FINAL EXCHANGE LLC

Privacy Policy

Effective Date: May 5, 2026

Last Updated: May 5, 2026

 

Final Exchange LLC (“Final Exchange,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites, use our services, or interact with our brands.

This Policy applies to all websites, products, and services operated by Final Exchange LLC, including but not limited to:

• com (corporate, web design, digital transformation consulting, SOC 2 advisory, and resume products)
• com (luxury Caribbean travel agency)
• Any other domain, microsite, or landing page operated by Final Exchange LLC

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

1. Who We Are

Final Exchange LLC is a Texas limited liability company headquartered in Montgomery, Texas. We operate multiple service lines, including:

• Web design and development for small and medium businesses
• Digital transformation consulting for SMEs, enterprise, and government clients
• SOC 2 compliance pre-audit advisory
• InterStays — a luxury Caribbean and Mexico travel agency
• Digital products, including the ATS Resume Toolkit

For privacy-related inquiries, contact us at: connect@finalexchange.com

2. Information We Collect

We collect information in the following categories:

2.1 Information You Provide Directly

• Contact details: name, email address, phone number, business name, mailing address.
• Account and booking details: for travel clients, this may include passport information, dates of birth, traveler preferences, accessibility needs, and emergency contacts.
• Payment information: billing address and payment card details, processed through PCI-compliant third-party processors (such as Stripe and Stan Store). We do not store full payment card numbers on our servers.
• Communications: messages, inquiries, and feedback submitted through forms, chat, email, or scheduling tools (such as Cal.com or Calendly).
• Project content: files, brand assets, copy, and credentials shared in connection with consulting, web design, or compliance engagements.

2.2 Information Collected Automatically

• Usage data: pages viewed, links clicked, time on page, referral source, and approximate location derived from your IP address.
• Device data: browser type, operating system, device identifiers, and screen resolution.
• Cookies and similar technologies: see Section 7 for details.

2.3 Information from Third Parties

• Marketing partners: lead information from advertising platforms such as Google Ads and Meta Ads.
• Travel suppliers: for InterStays, we receive booking confirmations and reservation details from partners such as Sandals Resorts and other suppliers.
• Analytics and CRM tools: aggregated insights from platforms such as HubSpot, Brevo, and Google Analytics.
• Public sources: publicly available business information used for outreach and lead qualification.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our services and products
• Process transactions, deliver digital products, and confirm travel bookings
• Communicate with you about quotes, projects, support, updates, and changes to our services
• Send marketing communications (which you can opt out of at any time)
• Personalize content, recommendations, and user experience
• Analyze usage and performance to improve our websites and offerings
• Detect, prevent, and respond to fraud, abuse, security incidents, and unlawful activity
• Comply with legal obligations, enforce our terms, and protect our rights and the rights of others

4. Legal Bases for Processing (EU/UK Visitors)

If you are located in the European Economic Area (EEA) or United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract: to deliver services or products you have requested.
• Legitimate interests: to operate, secure, and improve our business, where not overridden by your rights.
• Consent: for marketing emails, certain cookies, and other purposes where consent is required.
• Legal obligation: to comply with applicable laws, regulations, and tax requirements.

5. How We Share Your Information

We do not sell your personal information. We share information only as described below:

5.1 Service Providers

We share information with vendors that help us run our business, including:

• Payment processors: Stripe, Stan Store
• CRM and email marketing: HubSpot, Brevo
• Scheduling: com, Calendly
• Automation: Zapier
• Hosting and infrastructure: WordPress hosting, Supabase, and similar providers
• Analytics: Google Analytics, advertising platform pixels (Google, Meta)

These providers are contractually required to safeguard your information and use it only for the services they provide to us.

5.2 Travel Suppliers (InterStays)

To complete travel bookings, we share necessary details (such as traveler names, dates, passport information when required, and contact information) with hotels, resorts, cruise lines, transportation providers, tour operators, and destination management organizations. These suppliers are independent controllers of your information and have their own privacy practices.

5.3 Professional Advisors

We may share information with attorneys, accountants, auditors, and insurers when reasonably necessary.

5.4 Legal and Safety Disclosures

We may disclose information when required by law, subpoena, or court order, or when we believe disclosure is necessary to protect our rights, property, or the safety of any person, or to investigate fraud or security incidents.

5.5 Business Transfers

If Final Exchange is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

6. International Data Transfers

Final Exchange is based in the United States, and our service providers may operate in multiple countries. If you access our services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other jurisdictions whose data protection laws may differ from those of your home country. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

7. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to operate our sites, remember your preferences, measure performance, and deliver relevant marketing. Cookie types we use include:

• Strictly necessary: required for core site functionality.
• Analytics: help us understand how visitors use our sites.
• Advertising: used by partners such as Google and Meta to deliver and measure ads.

You can control cookies through your browser settings or, where applicable, through our cookie banner. Disabling certain cookies may impact site functionality.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information and the context of collection. When information is no longer needed, we delete or anonymize it.

9. Your Privacy Rights

Depending on where you live, you may have the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: request deletion of your personal information.
• Portability: receive your information in a portable format.
• Objection or restriction: object to or limit certain processing activities.
• Opt-out of marketing: unsubscribe from marketing emails at any time using the link in any message.
• Withdraw consent: where processing is based on consent.

9.1 California Residents (CCPA / CPRA)

California residents have specific rights, including the right to know, delete, correct, and limit the use of sensitive personal information, as well as the right to non-discrimination for exercising these rights. We do not sell personal information, and we do not knowingly share personal information for cross-context behavioral advertising in a manner that would require an opt-out under the CPRA without honoring your choices.

9.2 How to Exercise Your Rights

To exercise any of these rights, email us at connect@finalexchange.com with the subject line “Privacy Request.” We may need to verify your identity before responding. We will respond within the time frames required by applicable law.

10. Children’s Privacy

Our services are not directed to children under the age of 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will delete it promptly.

11. Data Security

We implement administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These include encryption in transit (HTTPS/TLS), restricted access, vendor due diligence, and ongoing security review. However, no system is 100% secure, and we cannot guarantee absolute security.

12. Third-Party Links and Services

Our websites may contain links to third-party sites and services, including affiliate links (for example, the Sandals Resorts referral link on InterStays). These third parties operate independently, and their privacy practices are governed by their own policies. We are not responsible for the content or practices of third-party sites.

13. Do Not Track

Our websites do not currently respond to “Do Not Track” browser signals because no common industry standard has been finalized. We continue to monitor developments in this area.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last Updated” date above and, where appropriate, notify you by email or through a prominent notice on our websites. Your continued use of our services after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

 

Final Exchange LLC

Montgomery, Texas, United States

Email: connect@finalexchange.com

Web: finalexchange.com

 

If you are located in the EEA or UK and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.

 

© Final Exchange LLC. All rights reserved.