Privacy Policy
Written to be read. Where a sentence could have been made longer and vaguer, we did not do that. Summary: we collect what we need to advise you, we store it in the United States, we never sell it, and you can have it deleted.
Last updated: 1 September 2026 · Version 4.2 · Applies to investmentfinancehub.com and to advisory, lending, tax and insurance engagements placed through it.
1. Who we are and what this policy covers
Investment Finance Hub is an independent advisory and brokerage practice providing personal loan services, mortgage lending, credit loans, tax advisory, wealth and investment planning and insurance services. This policy explains how we handle personal information when you visit investmentfinancehub.com, submit a form, call us, or become a client.
Investment Finance Hub is a fictional demonstration website. The policy is written to be a realistic, usable template; it is not legal advice and should be reviewed by counsel before being used for a real business. Nothing on this site constitutes an offer of credit, a securities recommendation or a tax opinion.
2. What information we collect
We collect only categories of data that a specific service actually needs. Four sources exist:
- Information you give us. Name, postal address, email, phone number, date of birth, employment and income details, dependants, existing debts, tax records, insurance policies, investment holdings and goals — provided through forms, email, phone, document upload or in person.
- Information from third parties with your authorisation. Credit bureau reports and scores, lender decisions, carrier quotes, prior adviser and custodian statements, IRS and Commonwealth notices you forward to us, and verification-of-employment data.
- Information from your use of the website. Pages viewed, referring site, approximate region derived from IP, device and browser type, and form interaction events. On this demonstration site analytics are not enabled.
- Information we create while serving you. Notes of our calls, your written plan, suitability documentation, the spreadsheets we build, correspondence, billing records and complaint logs.
We do not collect Social Security numbers through website forms. If a lender or tax filing requires one, it is submitted through the encrypted portal or on paper at our office, never by email or through this site.
3. How we use your information
- To assess, place and service a loan, refinance, credit product or insurance policy you have requested.
- To prepare tax returns, model estimates and respond to tax authority correspondence you authorise us to handle.
- To build, implement and review a financial plan, including rebalancing you have approved in writing.
- To contact you about your file, deadlines, required signatures and changes to terms.
- To keep records required by law, resolve complaints, and defend or pursue our legal rights.
- To send the newsletter you subscribed to, in accordance with your stated topics and frequency.
- To improve our services, which uses aggregated and, wherever practical, de-identified data.
We do not use your personal information to train third-party artificial-intelligence models, and we do not sell, rent or trade it under any circumstances. Where a product we recommend pays us a commission, that is disclosed in writing next to the recommendation, and the payment does not change how your data is used.
4. Legal bases for processing
Where a jurisdiction requires us to state a basis: we process on your consent (marketing, sensitive data, non-essential cookies), for the performance of a contract (servicing your file), to comply with a legal obligation (record retention, anti-money-laundering checks), and where permitted by law for our legitimate interests (fraud prevention, security of our systems, service improvement) balanced against your rights. You may withdraw consent at any time without affecting what we have already lawfully processed.
5. How we share information
Six limited categories of recipient exist, and each one is tied to something you asked for:
- Lenders and their service partners — when you apply for or refinance a loan.
- Insurance carriers, MGAs and underwriters — when we obtain quotes or place cover.
- Custodians and broker-dealers — when you open or transfer an account we advise on.
- Service providers acting for us — encrypted document storage, e-signature, telephony, accounting and payroll, all under written confidentiality obligations and prohibited from using data for their own purposes.
- Professional advisers and insurers of our own firm — auditors, errors-and-omissions carriers and counsel.
- Authorities — where we are legally compelled, or to report a suspicious activity concern as required. We challenge overbroad requests as a matter of policy.
We do not share your information with marketing partners, data brokers, advertising networks or affiliate programmes.
6. Cookies and similar technologies
This site is intentionally austere. It sets no advertising or cross-site tracking cookies and runs no third-party analytics script. Functionally, it may use local browser storage to remember a small amount of state on your device — for example the newsletter preference you submit on our subscribe page, the acknowledgement you dismiss a notice with, and the reference number of an enquiry you filed — so that forms on the site behave sensibly for you. That data stays in your browser and is never transmitted to us. Clearing site data removes it; our script does nothing else with it.
A live production deployment would typically add: strictly necessary session cookies, an opt-in consent banner, and a privacy-respecting aggregate analytics tool with IP truncation. If you arrive at a real version of this page and see a cookie wall, that version's exact configuration governs.
