Who we are

1120 Consulting Group LLC (“we,” “us,” “our,” or “Company”) is a compliance consulting firm founded by Monèt Campbell. We provide employee file compliance audits to small regulated businesses in North Carolina and beyond.

Our contact information:

• Company Name: 1120 Consulting Group LLC
• Website: 1120grp.com
• Email: hello@1120grp.com

We are committed to protecting your privacy and ensuring you have a positive experience on our website and when working with us.

What Data We Collect and Why

We collect information in the following ways:

Information You Provide Directly:

• Contact form submissions (name, email, phone, business name, message)
• Inquiry or discovery call request forms
• Email communications with you
• Information you provide during audit engagements or consultations

Information Collected Automatically:

• Website usage data (pages visited, time spent, referral source)
• Device information (browser type, operating system, device type)
• IP address and general location data
• Cookies and similar tracking technologies (see Cookies section below)

Why We Collect This Data:

• To respond to your inquiries and provide our services
• To communicate with you about your audit or engagement
• To improve and maintain our website
• To understand how visitors use our site
• To ensure website security and prevent fraud
• To comply with legal obligations

Comments

If we enable comments on our blog or resources section, please note:

• Comments are moderated before publication
• We do not publish email addresses, but your name and comment content will be visible to other visitors
• Do not include sensitive personal information in comments
• Comments are stored on our secure servers
• Spam comments are automatically flagged and deleted

If You Wish to Have Your Comment Removed: Contact us at hello@1120grp.com, and we will remove it promptly.

Media

If you upload media (images, documents, files) to our website or share them with us during an engagement:

• We store media securely on our servers
• Media is not shared publicly unless you explicitly authorize it
• We do not use your media for any purpose beyond our engagement with you
• You retain all rights to your media

During Audit Engagements:

See Section 8 (Data Retention) for how long we keep these files

Any documents or files you provide are treated as confidential

We use them solely for the purpose of conducting your compliance audit

We do not share them with third parties without your written consent

Cookies

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize you and improve your experience.

What Cookies We Use:

Essential Cookies (always active):

• Session cookies to keep you logged in (if applicable)
• Security cookies to prevent fraud
• These are necessary for the website to function

Analytics Cookies (if enabled):

• Google Analytics or similar tools to track visitor behavior
• Pages visited, time spent, devices used
• This data helps us improve our website

Marketing/Functional Cookies (if enabled):

• Remember your preferences
• Enable features like contact forms
• Track ad performance

How to Control Cookies:

Opt out of Google Analytics at: https://tools.google.com/dlpage/gaoptout

You can disable cookies in your browser settings

Disabling certain cookies may affect website functionality

You can clear cookies from your device at any time

Embedded content from other websites

Our website may contain embedded content from external sources, such as:

• YouTube videos
• Social media embeds (LinkedIn, etc.)
• Calendar or scheduling tools
• Third-party forms

Important: When you interact with embedded content:

We recommend reviewing their privacy policies directly

The third-party service may collect data about you (e.g., viewing a video counts as a view)

These third parties have their own privacy policies

We are not responsible for their data practices

Who we share your data with

We do NOT sell or rent your personal data.

We may share your information only in these limited cases:

Service Providers:

• Email service providers (to send you communications)
• Website hosting and security services
• Payment processors (if applicable)
• Form platforms (Google Forms, Calendly, etc.)

These providers are bound by confidentiality agreements and only use your data to provide services to us.

Legal Requirements:

• If required by law, court order, or government request
• To protect our legal rights or comply with regulations
• To prevent fraud or security threats

Business Transfers:

• If we merge with, are acquired by, or sell assets to another company
• Your data may be transferred as part of that transaction
• We will notify you of any such change

Referral Partners:

• If you have authorized us to share information with referral partners
• This sharing occurs only with your explicit consent

With Your Consent:

We may share data with other parties if you explicitly request or authorize it

How long we retain your data

Contact Form and Inquiry Data:

• Retained for 3 years for business record-keeping and follow-up purposes
• Deleted upon your written request

Website Analytics Data:

