Privacy Policy

Who is responsible

Montana Financial Advisors, Inc., Montana entity file no. D1198990, 611 Mary Rd, Bozeman, MT 59718, United States, is responsible for the personal information handled through this website. For privacy questions or requests, email jasonhundhausen@montanafinancialadvisorsinc.com, call +1 (406) 551-2171, or write to the company at this address. The company assigns authorized personnel to handle inquiries, privacy requests and deletion. The entity file number is a corporate identifier, not an EIN or a professional license.

Information we collect and how we use it

Information you provide: the inquiry form requests your name, email address and message. A phone number is optional. We use this information to receive, route and answer your inquiry and maintain related correspondence. We do not add you to a marketing list because you contact us. The form has no account creation, payment or file-upload feature.

Technical information: when you visit, Cloudflare receives your IP address, request time, requested URL, browser or user-agent information and response information to deliver and protect the site. URLs may contain query parameters; do not put personal information in a URL. The application does not record message bodies in server logs. The logging settings and limited anti-abuse records are described below.

Map choice: the browser remembers whether you allowed Google Maps, the notice version, and the time and expiry of that choice. It is used only to respect your preference. If you allow Maps, Google receives map-related connection information as described below.

These uses serve the purposes of responding to a request you initiate, operating and securing the website, respecting your choices, meeting applicable legal obligations and handling legal claims. Permission for Google Maps is separate from sending an inquiry. Where a law requires consent, we request it before the relevant optional processing; you may withdraw map permission through Privacy settings. We do not use this website for automated decisions with legal or similarly significant effects.

Who receives information

The company and its authorized personnel receive inquiries at jasonhundhausen@montanafinancialadvisorsinc.com. Access is limited to people who need it to respond, administer the systems or meet legal duties.

Cloudflare, Inc. provides Workers hosting, Static Assets, website security and short-lived anti-abuse controls. The Worker receives and validates inquiry form submissions and passes the email to Resend for delivery. See Cloudflare Privacy Policy and Cloudflare's Data Processing Addendum.

Resend (Plus Five Five, Inc.) sends inquiry emails to the company’s designated Dynadot Email mailbox. To send the email and manage its delivery, Resend processes the submitted name, email address, optional phone number and message, along with email delivery information. The visitor’s email address is used as the reply address.

Dynadot Inc. provides the destination corporate Email mailbox and processes incoming and outgoing correspondence. There is no Cloudflare Email Routing or automatic forwarding configured for this website. The company uses a processing agreement with Dynadot for this service. See Dynadot Privacy Policy (Part II).

Google LLC and the relevant Google service entities provide the optional map. Only after you enable it does the embedded map send your IP address, browser and request information to Google, which may use cookies or similar storage under its own policies. See Google Privacy Policy. Clicking a directions link opens Google's website separately.

Information may also be disclosed to authorities or professional advisers where required by law or necessary to establish, exercise or defend legal claims. We do not use an outside form-collection service, advertising pixel, analytics tag or social widget on this website.

Security and technical records

The form uses HTTPS, server-side validation, a fixed recipient, origin checks, a hidden spam field and rate and duplicate controls. The site stores keyed, pseudonymous anti-abuse digests and delivery state in Cloudflare Durable Objects for a ten-minute active window, with expiry and scheduled deletion. Raw IP addresses and message contents are not stored in these records; message fields are processed in memory to send the email. Pseudonymous records can still be personal information.

Persistent Worker invocation logs and traces are disabled in this deployment configuration. The application creates no message archive or incident export, and does not configure Logpush, Tail Workers or Cloudflare Web Analytics. Cloudflare can still process service, security and account records. Disabling application logging does not erase these separate provider records. No internet or email service can guarantee absolute security.

How long information is kept

• Ordinary inquiries and related incoming and outgoing correspondence: 90 days after the inquiry is closed.
• Company-created email backups: 30 days from creation of each backup.
• Dynadot internal working copies and backups: under the service arrangements confirmed by the company, deletion within 30 days after the original item is deleted or the agreement ends. This is a different starting event from the company's backup period.
• Resend: for active Free, Pro and Scale accounts, Resend states that it retains email content and logs for 30 days and keeps backup copies for seven days. See Resend’s retention information.
• Application anti-abuse records: a ten-minute active window with expiry and scheduled deletion; not a long-term message archive.
• Browser map preference: up to 365 days, unless cleared earlier or replaced following a material notice change. Google's own storage follows its policies and settings.

