Privacy Policy

1. Information We Collect

We collect information that you voluntarily provide to us, as well as data automatically generated by your active web session:

• Personal & Business Data: Name, business entity name, email address, phone number, billing addresses, and social media account credentials (when explicitly provided by you for active service management).
• Analytical & Tracking Data: IP addresses, browser types, unique device identifiers, page navigation routes, session duration, referral sources, and total time spent on our site.
• Communication Logs: Full record of message history submitted via phone, SMS, contact forms, email, or direct messaging channels for service and support purposes.
• Payment Data: We do not store raw payment card details. Payment processing is handled by trusted third-party payment processors and digital payment platforms, including PayPal, Cash App, and Zelle, each of which maintains its own security, compliance, and privacy standards. We receive only transaction confirmation data necessary to fulfill and record your service agreement.
• Custom Application & QR Code Data: Data entered into Client-hosted Custom Accounting Web Applications, or data generated through Digital Menu QR Code systems, is processed solely for the purpose of operating the applicable software and supporting server infrastructure. This data is not used for external marketing purposes, shared with third parties for commercial gain, or accessed beyond what is operationally necessary to maintain system functionality on behalf of the Client, unless explicitly authorized by the Client or required by applicable law, court order, or legitimate security necessity.

2. Cookies, Pixels, and Tracking Tools

Our website may utilize cookies, web beacons, tracking pixels, and browser scripts — including tools such as Google Analytics 4, Meta Pixel, TikTok Pixel, and Quora Tracking Tools — to monitor user behavior, optimize system performance, and support targeted advertising campaigns where applicable and lawfully permitted.

Consent Requirement: Non-essential cookies and tracking tools — including analytics pixels, marketing pixels, retargeting scripts, and behavioral tracking — are treated as consent-dependent and will only be activated where a valid consent signal is recorded. Continued use of this website alone does not constitute a valid consent signal for non-essential tracking or advertising data processing. Essential cookies required for core site functionality (navigation, security, session management) operate as a technical necessity without requiring consent. You may modify your browser settings to manage, reject, or delete cookies at any time. Disabling non-essential cookies will not impair core website functionality.

• Essential Cookies: Required for core website functionality such as navigation, security, and session management. These cannot be disabled without affecting core features.
• Analytics Cookies: Collect anonymized data about visitor interactions (pages viewed, session duration, referral sources) used to improve content and performance.
• Marketing & Retargeting Pixels: Used by platforms such as Meta, TikTok, and Google to track cross-site behavior and deliver targeted advertising. These tools are activated only where a valid consent signal is recorded and remain disabled by default in all other conditions.
• Functional Cookies: Allow the website to remember user preferences and deliver enhanced, personalized functionality.

All tracking tools are operated on a purpose-limited, minimal, and non-intrusive basis. Marketing and advertising tracking is strictly separated from operational and analytical data use and will not be inferred from or combined with operational service data unless a valid consent signal is recorded and explicit authorization is confirmed.

3. How We Use and Process Data

We process collected personal and usage data for the following operational, analytical, and service-delivery purposes. Where a valid consent signal is recorded, data may additionally be used for marketing and advertising purposes as described in Section 2. We process data as follows:

• Deliver, maintain, protect, and continuously support our web development, content production, social media management, and business support services.
• Process and manage secure payments and handle monthly recurring service invoicing.
• Communicate project milestones, system maintenance windows, service updates, invoices, and relevant promotional offers.
• Schedule and manage client consultations, appointments, and calendar coordination.
• Identify, monitor, and eliminate malicious tracking attempts, security threats, and server infrastructure abuse.
• Improve our website, service offerings, and overall client experience based on aggregate usage analytics.
• Comply with applicable state and federal legal obligations.
• Operate and maintain Client-facing Custom Accounting Web Applications and Digital Menu QR Code systems. Data entered into or generated by these tools is processed solely to deliver the requested software functionality and maintain infrastructure performance. Such data is not monitored, analyzed, or used for marketing or external purposes beyond operational necessity, unless required by applicable law or authorized by the Client in writing.

