PRIVACY POLICY FOR

BDB WEALTH ADVISORS LLC

714-767-5324

PRIVACY POLICY


Investment advisers are required by law to inform their clients of their policies regarding privacy of client information. We are bound by professional standards of confidentiality that are even more stringent than those required by law.

Federal law gives the customer the right to limit some but not all sharing of personal information. It also requires us to tell you how we collect, share, and protect your personal information.


TYPES OF NONPUBLIC PERSONAL INFORMATION (NPI) WE COLLECT

We collect nonpublic personal information about you that is either provided to us by you or obtained by us with your authorization. This can include but is not limited to your Social Security Number, Date of Birth, Banking Information, Financial Account Numbers and/or Balances, Sources of Income, and Credit Card Numbers or Information. When you are no longer our customer, we may continue to share your information only as described in this notice.

PARTIES TO WHOM WE DISCLOSE INFORMATION

All Investment Advisers may need to share personal information to run their everyday business. In the section below, we list the reasons that we may share your personal information:

  • For everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus;

  • For our marketing – to offer our products and services to you;

  • For joint marketing with other financial companies;

  • For our affiliates’ everyday business purposes – information about your transactions and experiences and information about your creditworthiness; or

  • For non-affiliates to market to you.


If you are a new customer, we may begin sharing your information on the day you sign our agreement. When you are no longer our customer, we may continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing.

PROTECTING CONFIDENTIALITY OF CURRENT AND FORMER CLIENT’S INFORMATION

BDB Wealth Advisors LLC maintains a comprehensive Written Information Security Program (WISP) designed to protect your personal information from unauthorized access, use, disclosure, or destruction. Our security measures comply with applicable federal and state law, including the Gramm-Leach-Bliley Act and applicable data security requirements under Pennsylvania, Illinois, and Texas law.

Technical Safeguards

  • Encryption at Rest: Full-disk encryption is enabled on all firm-owned and personally owned devices used for firm business.

  • Encryption in Transit: All data transmitted over public or untrusted networks uses TLS 1.2 or higher. Transmission of client personal information via unencrypted email is strictly prohibited.

  • Sensitive Email Controls: Emails containing particularly sensitive client information such as Social Security numbers, account numbers, or tax data are transmitted using a system that prevents forwarding, copying, downloading, or printing. 

  • Multi-Factor Authentication (MFA): MFA is required to access all firm systems, email platforms, and cloud-based applications that store or process client data.

  • Encrypted VPN: All remote access to firm systems is conducted exclusively through an encrypted virtual private network. Employees may not access firm systems or client data over unsecured public Wi-Fi without VPN protection.

  • Approved Systems Only: Client personal information may be stored only in firm-approved systems including our client relationship management, financial planning, custodial, portfolio analytics, and meeting intelligence platforms each of which restricts access to authorized personnel. Storage of client information outside these approved systems is prohibited.

Physical Safeguards

  • Physical client files and documents containing personal information are stored in locked filing cabinets within a secured office accessible only to authorized personnel.

  • A clean desk policy is in effect at all times. Printed documents containing client information must be retrieved immediately from printers and secured when not in active use.

  • Privacy screen filters are required whenever client data is visible on a device screen in any shared or public location.

  • Workstations are configured to lock automatically after five minutes of inactivity.

  • Laptop computers are stored in a locked space when not in use and are never left unattended in unsecured locations.

Access Controls and Authentication

  • Access to client information is restricted to employees who need it to perform their job functions, governed by role-based access controls reviewed at least annually.

  • All accounts require passwords meeting minimum complexity requirements, changed at least every 90 days, and never shared with any other individual.

  • Access credentials for departing employees are revoked within one business hour of termination or resignation.

Employee Training and Annual Security Reviews

  • All employees receive cybersecurity training upon hire and at least annually, covering information security responsibilities, phishing and social engineering recognition, secure remote work practices, client data handling requirements, and incident reporting.

  • Simulated phishing exercises are conducted at least quarterly, with targeted remedial training for employees who fail.

  • Annual cybersecurity risk assessments, penetration testing, and vulnerability scanning of critical systems are conducted, with all high-risk findings remediated promptly.

Third-Party Vendor Oversight

All third-party service providers that receive, maintain, process, or access client personal information on our behalf are contractually required to: (a) implement and maintain appropriate safeguards to protect client information against unauthorized access or use; and (b) notify BDB Wealth Advisors LLC within 72 hours of discovering any unauthorized access to a customer information system. We conduct initial and ongoing due diligence on all such vendors and review vendor agreements at least annually.

Incident Response and Breach Notification

BDB Wealth Advisors LLC maintains a written Incident Response Program. In the event of a confirmed security breach, we will notify affected individuals without unreasonable delay and in compliance with all applicable state laws, including the Pennsylvania Breach of Personal Information Notification Act (BPINA), the Illinois Personal Information Protection Act (PIPA), and the Texas Business and Commerce Code. Where required by law, we will also provide affected individuals with access to credit monitoring services at no cost.

