Privacy Policy
Last Updated: January 1, 2026
1. Introduction and Scope
Cortland Business Brokers ("we," "us," or "our") is a California-licensed business brokerage operating under California Department of Real Estate License #02079242. We provide business sale advisory, business valuation, and merger and acquisition intermediary services to buyers and sellers of privately held businesses across California, Nevada, Arizona, Colorado, New Mexico, and Idaho.
This Privacy Policy explains how we collect, use, disclose, retain, and protect the personal information of individuals who visit our website at cortlandbusinessbrokers.com, submit inquiries or valuation requests, register as buyers or sellers, or otherwise interact with our firm digitally or in person.
This Policy applies to all personal information we collect from:
- Visitors to our website
- Prospective sellers who submit valuation requests or listing inquiries
- Prospective buyers who register for deal flow access
- Individuals who contact us by phone, email, or web form
- Parties who participate in active transactions managed by our firm
This Policy is intended to comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2022 (CPRA), and all associated regulations effective as of January 1, 2026, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General.
If you have questions about this Policy or wish to exercise your privacy rights, please contact us using the information in Section 13.
2. Personal Information We Collect
We collect personal information that you voluntarily provide to us and information that is automatically collected when you visit our website. The categories below reflect the statutory classifications under the CCPA/CPRA.
A. Identifiers
Information that identifies you as an individual, including: full name, business name, legal entity name, mailing/business address, email address, phone number, and IP address (collected automatically via web analytics).
B. Business and Financial Information
Information you provide in connection with a business sale, valuation, or acquisition inquiry, including: annual revenue, net income, and earnings figures; business operating history and ownership duration; employee headcount and organizational structure; equipment, asset, and inventory data; customer and contract information; and financial statements, tax returns, and profit and loss records.
C. Sensitive Personal Information (SPI)
Under the CPRA, the following categories of data are classified as Sensitive Personal Information and are subject to heightened handling protections: government-issued identification numbers (driver's license, passport, EIN/SSN), financial account credentials, banking information (escrow processing and proof-of-funds verification), and private communications exchanged through our website portal or direct correspondence.
We collect Sensitive Personal Information only for the purpose of performing the specific transaction-related services you have engaged us for. We do not use SPI for behavioral profiling, cross-context targeted advertising, or secondary commercial purposes.
D. Internet and Network Activity
Information automatically collected when you visit our website, including: pages viewed and time spent; referring URL; browser type, device type, and operating system; and general geographic location derived from IP address (city or region level, not precise geolocation).
E. Communications
The content of any messages, questions, or information you submit through our website forms or direct correspondence.
F. Professional and Transaction-Related Information
Information about your professional background, acquisition history, financing capacity, and business goals.
3. How We Use Your Personal Information
We use the personal information we collect only for the following purposes:
- To Provide Business Brokerage Services: To respond to valuation inquiries, prepare business valuations, market confidential listings, screen and qualify buyers, facilitate introductions, manage due diligence, and support transactions.
- To Communicate With You: To respond to your questions, confirm receipt of inquiries, follow up on valuation requests, and send matching listings.
- To Protect Confidentiality and Verify Identity: To verify the identity and financial capacity of prospective buyers before releasing confidential business info.
- To Comply With Legal Obligations: To maintain transaction records as required by California Business and Professions Code Section 10148, which mandates licensed brokers retain copies of all transaction-related documents for a minimum of three years.
- To Improve Our Services: To analyze aggregate, non-identifying website traffic data to improve the user experience.
- For No Other Purposes: We do not use your personal information for targeted advertising, behavioral profiling, or any purpose not disclosed.
4. How We Share Your Personal Information
We treat your information as strictly confidential. We do not sell, rent, or trade personal information to third parties. We share personal information only in the following limited circumstances:
- With Transaction Counterparties: If you are a seller, we will not disclose your identity or business name without explicit written authorization, preceded by a signed Non-Disclosure Agreement.
- With Service Providers: Third-party service providers who assist us in operating our website, managing our CRM, hosting our Virtual Data Room, or processing escrow. They are contractually prohibited from using your data for other purposes.
- With Professional Advisors: Attorneys, CPAs, SBA lenders, escrow officers, and other licensed professionals involved in closing the transaction.
- To Comply With Legal Obligations: To comply with court orders, regulatory inquiries, or government subpoenas.
- In Connection With a Business Transfer: If Cortland Business Brokers is acquired, personal information may be transferred to the successor entity under the same privacy terms.
5. Data Retention
We retain personal information for different periods depending on the nature of the information:
- Website Inquiries and Leads: Personal information submitted through our forms (where no transaction is subsequently initiated) is retained for up to 24 months from last contact, and then deleted or anonymized.
- Transaction-Related Records: Standard transactional documentation is retained for a minimum of three years following the close of transaction, consistent with California Business and Professions Code Section 10148. Typically, we retain these records for six years.
- Legal Hold: Retained for the duration of any pending or anticipated litigation, regulatory inquiry, or audit.
6. Cookies and Tracking Technologies
Our website uses strictly necessary cookies to process forms, and analytics cookies (Google Analytics) to track aggregate pageviews. We do not use advertising pixels or behavioral retargeting cookies.
Global Privacy Control (GPC): Our website is designed to detect and honor browser-level GPC opt-out signals. If your browser transmits a GPC signal, we will treat it as a valid opt-out from the sale or sharing of your personal information and will disable tracking technologies accordingly.
7. Your California Privacy Rights
If you are a California resident, the CCPA/CPRA grants you the following rights:
- The Right to Know: To request disclosure of the personal info we collect and share.
- The Right to Delete: To request deletion of personal info, subject to legal recordkeeping exemptions.
- The Right to Correct: To correct inaccurate information.
- The Right to Opt Out of Sale/Sharing: We do not sell or share data, but you may use the "Do Not Sell or Share My Personal Information" link to register your opt-out.
- The Right to Limit SPI Use: To limit the use of Sensitive Personal Information. We use SPI only for transaction-related services.
- The Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
8. How to Submit a Privacy Rights Request
You may submit a verifiable consumer request by any of the following methods:
- Phone: 888-315-4353 (toll-free)
- Email: info@cortlandbusinessbrokers.com
- Mail: Cortland Business Brokers, Attn: Privacy Request, 136 Echo Place, Discovery Bay, CA 94505
Verification Process: We are required to verify your identity before processing any request. We will acknowledge receipt within 10 business days and respond within 45 calendar days.
9. Children's Privacy
Our website and services are intended exclusively for adults. We do not knowingly collect personal information from individuals under the age of 18.
10. Data Security
We maintain appropriate administrative and technical safeguards to protect your personal and business financial information, including encrypted document storage and permission-controlled Virtual Data Rooms. In the event of a security breach affecting California residents, we will provide notifications within the timelines required by California law (including S.B. 446).
11. Links to Third-Party Websites
Our website contains links to third-party professional directories (IBBA, CABB, BizBuySell). We are not responsible for the privacy practices of those external sites.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of the policy.
13. Contact Us
Cortland Business Brokers
136 Echo Place, Discovery Bay, CA 94505
Toll-Free: 888-315-4353 | Email: info@cortlandbusinessbrokers.com
Privacy Rights Requests: You may also submit requests via the following footer links:
Do Not Sell or Share My Personal Information | Limit the Use of My Sensitive Personal Information