Other Cloudflare operational, security and account data are retained under its service conditions according to the type of record and applicable legal or security needs; they do not all use one fixed retention period. We do not separately archive or export these provider records through the website.

Information needed for a legal obligation or to establish, exercise or defend legal claims may be kept only to the extent and for as long as that need continues. This can include transaction or regulated records if a separate engagement is established. The ordinary inquiry period does not override a mandatory retention obligation. The company administers deletion and reviews exceptions.

Processing locations and contractual safeguards

The company is based in Montana, United States. Dynadot Email stores and processes email in the United States under the company's service arrangements. Cloudflare is based in the United States and uses global infrastructure and subprocessors, so processing and access may occur in the United States and other countries. Resend stores email content and delivery logs in the United States. Optional Google Maps also involves Google's international infrastructure.

The company's Cloudflare service is governed by Cloudflare's applicable Data Processing Addendum. Its Dynadot Email processing agreement includes Standard Contractual Clauses for relevant restricted transfers. Cloudflare's DPA also provides safeguards, including Standard Contractual Clauses where applicable. The Resend Data Processing Addendum includes Standard Contractual Clauses for relevant restricted transfers. These contractual safeguards apply where the relevant transfer rules require them; they do not mean this US website is hosted only in Europe. Contact the company for information about the arrangements and safeguards. No separate Dynadot Data Privacy Framework certification is claimed.

Advertising, sale and privacy signals

This website does not sell personal information, share it for cross-context behavioral advertising, run targeted advertising tags or profile visitors for significant automated decisions. Microsoft UET, Microsoft Clarity, Google Analytics, Google Tag Manager and remarketing tags are absent. The website sends no form data or conversion events to Microsoft. Advertising on a platform is separate from installing tracking on this website.

Global Privacy Control and similar opt-out signals do not enable tracking: the website's sale and targeted-advertising processing remains off. Google Maps stays off unless you expressly enable it. A map setting does not opt you out of unrelated processing in another service or an existing business relationship. Contact us for any applicable opt-out request.

Your choices and privacy rights

You can use the site, email, phone and inquiry form without enabling Maps. Use Privacy settings on any page to allow, reject or withdraw map permission. Withdrawal removes embedded maps and stops new map loads; it cannot undo data already received by Google or delete Google's existing cookies. Those can be managed in your browser or Google settings.

To request access, correction, deletion, a portable copy, or an applicable opt-out, email jasonhundhausen@montanafinancialadvisorsinc.com with “Privacy request”, or contact us by phone or mail. Explain your request without sending passwords, account numbers or identity documents. We use only information reasonably necessary to verify a request where verification is permitted or required. Authorized agents, parents and guardians may act where applicable law allows.

Where the Montana Consumer Data Privacy Act applies, we respond without undue delay and within 45 days of receipt. A permitted extension of up to 45 additional days is explained within the initial period. Rights include access, correction, deletion, portability and opting out of sale, targeted advertising and significant-decision profiling, subject to legal exceptions. Requests are free at least once per 12 months under that Act; legally permitted exceptions are explained if relevant. We do not unlawfully discriminate for exercising rights.

If we decline a request, we explain the reason and how to appeal. Send an appeal to the same email with “Privacy appeal”. Where the Montana Act applies, we respond in writing within 60 days of receiving an appeal. If an appeal is denied, you may contact the Montana Attorney General's Office of Consumer Protection. Other applicable state or federal laws may provide different rights, deadlines or exceptions; we assess the request under the law that applies.

Children and sensitive information

This site is intended for general business inquiries, not services directed to children. We do not knowingly solicit personal information from children under 13, or use information about known minors for sale, targeted advertising or significant-decision profiling. If a child has submitted information, contact us so we can address it. A parent or guardian may make an applicable request. Protections for minors are not limited to the under-13 statement.

This notice covers the general website and inquiry channel. Do not send financial account information, trade instructions, investment holdings or identity documents here. Financial products, advice, account opening and regulated client relationships require separate arrangements and any applicable financial privacy notice. This website notice does not replace a notice required under GLBA or Regulation S-P, and no financial-sector exemption from privacy law is asserted.

Changes to this notice

We update this notice when our website practices materially change. The displayed revision date is fixed and does not change to match a visitor's clock. Where required, we notify affected people about material changes and provide an opportunity to withdraw consent before new processing begins.