4. Data Sharing and Third-Party Disclosures

We do not sell, rent, or lease your private personal data to any external third parties for commercial gain. We disclose data exclusively to trusted third-party service providers that are critical to executing our standard business operations, including:

• Payment gateway processors and digital payment platforms — including PayPal, Cash App, and Zelle — for secure transaction handling and payment confirmation.
• Web hosting providers, cloud infrastructure services, and domain registrars.
• Analytical platforms and marketing tools for performance tracking — activated only under consent conditions where applicable and lawfully permitted.
• Scheduling and calendar management tools for client appointment coordination.
• Judicial or regulatory authorities, if strictly required to comply with an enforceable subpoena, active legal dispute, or applicable state and federal laws.

All third-party providers we work with are expected to handle your data responsibly in accordance with their own privacy policies and applicable law.

5. Client Credential and Account Security

For clients purchasing social media management, Google Business Profile services, or custom POS system integrations, you may be required to share sensitive login credentials and access parameters. For payment transactions, the Service Provider uses authorized payment networks — PayPal, Cash App, Zelle, and Stripe — and does not collect raw credit card numbers, bank routing numbers, or online banking portal passwords through any channel. While we treat all client credentials with strict professional confidentiality, utilize secure credential management practices, and limit access on a strict need-to-know basis consistent with the Principle of Least Privilege, the client remains solely responsible for:

• Establishing and maintaining complex, unique passwords across all managed platforms.
• Keeping Two-Factor Authentication (2FA) continuously active across all channels.
• Flagging and initiating the revocation of access credentials upon service termination or suspected compromise, and rotating credentials as recommended by the Service Provider. The Service Provider will notify the Client to confirm credential revocation and recommend credential rotation but will not perform irreversible account-level actions without Client confirmation.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, maintain accurate business records, or as required by applicable Maryland state and federal law. Client project data, communication logs, and business records are retained for the duration of the service relationship and a reasonable period thereafter for legal, accounting, and business continuity purposes. You may request deletion of your personal data by contacting us directly, subject to any legal retention requirements.

7. Your Rights

You have the right to: request access to the personal information we hold about you; request corrections to inaccurate or outdated information; request deletion of your personal data where no legal obligation requires its retention; withdraw consent for marketing communications at any time; and request a copy of your data in a portable format where technically feasible. To exercise any of these rights, please contact us through the contact section of this website or call or text us directly.

8. Children's Privacy

This website and our services are not directed at, intended for, or designed to attract individuals under the age of 13. We do not knowingly collect, store, or process personal information from children under 13. In the event we discover or are notified that personal data belonging to a child under the age of 13 has been submitted without appropriate parental consent, we will immediately cease processing that data and take prompt steps to permanently purge it from all records, systems, and backups where technically feasible. If you believe a child has provided personal information to us without appropriate parental consent, please contact us immediately so we may take appropriate remediation action.

9. Data Boundaries & System Compliance Principles

The following structural principles govern how data is handled across all services, systems, and operational contexts:

• Consent-Dependent Tracking: All non-essential tracking, analytics pixels, advertising pixels, and behavioral analytics tools are disabled by default and activated only upon confirmed explicit user consent. Consent is never assumed from continued website use alone.
• Data Use Separation: Operational data (service delivery, billing, security), analytical data (aggregated performance metrics), and marketing data (promotional targeting) are strictly separated. Marketing permissions are never inferred from operational or support data.
• Commercially Reasonable Safeguards: The Service Provider applies commercially reasonable, industry-standard data protection safeguards and best-effort security practices based on current technical limitations. No absolute guarantee of data security is made or implied.
• No Autonomous Enforcement: Data-related compliance actions — including account flags, service suspensions, and data access changes — are escalated for human review rather than executed autonomously. The Service Provider operates as a compliance-aware service entity, not an autonomous legal enforcement system.
• Payment Data Boundary: Only transaction IDs, payment status metadata, and invoice references are processed internally. Raw card data, banking credentials, and financial authentication details are never collected, stored, or processed by the Service Provider.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our data practices, service offerings, or applicable legal requirements. We will post the revised policy on this page with an updated effective date. Continued use of this website or our services following any policy update constitutes your acceptance of the revised terms. We encourage you to review this policy periodically.

11. Contact Information

If you have any questions regarding this Privacy Policy, your personal information, your privacy rights, or wish to submit a privacy-related request, please contact us using one of the following methods:

NextGEN Growth Solutions
📱 Call or Text: (227) 278-6215
✉️ Email: contact@gonextgengrowthsolutions.com
📍 Charles County, Maryland, USA

Privacy-related requests will be reviewed and responded to within a commercially reasonable timeframe, subject to identity verification where appropriate and applicable law.