01 Overview

CSM Synergy ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at csmsynergy.com, use our services, or make payments through our platform.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access our site or use our services.

Short version: We collect information you give us, information about how you use our site, and payment information processed securely through Stripe. We never sell your personal data. We use it only to provide and improve our services.

02 Information We Collect

Information You Provide Directly

  • Contact information — name, email address, phone number, mailing address
  • Business information — company name, builder type, location, business size
  • Communications — messages you send through our contact form, emails, or SMS
  • Account information — if you create an account with us for any of our programs
  • Survey and form responses — including the Chaos Scoring Assessment and Brainstorm Session booking form

Information Collected Automatically

  • Usage data — pages visited, time spent, links clicked, referring URLs
  • Device information — browser type, operating system, IP address
  • Location data — general geographic location based on IP address
  • Cookies and tracking data — see Section 7 for full details

Information from Third Parties

  • GoHighLevel (GHL) — our CRM platform may capture lead and contact information when you interact with our forms, funnels, or booking calendars
  • Stripe — payment processing information as described in Section 3
  • SmartBuild / Idearoom — if you submit a quote or configure a building through connected platforms, that information may be passed to our CRM

03 Payment Data & Stripe

S

CSM Synergy uses Stripe to process all payments. Stripe is a PCI-DSS Level 1 certified payment processor. We do not store, transmit, or have access to your full credit card numbers, bank account numbers, or other sensitive payment details — all such information is handled directly and securely by Stripe.

What Payment Data Stripe Collects

When you make a payment through our website, Stripe collects:

  • Credit or debit card details (card number, expiration, CVV)
  • Billing name and address
  • Email address associated with the payment
  • IP address and device information for fraud prevention
  • Transaction amount and details

What We Receive from Stripe

After a successful payment, CSM Synergy receives only:

  • Confirmation that the payment was processed
  • Last four digits of the card used
  • Billing name and email address
  • Transaction ID and amount

How Payment Data Is Used

  • To process and confirm your purchase or service enrollment
  • To send receipts and transaction confirmations
  • To handle refunds, disputes, or billing inquiries
  • To maintain transaction records as required by law

Stripe's Privacy Policy

By making a payment through our site, your payment data is also subject to Stripe's Privacy Policy, available at stripe.com/privacy. We encourage you to review it.

Important: CSM Synergy never stores your full payment card information on our servers. All payment data is transmitted directly to Stripe using industry-standard SSL encryption. We are not responsible for the privacy practices of Stripe — please review their policy for full details.

04 How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

  • To provide consulting, coaching, training, and CRM services you've purchased
  • To schedule and conduct Brainstorm Sessions, coaching calls, and group programs
  • To process payments and manage billing through Stripe
  • To deliver course content, program materials, and resources

Communication

  • To respond to your inquiries and customer service requests
  • To send program updates, session reminders, and administrative notices
  • To send marketing communications you've opted into (with easy opt-out)
  • To send SMS messages you've consented to receive

Business Operations

  • To operate and improve our website and services
  • To analyze usage patterns and optimize user experience
  • To prevent fraud and protect the security of our platform
  • To comply with legal obligations and enforce our terms

05 Sharing Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

Service Providers

We share information with trusted third-party service providers who assist in operating our business:

  • Stripe — payment processing
  • GoHighLevel (GHL) — CRM, email, and SMS communications
  • Google — analytics and workspace tools
  • Mailgun — email delivery services
  • Zoom — video conferencing for coaching calls

All service providers are contractually required to keep your information confidential and use it only for the services they provide to us.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests such as subpoenas, court orders, or government regulations.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

We never sell your personal data to data brokers, advertisers, or any third parties for monetary compensation.

06 SMS Communications

Opt-In Consent

By providing your phone number and submitting any form on our website, you are consenting to receive SMS text messages from CSM Synergy related to your inquiry, booking, or program enrollment. Message and data rates may apply.

Types of SMS Messages

  • Appointment confirmations and reminders
  • Program updates and session notifications
  • Follow-up messages related to your inquiry
  • Marketing messages (only if separately opted in)

Opt-Out

You can stop receiving SMS messages at any time by replying STOP to any message. Reply HELP for assistance. After opting out, you will receive one final confirmation message.

No Sharing of SMS Data

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent will not be shared with any third parties under any circumstances.

07 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience and analyze site usage.

Types of Cookies We Use

  • Essential cookies — required for the site to function (login sessions, form security)
  • Analytics cookies — help us understand how visitors use our site (Google Analytics)
  • Marketing cookies — track effectiveness of our marketing campaigns
  • Preference cookies — remember your settings and preferences

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, though this may affect the functionality of our website. For more information on managing cookies, visit allaboutcookies.org.

Stripe.js and Payment Cookies

When you make a payment, Stripe may set cookies for fraud detection and security purposes. These are governed by Stripe's Cookie Policy at stripe.com/legal/cookies-policy.

08 Data Retention

We retain your personal information for as long as necessary to provide our services and comply with our legal obligations:

  • Contact and inquiry data — retained for 3 years after last contact
  • Client and program data — retained for the duration of our relationship plus 5 years
  • Payment transaction records — retained for 7 years as required by tax and financial regulations
  • Marketing opt-out records — retained indefinitely to honor your preferences
  • Website analytics data — retained for 26 months

When your data is no longer needed, we securely delete or anonymize it.

09 Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures Include

  • SSL/TLS encryption for all data transmitted to and from our website
  • Secure payment processing through Stripe (PCI-DSS Level 1 certified)
  • Access controls limiting who within our organization can access personal data
  • Regular security assessments of our systems and service providers
  • Two-factor authentication on administrative accounts

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry best practices.

10 Your Rights

You have the following rights regarding your personal information:

  • Access — request a copy of the personal information we hold about you
  • Correction — request correction of inaccurate or incomplete information
  • Deletion — request deletion of your personal information (subject to legal retention requirements)
  • Opt-out — opt out of marketing communications at any time
  • Data portability — request your data in a portable format
  • Restriction — request that we restrict processing of your data in certain circumstances
  • Objection — object to processing of your personal data for direct marketing

To exercise any of these rights, contact us at carolyn@csmsynergy.com. We will respond within 30 days.

11 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties we share it with.

Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale

We do not sell personal information. You therefore have no need to opt out of a sale of your personal information.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information: identifiers (name, email, phone), commercial information (transaction history), internet activity (browsing behavior on our site), and geolocation data (general location from IP).

To submit a CCPA request, contact us at carolyn@csmsynergy.com or call 816-300-3600.

12 Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at carolyn@csmsynergy.com and we will delete it promptly.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you by email if you are an active client or subscriber
  • Post a notice on our website for significant changes

Your continued use of our website or services after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 30 days.