• Retained for up to 2 years (Google Analytics standard)
• Automatically deleted after retention period

Audit Engagement Data and Client Files:

• Retained for 7 years to comply with employment law requirements and professional standards
• Stored securely and accessed only by authorized personnel
• Deleted securely at the end of the retention period
• You may request earlier deletion (with limitations based on legal requirements)

Email Communications:

• Retained as long as necessary for business purposes
• May be archived for compliance and record-keeping

Comments (if applicable):

• Retained indefinitely unless you request removal

Cookies:

• Session cookies: deleted when you close your browser
• Persistent cookies: deleted after 1-2 years or per your browser settings

If You Request Data Deletion:

Some data may need to be kept for tax, legal, or audit purposes

Contact us at hello@1120grp.com

We will delete your data within 30 days, unless legal requirements require us to retain it

What rights you have over your data

Depending on your location, you may have the following rights:

Right to Access:

• You can request a copy of all personal data we hold about you
• We will provide this within 30 days of your request

Right to Correction:

• If your data is inaccurate, you can request we correct it
• We will make updates promptly

Right to Deletion (Right to be Forgotten):

• You can request deletion of your data, with some exceptions
• We must retain data for legal, tax, or audit obligations
• We will comply with deletion requests within 30 days where legally permitted

Right to Restrict Processing:

• You can ask us to limit how we use your data while we verify its accuracy

Right to Data Portability:

• You can request your data in a portable format (e.g., CSV, PDF)
• We will provide this within 30 days

Right to Object:

• You can object to marketing communications
• You can opt out of analytics and tracking
• We will honor opt-out requests within 10 days

Right to Withdraw Consent:

• If you previously consented to data processing, you can withdraw that consent at any time
• This does not affect data processing that occurred before withdrawal

How to Exercise Your Rights:

We will respond within 30 days

Email us at hello@1120grp.com

Include “Data Rights Request” in the subject line

Provide clear details of what you’re requesting

Where your data is sent

Data Storage Location:

Our website and data are hosted on servers located in the United States. By using our website or engaging our services, you consent to your data being processed and stored in the U.S.

International Data Transfers:

• If you are outside the U.S., your data may be transferred across borders
• U.S. data protection laws may differ from those in your country
• We take reasonable steps to protect your data regardless of location

Cloud Services:

• We may use cloud-based services (e.g., Google Workspace, secure file storage)
• These providers maintain data centers globally
• We use encrypted connections to protect data in transit

Third-Party Service Locations:

• Email providers, analytics tools, and form platforms may process data outside the U.S.
• We only use reputable providers with strong security practices

Data Security:

We conduct regular security updates and backups

We use SSL encryption for all website communications

Sensitive data is encrypted both in transit and at rest

Access to client data is restricted to authorized personnel only

Website Security

While we take reasonable precautions to protect your data, no internet transmission is 100% secure. We cannot guarantee absolute security, but we are committed to:

• Using industry-standard encryption
• Maintaining secure servers and firewalls
• Limiting employee access to sensitive data
• Regularly updating and patching systems
• Conducting security audits

If you believe your data has been compromised, contact us immediately at hello@1120grp.com.

Children’s Privacy

Our services and website are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it immediately. If you believe we have collected data from a child, please contact us at helo@1120grp.com.

Third-Party Links

Our website may contain links to other websites not operated by us. This privacy policy applies only to 1120grp.com. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing your information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements.

How We’ll Notify You:

• We will update the “Last Updated” date at the top of this policy
• For significant changes, we may send you an email notification
• Continued use of our website after changes constitutes acceptance of the updated policy

Your Rights:

• If you disagree with changes, you can stop using the website
• You can request deletion of your data (see Section 9)

Contact Us About Privacy

If you have questions about this privacy policy, how we handle your data, or wish to exercise your data rights:

Email: hello@1120grp.com

Data Protection Inquiries:

• Use “Privacy Policy Inquiry” in email subject line
• Provide clear details of your question or request
• We will respond within 10 business days

Your Acknowledgment

By using 1120grp.com and engaging with 1120 Consulting Group, you acknowledge that you have read this privacy policy and agree to its terms.