whom we hold a current email address, or including a notification in our regular client communications.

Changes that are not material in nature, such as clarifications of existing language, corrections of typographical errors, or updates to contact information, may be made without direct notification. In all cases, the revised Privacy Policy will be posted to this page and will become effective as of the date indicated at the top of the document.

We encourage you to review this Privacy Policy periodically so that you remain informed of our current data handling practices. Your continued use of our website and services after the posting of any changes, whether material or non-material, constitutes your acknowledgment and acceptance of the revised policy. If you do not agree with the updated terms, you should discontinue use of our website and, where applicable, contact us to discuss the closure of your account or the termination of your services.

13. Contact Information

If you have questions, concerns, requests, or complaints regarding this Privacy Policy, our data handling practices, or your rights as a data subject, we encourage you to contact us using the information provided below. We take privacy matters seriously and will make every effort to address your inquiry in a timely and thorough manner.

When contacting us about privacy-related matters, please provide sufficient detail for us to understand the nature of your inquiry, including your full name, the email address or other identifier associated with your interaction with CVA Equity, and a clear description of your question or concern. This will help us route your inquiry to the appropriate team member and provide a substantive response as efficiently as possible.