IRONWOOD LEADERSHIP ADVISORY, LLC

Privacy Policy

Effective Date: April 12, 2026

Ironwood Leadership Advisory, LLC ("Ironwood Leadership," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at ironwoodleadershipadvisory.com (the "Website"), engage our coaching and consulting services, or otherwise interact with us.

Please read this Privacy Policy carefully. By using our Website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of our Website.

We collect personal information you voluntarily provide when you:

• Complete our contact form (name, email address, and any information included in your message)

• Purchase assessment products or coaching services through our Online Store (name, email address, billing/payment information processed through our third-party payment processor)

• Create a user account on our Website (name, email address, and password)

• Submit files or attachments through our contact form

• Communicate with us by email or other means

When you visit our Website, certain information is collected automatically through cookies and similar tracking technologies, including:

• Internet Protocol (IP) address

• Browser type and version

• Operating system

• Referring URLs and pages visited on our Website

• Date and time of your visit

• Aggregate data about website traffic and usage patterns

Our Website uses cookies to analyze website traffic and optimize your experience. By accepting our use of cookies, your data is aggregated with other user data for analytics purposes. You may decline non-essential cookies when prompted by our cookie banner.

Our Website is built on a GoDaddy-powered platform and uses the following third-party services that may collect information:

• Google reCAPTCHA — used on our contact form to prevent spam. Your use of reCAPTCHA is subject to Google's Privacy Policy (policies.google.com/privacy) and Terms of Service.

• Payment processors — when you purchase products or services, payment card and billing data are collected and processed by our third-party payment processor. We do not store full payment card numbers on our systems.

Consistent with applicable U.S. data privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), we provide this notice at the point of collection:

Categories of Personal Information Collected:

• Identifiers (name, email address, IP address, account credentials)

• Commercial information (purchase history, products and services obtained)

• Internet or electronic network activity (browsing behavior on our Website, cookie data)

• Professional or employment-related information (organizational role, if voluntarily shared in coaching or consulting engagements)

Purposes for Collection:

• To respond to your inquiries and provide requested services

• To process purchases and manage your account

• To analyze and improve our Website and services

• To comply with legal obligations

• To communicate with you about our services, subject to your preferences

We do not sell or share your personal information with third parties for cross-context behavioral advertising.

We use the information we collect for the following purposes:

• Service Delivery — to provide leadership coaching, executive development, consulting, and assessment services

• Order Fulfillment — to process and deliver assessment products and digital content purchased through our Online Store

• Account Management — to create and manage your user account

• Communications — to respond to your messages and inquiries

• Website Analytics — to understand how visitors use our Website and to improve content and functionality

• Security — to detect, prevent, and address fraud, unauthorized access, and other unlawful activity

• Legal Compliance — to fulfill our obligations under applicable laws and regulations

We do not sell your personal information. We may share your information in the following limited circumstances:

We share personal information with trusted third-party vendors who perform services on our behalf, including website hosting (GoDaddy), payment processing, and analytics. These providers are contractually obligated to use your information only as directed by us and in accordance with applicable law.

Our contact form is protected by Google reCAPTCHA. Information collected through reCAPTCHA is governed by Google's Privacy Policy and Terms of Service.

We may disclose personal information if required to do so by law or in good-faith belief that such action is necessary to: (a) comply with a legal obligation or valid legal process; (b) protect and defend the rights or property of Ironwood Leadership Advisory; (c) prevent or investigate possible wrongdoing; or (d) protect the personal safety of users or the public.

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Website if such a transfer occurs.

Our Website uses cookies and similar technologies to improve your browsing experience and analyze site usage. Cookies are small data files stored on your device.

Types of cookies we use:

• Necessary Cookies — essential for the Website to function securely and properly. These cannot be disabled without affecting site functionality.

• Analytical Cookies — help us understand how visitors interact with our Website. Data collected is aggregated and does not identify individual users.

Cookie Choices: When you visit our Website, you will be presented with a cookie banner allowing you to accept or decline non-essential (analytical) cookies. You may also manage cookies through your browser settings; however, disabling certain cookies may affect Website functionality.

Our Website does not currently respond to "Do Not Track" browser signals. If your browser transmits a "Do Not Track" signal, we will not treat it as an opt-out request at this time.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, to provide services you have requested, to comply with our legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we will delete or anonymize it in accordance with our internal data retention practices.

Assessment product purchases are final per our No Refund Policy, and records of such transactions are retained as required for accounting, tax, and legal compliance purposes.

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encrypted data transmission (HTTPS), access controls, and secure third-party service providers.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Regardless of your location, you may:

• Access and review the personal information we hold about you

• Request correction of inaccurate or incomplete personal information

• Opt out of marketing communications by following the unsubscribe instructions in any email we send

• Request deletion of your account and associated personal information, subject to our legal obligations

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom we share it.

• Right to Delete — You may request deletion of personal information we have collected from you, subject to certain exceptions.

• Right to Correct — You may request correction of inaccurate personal information we maintain about you.

• Right to Opt-Out of Sale/Sharing — We do not sell or share your personal information for cross-context behavioral advertising. If this practice changes, we will provide a "Do Not Sell or Share My Personal Information" link on our homepage.

• Right to Limit Use of Sensitive Personal Information — We do not use or disclose sensitive personal information beyond the purposes permitted by CCPA. If applicable in the future, we will provide a "Limit the Use of My Sensitive Personal Information" link.

• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To submit a California rights request, please contact us using the information in Section 11. We will respond within 45 days of receipt of a verifiable consumer request. We may extend this period by an additional 45 days when reasonably necessary.

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with enacted data privacy laws may have rights similar to those described above, including rights to access, correct, delete, and opt out of certain data processing. To exercise such rights, please contact us using the information in Section 11.

Our Website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete that information. If you believe we have collected information from a child under 13, please contact us immediately using the information in Section 11.

Our Website may contain links to third-party websites, including social media platforms and partner organizations. This Privacy Policy applies only to our Website and services. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Ironwood Leadership Advisory, LLC

Website: ironwoodleadershipadvisory.com

Contact Form: ironwoodleadershipadvisory.com (via the "Send a Message" link)

We will respond to all verified requests within 30 days or as required by applicable law.

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you by email or by posting a prominent notice on our Website. Your continued use of our Website following the posting of changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

This Privacy Policy is governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of law provisions, except where superseded by applicable federal or state privacy law.

© 2026 Ironwood Leadership Advisory, LLC — All Rights Reserved