7. How long we keep information
| Record | Retention | Why |
|---|---|---|
| Loan applications and closings | 7 years after payoff | Regulatory and audit requirements |
| Tax returns and work papers | 7 years from filing | Statute of limitations, amended-return window |
| Advisory plans and trade records | 6 years after engagement ends | Books-and-records standards |
| Insurance policies and claims | Life of policy + 5 years | Claims and dispute defence |
| Enquiry forms and call notes | 24 months | Useful context; no reason to keep longer |
| Newsletter subscription | Until you unsubscribe (+ suppression record) | Honouring your choice |
| Complaint files | 6 years | Oversight and quality review |
When a retention period ends, records are permanently deleted or irreversibly aggregated. Backups are purged on a rolling 90-day cycle, so a deletion request is complete within that window.
8. How we protect information
Administrative, technical and physical safeguards include: least-privilege access with unique named accounts, multi-factor authentication on every system holding client data, encryption in transit and at rest, documented vendor due diligence and annual review, quarterly access recertification by a partner, a written incident-response plan with a defined 72-hour notification protocol, annual penetration testing by an external firm, locked and camera-monitored document storage at the Cranberry Township office, and shred-all output for paper.
No method of transmission or storage is perfectly secure, and we will not claim otherwise. If a breach affecting your personal information occurs, we will notify you and, where required, the relevant authority, and we will tell you plainly what happened rather than what we would like you to conclude.
9. Your rights and choices
- Access. Request a copy of what we hold; we respond within 30 days, free of charge once per year.
- Correction. Ask us to fix inaccuracy; where an inaccuracy affects a filed return or a submitted application, we tell you what can and cannot be amended and how.
- Deletion. Request removal, subject to the legal retention duties above — we will always state precisely what we must keep and why.
- Portability. Receive your file in a usable format, including when you move to another adviser. This is free under our engagement terms.
- Objection and restriction. Object to processing based on legitimate interests, or ask us to pause processing while a dispute is resolved.
- Consent withdrawal. Revoke marketing consent at any time via the unsubscribe page or by replying "UNSUBSCRIBE" to any email.
- No sale or sharing. Opt-out notices under state law are honoured automatically, because we do not sell or share for cross-context behavioural advertising in the first place.
- Appeal. If we refuse a request you may appeal to the designated reviewer at info@investmentfinancehub.com; we respond in writing within 45 days.
We do not discriminate against you for exercising a privacy right — no higher fees, no reduced service, no slower queue. Contact us by email, by post at the office address, or on +1 724-772-5757. We verify requests against the details we hold; we may ask for one additional confirming item, and never for a password.
10. Marketing and the newsletter
The Friday Brief is sent only to addresses that requested it. Every edition carries a one-click unsubscribe link and our postal address. Topic and frequency preferences set on the subscribe page govern what you receive, and a request to stop marketing is applied immediately in our system and within 48 hours of any queued send. Client service messages about your own file — signature requests, document needs, deadline alerts, statements — are not marketing and continue while you are a client, because they are part of the service you engaged.
11. Children
Our services are for adults. We do not knowingly collect information from anyone under 18 outside the limited context of a family plan — for example a dependant's education-funding figures — where the data is provided by a parent and used only for that calculation. If you believe a child has given us information directly, contact us and we will delete it within 30 days.
12. Third-party links
Pages here link to lenders, carriers, custodians, a map provider and other destinations. Once you follow a link, their policy — not ours — applies. We choose partners carefully and review them annually, but we cannot control their practices and we do not accept responsibility for them.
13. Notice for California and Virginia residents
If you are a California resident, the categories above map to CCPA/CPRA identifiers, commercial information and professional employment information; we disclose the categories, the business purposes and the retention periods in the tables above, we do not "sell" or "share" personal information as those terms are defined, and we honour requests through the same channels in section 9, including authorised agents. If you are a Virginia resident, you have rights of access, correction, deletion, portability and to opt out of profiling and targeted advertising — we conduct neither. In both states we may ask you to verify identity, and we may decline requests that would require us to disclose another person's information or breach a legal obligation.
14. Changes to this policy
Where we make a material change — a new category of data, a new recipient, or a narrower right — we will tell you by email at least 30 days before it takes effect and you may object or close your file. Minor clarifications are simply posted with a new "last updated" date at the top of this page. Every prior version is available on request; we keep them for six years.
15. How to reach us about privacy
Write to the Privacy Reviewer, Investment Finance Hub, 123 Robinhood Dr, Cranberry Twp, PA 16066, USA; email info@investmentfinancehub.com with "Privacy" in the subject line; or call +1 724-772-5757 between 8:30am and 6:00pm Eastern, Monday to Friday. A real firm would also list its regulator and complaint route; for our purposes, complaints are reviewed by a partner within five business days.