Secure Disposal

Physical records containing personal information are destroyed using a cross-cut shredder or equivalent secure method that renders the information unreadable. Electronic records are permanently deleted or physically destroyed using industry-standard secure erasure methods prior to device decommissioning. Third-party vendors engaged to dispose of client information on our behalf are contractually required to use equally protective disposal methods.

FEDERAL LAW GIVES YOU THE RIGHT TO LIMIT SHARING – OPTING OUT

Federal law allows you the right to limit the sharing of your NPI by “opting out” of the following: sharing for affiliates’ everyday business purposes information about your creditworthiness; or sharing with affiliates or non-affiliates who use your information to market to you. State laws and individual companies may give you additional rights to limit sharing. To opt out, please contact us by phone at 714-767-5324 or by email at danielle@bdbwealth.com. We will honor your opt-out request within 30 days.

DEFINITIONS: Affiliates — companies related by common ownership or control. They can be financial and non-financial companies. Non-affiliates — companies not related by common ownership or control. They can be financial and non-financial companies. Joint marketing — a formal agreement between non-affiliated financial companies that together market financial products or services to you.


Please call if you have any questions. Your privacy, our professional ethics, and the ability to provide you with quality financial services are very important to us.

Text Message Communications (“Redtail Speak”)

BDB Wealth Advisors LLC may use a compliant text messaging platform (Redtail Speak) to communicate with clients regarding appointments, account updates, reminders, and other investment advisory-related information. These communications are intended to enhance the client experience and provide timely updates in a secure and compliant manner.

Clients may opt in to receive such text messages by providing a mobile phone number and indicating their consent to receive texts from BDB Wealth Advisors LLC. By opting in, clients acknowledge and agree to the use of text messaging for advisory-related communications.

Message frequency may vary depending on account activity and communication needs. Standard message and data rates may apply.

Clients may opt out of receiving text messages at any time by replying “STOP” to any message received, or by contacting us directly using the information provided in this policy.

We do not share your mobile number or text message content with third parties for marketing purposes. All text message records are maintained in accordance with regulatory requirements and our internal record-keeping policies.

If you choose to Opt-In, you can do so by visiting:

www.BDBwealth.com/text-messaging-consent

Website Privacy Policy

Effective Date: 5/26/2025

BDB Wealth Advisors LLC (“we,” “us,” or “our”) respects your privacy and is committed to protecting any information collected through your use of our website, www.bdbwealth.com (the “Site”). This Website Privacy Policy explains how we collect, use, and protect information gathered from visitors to the Site. It applies only to information collected online and does not extend to offline or account-based data already covered under our full client Privacy Policy.

Information We Collect

When you visit our Site, we may collect the following types of information:

1. Personal Information You Provide Voluntarily

This may include:

  • Name, email address, phone number (e.g., via contact or scheduling forms)

  • Other information you provide when submitting an inquiry

2. Automatically Collected Information

We may use cookies or other technologies to collect:

  • IP address and device information

  • Browser type, operating system, and browsing behavior

  • Pages visited, time spent, and referral sources

We use analytics tools, such as Google Analytics, to better understand how users interact with our Site.

How We Use Your Information

We use your information for purposes such as:

  • Responding to inquiries or requests submitted through the website

  • Sending educational or promotional content (if you opt in)

  • Monitoring and improving our website performance and user experience

  • Complying with legal obligations

We do not sell your personal information.

Cookies and Tracking Technologies

Our Site may use cookies or similar technologies to enhance user experience and collect statistical data. You may choose to disable cookies through your browser settings; however, some features of the Site may not function properly if you do.

Third-Party Services

We may use third-party tools and integrations (such as Squarespace, Google Analytics, and email marketing platforms) that collect, store, or process information on our behalf. These providers have their own privacy practices, which we encourage you to review.

Your Rights and Choices

Depending on your location, you may have the right to:

  • Request access to the personal information we hold about you

  • Request correction or deletion of that information

  • Opt out of receiving marketing emails by clicking “unsubscribe” at the bottom of any email

To exercise any of these rights, please contact us using the information below.

Data Security

We take reasonable steps to protect your personal information from unauthorized access, disclosure, or misuse. However, no internet transmission is completely secure, so we cannot guarantee absolute security.

Children’s Privacy

This Site is not directed to children under 13. We do not knowingly collect or store information from anyone under 13 years of age.

Changes to This Policy

We may update this Website Privacy Policy from time to time. Any changes will be posted on this page with a revised “Effective Date.”

Contact Us

If you have any questions about this Website Privacy Policy or your personal data, you may contact us at:

BDB Wealth Advisors LLC
365 South Camp Street, Red Lion, PA 17356
(714) 767-5324
Brian@BDBwealth.com