Privacy Policy

Last updated: August 25, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. We collect, use, and disclose Your information as described in this Privacy Policy and, where required by applicable law, only where We have a valid legal basis to do so, including Your consent (where consent is required).

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access Our Service or parts of Our Service.

• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.

• Company (referred to as either "the Company", "We", "Us", or "Our" in this Privacy Policy) refers to Foundation88, owned and operated under KMG Holdings Group LLC, Mauldin, SC.

• Cookies are small files placed on Your computer, mobile device, or any other device by a website, containing the details of Your browsing history on that website, among its many uses.

• Country/State refers to: South Carolina, United States.

• Device means any device that can access the Service, such as a computer, a cell phone, or a digital tablet.

• Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. We use "Personal Data" and "Personal Information" interchangeably unless a law uses a specific term.

• Service refers to the Website.

• Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, provide the Service on behalf of the Company, perform services related to the Service, or assist the Company in analyzing how the Service is used.

• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

• User means any individual who accesses or uses the Service.

• Website refers to Foundation88, accessible from [https://foundation88consulting.com/](https://foundation88consulting.com/).

• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Information

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• First name and last name

• Email address

• Phone number (for SMS/customer service)

• Billing address and payment information (processed via Stripe)

Usage Data

Usage Data is collected automatically when using the Service. It may include information such as Your Device's Internet Protocol address (IP address), browser type, browser version, the pages of Our Service that You visit, the time and date of Your visit, time spent on those pages, unique device identifiers, and other diagnostic data.

Payment Processing (Stripe)

We provide paid products and/or services within the Service. In those cases, we use third-party services for payment processing (e.g., payment processors).

We will not store or collect Your payment card details. That information is provided directly to Our third-party payment processor, Stripe, whose use of Your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

You can view Stripe’s Privacy Policy at: https://stripe.com/privacy

Tracking Technologies and Cookies

We use tracking technologies (such as cookies and web beacons) to track activity and improve Our Service.

• Necessary / Essential Cookies: These Session Cookies are essential to provide You with services available through the Website and prevent fraudulent use.

• Cookies Policy / Notice Acceptance: Persistent Cookies that identify whether users have accepted the use of cookies on the Website.

• Functionality Cookies: Persistent Cookies that allow Us to remember choices You make (such as language or login details) to provide a personal experience.

Where required by law, We use non-essential cookies only with Your consent. You can withdraw or change Your consent at any time through Your browser settings.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain Our Service, including monitoring usage.

• To perform contracts, including the purchase of services or processing payments via Stripe.

• To contact You by email, telephone, SMS, or equivalent electronic communications regarding updates, security alerts, or operational notices.

• To provide marketing and general information about services similar to those you purchased, unless you opt out.

• For business transfers or restructuring, such as a merger, acquisition, or asset transfer.

Text Messages (SMS) Privacy Notice

If You opt in to receive text messages from Us, We will collect Your phone number, consent date, and delivery records.

No mobile information will be shared with or sold to third parties or affiliates for marketing or promotional purposes. Phone numbers and consent records are never shared with anyone except the essential Service Providers that handle delivery.

You may opt out at any time by replying STOP. Reply HELP for support. Message & data rates may apply.

Privacy Rights Under Specific Regulations

1. General Data Protection Regulation (GDPR) — EEA & UK Users

If You are located in the European Economic Area (EEA) or the United Kingdom, Our legal basis for collecting and using Your Personal Data depends on the data concerned and the specific context. Under GDPR, You have the right to:

• Access, update, or delete the information We have on You.

• Rectify any incorrect or incomplete information.

• Object to Our processing of Your Personal Data.

• Request restriction of processing Your personal information.

• Data Portability: Request a copy of Your data in a structured, machine-readable format.

• Withdraw Consent: Withdraw consent at any time where We relied on consent to process Your data.

2. California Privacy Rights (CCPA / CPRA & CalOPPA Notice)

This section applies strictly to California residents under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and CalOPPA.

• Right to Know and Access: You have the right to request information regarding the categories and specific pieces of personal data we have collected about you in the past 12 months.

• Right to Delete: You have the right to request the deletion of Your personal data, subject to certain legal exceptions.

• Right to Correct: You have the right to request correction of inaccurate personal data maintained about you.

• Do Not Sell or Share My Personal Information: We do not sell Your personal information or share it with third parties for cross-context behavioral advertising.

• Non-Discrimination: We will not discriminate against You for exercising any of Your privacy rights.

• California Do Not Track Notice: Our Website currently does not alter its behavior upon receiving "Do Not Track" (DNT) browser signals, but you can manage cookie preferences in your browser settings.

To exercise any of these rights under GDPR or CCPA/CPRA, please contact Us at admin@foundation88consulting.com.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as necessary for the purposes set out in this policy, including complying with legal obligations, resolving disputes, and maintaining accounting records.

• Account & Support Data: Retained for the duration of the relationship plus up to 24 months after closure.

• Website Analytics & Logs: Retained up to 24 months.

• Financial/Stripe Transaction Data: Retained for up to 7 years as required by tax and accounting authorities.

Children's Privacy

Our Service is not directed to anyone under the age of 16. We do not knowingly collect personal information from children under 16. If You become aware that a child has provided Us with Personal Data, please contact Us immediately.

Contact Us

If You have any questions about this Privacy Policy or wish to exercise Your privacy rights, You can contact Us:

• By Email: admin@foundation88consulting.com

• Company: Foundation88 (a subsidiary of KMG Holdings Group LLC)

• Location: Mauldin, SC, United States