Privacy Notice

Updated: February 2026

Ascend Beyond (“we”; “us”; or “our”) is committed to protecting your privacy. This Privacy Notice explains how we collect, use, and protect your personal information when you:

• Visit our website www.ascendbeyondglobal.com (the “Website”)
• Subscribe to our newsletters or communications
• Engage with us for consulting services
• Interact with us through email, phone, or other channels

By using our Website or providing us with your information, you agree to the practices described in this Privacy Notice.

1. Information We Collect

A. Personal Information You Provide Directly

We may collect personal information when you:

• Contact us through our Website or email
• Register for our newsletter or communications
• Request information about our services
• Attend our workshops, webinars, or events
• Engage us for consulting services

The personal information we collect may include:

• Name and professional title
• Organization name
• Email address
• Phone number
• Mailing address
• Areas of interest or service needs
• Any other information you choose to provide

B. Information Collected Automatically

When you visit our Website, we automatically collect certain information through cookies and similar technologies, including:

• IP address
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Pages viewed and navigation paths
• Time and date of visits
• Referring website addresses
• Click patterns and interactions

For more information about our use of cookies, see the “Cookies and Tracking Technologies” section below.

C. Social Media

If you interact with us through social media platforms (such as LinkedIn), we may collect information you make available through those platforms consistent with your privacy settings on those platforms.

2. Legal Basis for Processing (GDPR Readiness)

Although we currently serve primarily US-based clients, we process personal information based on the following legal grounds in preparation for potential international expansion:

• Consent: When you sign up for our newsletter, accept cookies, or otherwise provide explicit consent
• Legitimate Interests: For website analytics, security, and responding to inquiries
• Contract Performance: When providing consulting services pursuant to an engagement agreement
• Legal Obligation: When required to comply with applicable laws and regulations

3. How We Use Your Information

We use your personal information to:

• Respond to your inquiries and service requests
• Provide you with information about our services
• Send you newsletters, updates, and other communications you’ve requested
• Improve our Website and services
• Conduct research and analysis to better serve our clients
• Comply with legal obligations
• Protect our rights and prevent fraud

We do NOT use your information for:

• Selling or renting to third parties
• Targeted advertising or remarketing
• Automated decision-making or profiling

Marketing Communications

With your consent, we may send you information about our services, upcoming events, thought leadership content, and other materials we believe may interest you. You may opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us directly.

4. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to enhance your experience, analyze Website usage, and improve our services. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our Website.

Types of Cookies We Use

Essential Cookies: Necessary for the Website to function properly (session management, security)

Analytics Cookies: Help us understand how visitors use our Website (primarily Google Analytics)

We maintain minimal tracking on our Website. We do NOT use marketing cookies, advertising pixels, social media tracking pixels, or remarketing technologies.

Google Analytics

We use Google Analytics to understand website traffic and user behavior. Google Analytics tracks:

• Page views and session duration
• Bounce rate and traffic sources
• User demographics and interests (in aggregate, anonymized)
• Device and browser information

We have configured Google Analytics to retain data for the industry standard retention period. After this period, data is automatically deleted.

Google’s privacy policy: https://policies.google.com/privacy

Opt-out of Google Analytics: https://tools.google.com/dlpage/gaoptout

Your Cookie Choices

Most browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling cookies may limit your ability to use certain features of our Website.

Do Not Track Signals: Currently there is no standardized DNT protocol. We respond to cookie settings you configure in your browser and the Google Analytics opt-out tool.

5. How We Share Your Information

We do not sell your personal information.

We may share your information only in the following circumstances:

Service Providers (Data Processors)

With trusted third-party service providers who assist us in operating our Website, conducting our business, or serving you, including website hosting, email services, and analytics providers.

All service providers are contractually bound to keep your information confidential and use it only for the purposes we specify.

Professional Advisors

With our attorneys, accountants, or other professional advisors when necessary to provide services or protect our legal rights.

Legal Requirements

When required by law, court order, or legal process, or to protect our rights, property, or safety, or the rights, property, or safety of others.

Business Transfers

In connection with a sale, merger, acquisition, or other transfer of all or part of our business. You will be notified via email and/or a prominent notice on our Website of any change in ownership.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law.

Retention Periods:

• Contact inquiries: 3 years from last contact
• Newsletter subscribers: Until you unsubscribe, then 30 days to process removal
• Analytics data: 26 months (Google Analytics retention period)
• Legal/tax records: 7 years as required by law

When we no longer need your information, we will securely delete or anonymize it.

7. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:

• Secure Socket Layer (SSL) encryption for data transmission
• Access controls and authentication procedures
• Regular security assessments
• Vendor security requirements in service provider contracts
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. You provide information at your own risk.

Data Breach Response

In the event of a data breach affecting your personal information, we will investigate promptly, notify affected individuals, and report to relevant authorities as required by applicable law. If you suspect unauthorized access to your information, please contact us at support@ascendbeyondglobal.com.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

General Rights (All Users)

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Opt-Out: Unsubscribe from marketing communications at any time
• Object: Object to certain processing of your personal information
• Data Portability: Request a copy of your information in a portable, machine-readable format

To Exercise Your Rights

Contact us using the information provided at the end of this Privacy Notice. We will respond to your request within 30 days (or as required by applicable law).

Identity Verification: For your protection, we may need to verify your identity before processing certain requests. We may ask you to provide additional information to confirm your identity.

10. Third-Party Websites

Our Website may contain links to third-party websites (such as LinkedIn). This Privacy Notice does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

11. State-Specific Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• No Sale of Personal Information: We do not sell personal information to third parties and have not sold personal information in the past 12 months
• No Sharing for Cross-Context Behavioral Advertising: We do not share personal information for cross-context behavioral advertising
• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information: We do not collect or use sensitive personal information
• Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights

Categories of Personal Information Collected (Last 12 Months):

• Identifiers (name, email address, phone number, IP address)
• Internet or network activity (browsing behavior, device information)
• Professional or employment-related information (company name, job title, if provided)

Business or Commercial Purposes for Collection:

• Providing, maintaining, and improving our services
• Responding to inquiries and communicating with you
• Marketing our services (with your consent)
• Website analytics and improvement
• Security, fraud prevention, and legal compliance

Categories of Third Parties with Whom We Share Information:

• Service providers (website hosting, email services, analytics)
• Professional advisors (attorneys, accountants)
• Government authorities and legal entities (when required by law)

Colorado Residents (CPA)

If you are a Colorado resident, you have rights under the Colorado Privacy Act (CPA) including:

• The right to access your personal information
• The right to correct inaccuracies in your personal information
• The right to delete your personal information
• The right to obtain a copy of your personal information in a portable format
• The right to opt out of targeted advertising and sale of personal information (we do not engage in either activity)

To exercise these rights, please contact us using the information at the end of this Privacy Notice.

Other State Privacy Laws

Residents of Virginia, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and obtain copies of their personal information. We will comply with all applicable state privacy laws. To exercise your rights under your state’s privacy law, please contact us using the information provided below.

12. International Data Transfers

Current Operations

Our data is processed and stored in the United States. We currently serve primarily US-based clients and do not actively market to international clients.

Future International Expansion

While we do not currently serve EU, UK, or other international clients, we will, applicable, implement appropriate safeguards for international data transfers, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions recognizing the destination country as providing adequate data protection
• Binding Corporate Rules or other approved transfer mechanisms
• Additional privacy protections as required by the destination countrys laws
• For EU/UK Residents (when applicable): Ascend Beyond is the data controller for your personal information. We process personal data in accordance with the General Data Protection Regulation (GDPR) and UK GDPR. If we do not have an EU or UK representative at the time of processing EU/UK resident data, we will appoint one as required by law. You have the right to lodge a complaint with your local data protection authority.

13. Children’s Privacy

Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a child under 18, we will promptly delete that information from our systems.

If you are a parent or guardian and believe we may have collected information about your child, please contact us immediately at support@ascendbeyondglobal.com, and we will take appropriate steps to remove such information.

14. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the version date at the top of this page
• Post the revised Privacy Notice on our Website
• For material changes, provide prominent notice on the Website or via email to registered users
• Make the current version always available at: www.ascendbeyondglobal.com/privacy-policy
• Previous versions available upon request for your records

We encourage you to review this Privacy Notice periodically. Your continued use of our Website following any changes constitutes your acceptance of the updated Privacy Notice.

15. Contact Information

If you have questions or concerns about this Privacy Notice or our privacy practices, or if you wish to exercise your privacy rights, please contact us:

Ascend Beyond

Mailing Address:

2301 Forest Ave Durango CO 81301

Email: support@ascendbeyondglobal.com

Response Time: We will respond to your privacy-related requests within 30 days (or within the timeframe required by applicable law).

* * *