Privacy Policy

IBO Advisors LLC (“IBO Advisors,” “we,” “us,” or “our”) advises owners of privately held companies on Independent Buyouts and related liquidity transactions. We understand that an owner who is even considering an exit is handling sensitive information, and that discretion is part of what you are hiring an advisor for. This policy explains what we collect through www.iboadvisors.com (the “Site”), why we collect it, who we share it with, and the choices you have.

This policy covers our Site and our marketing activities. Information you share with us inside an engagement — under a non‑disclosure agreement, an engagement letter, or in the course of a live transaction — is governed by those agreements, which take precedence over this policy wherever they are more protective.

1. Information We Collect

Information you give us

You can browse most of the Site without telling us who you are. You provide personal information when you choose to, including when you:

• Request a conversation through our “Learn More” form: your name, business email address, mobile phone number, company name, whether you are an owner/CEO/founder or an advisor, and the approximate annual EBITDA range of the business.
• Send us a message through our contact form: your name, email address, and the content of your message.
• Request a valuation report from our business valuation calculator or exit modeling tools: your name, email address, phone number, company name, and the approximate EBITDA range implied by your inputs.
• Book a meeting through our scheduling link: your name, email address, company, the time you select, and anything you add in the notes.
• Correspond with us by email, phone, or text.

A note on the calculator. The specific financial figures you type into our valuation and exit modeling tools — revenue, profit, growth rate, add‑backs, multiples, tax assumptions — are calculated in your own browser, and the PDF report is generated on your device. Those individual figures are not transmitted to us. If you ask us to email you the full analysis, what reaches our systems is your contact information and a broad EBITDA range, not your line‑item numbers.

Information collected automatically

When you visit the Site, we and our providers automatically collect technical and usage information, including your IP address, approximate location derived from it, browser and device type, operating system, referring URL, the pages and content you view, the links and buttons you click, the dates and times of your visits, and the campaign parameters (such as UTM tags) that brought you here. This is collected using cookies, pixels, tags, and similar technologies described in Section 2.

Information from third parties

We may receive information about you from business contact databases, identity resolution and visitor identification providers, advertising platforms, public sources, and people who refer you to us — for example, your name, employer, job title, business email address, business phone number, industry, and publicly reported company information. We use this to understand who is interested in our services and to make our outreach relevant rather than generic. See Section 3 for more on visitor identification.

2. Cookies and Similar Technologies

We use the following categories of technology on the Site:

Category	What it does	Examples on this Site
Strictly necessary	Delivers the Site, maintains security, and remembers state within a session.	Hosting and content delivery (Vercel)
Analytics and performance	Tells us which pages and content are used, how people move through the Site, and where they drop off.	Google Analytics 4
Marketing and attribution	Connects a form submission back to the campaign, ad, or content that produced it, and measures ad performance.	Google Ads conversion tracking; HubSpot tracking code (sets the hubspotutk cookie); Vaudit traffic quality and campaign measurement pixel
Visitor identification	Attempts to associate a visit with a business or a business contact without requiring you to fill out a form.	IDPixel

Most browsers let you block or delete cookies through their settings, and blocking them will not prevent you from reading the Site. You can opt out of Google Analytics specifically using the Google Analytics Opt‑out Browser Add‑on, and manage Google advertising personalization at My Ad Center. The Site also honors the Global Privacy Control signal as described in Section 8.

3. Visitor Identification Technologies

We want to be direct about this, because it is not obvious from looking at a website. Like many business‑to‑business firms, we use visitor identification technology that attempts to match a visit to the Site against commercially available business identity data, using signals such as IP address, device and browser characteristics, and cookies. When a match is made, we may learn the company associated with a visit and, in some cases, business contact details for an individual visitor — even if you never filled out a form.

We use this only to understand which businesses are researching Independent Buyouts and to inform our business development. We do not use it to build profiles about your personal life, your finances, or your household. If you would prefer not to be identified this way, see the opt‑out instructions in Section 8.

4. How We Use Information

• To respond to your inquiry, answer questions, and schedule a confidential conversation.
• To assess, in a preliminary way, whether an Independent Buyout is a plausible fit for your business.
• To deliver the reports, analyses, and materials you request.
• To send you insights, articles, and updates about exit planning and the middle market, where you have asked for them or where permitted by law.
• To operate, maintain, secure, and improve the Site and our services.
• To measure which campaigns, content, and channels generate qualified conversations, and to plan future marketing.
• To maintain records of our business development activity in our CRM.
• To comply with legal, regulatory, and professional obligations, to enforce our agreements, and to establish or defend legal claims.

5. How We Share Information

We do not sell your personal information for money, and we do not rent or trade our contact lists. We share information in these circumstances:

• Service providers. Companies that run parts of our operation under contract — our CRM and marketing platform (HubSpot), website hosting (Vercel), analytics and advertising platforms (Google), our visitor identification and traffic measurement providers, and our email and scheduling tools. They may use your information only to provide services to us.
• Our transaction network. If you engage us or ask us to advance a transaction, we may share relevant information with the banks, lenders, attorneys, accountants, ESOP specialists, and tax advisors working on your matter. We do this to move your transaction forward, and we do it subject to confidentiality obligations. We will not shop your information around to potential buyers or capital providers without your instruction.
• Professional advisors. Our own attorneys, accountants, insurers, and auditors, as needed.
• Legal and safety. Where required by law, subpoena, regulation, or court order, or where we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or a security incident.
• Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy continuing to apply to the information transferred.

An important disclosure about advertising and analytics. Some of the technologies described in Sections 2 and 3 disclose identifiers and browsing activity to third parties for cross‑context behavioral advertising and analytics. Under the California Consumer Privacy Act and comparable state laws, that activity may be treated as a “sale” or “sharing” of personal information even though no money changes hands. You can opt out as described in Section 8.

6. Confidentiality of Your Business Information

Beyond this policy, discretion is central to how we work. We treat the identity of owners who approach us, the existence of preliminary conversations, and any financial or operating information you share as confidential. We do not publish client names or transaction details without permission, and we are prepared to sign a non‑disclosure agreement before you share anything substantive. If you want a conversation to be confidential before you provide any details, say so — we will work that way.

7. Email, Phone, and Text Communications

When you give us your email address or mobile number, you are agreeing that we may contact you about your inquiry and about our services at that address and number, including by phone call, email, and text message. Message and data rates may apply. We do not use your phone number for automated telemarketing to people who have not asked to hear from us.

You can stop marketing communications at any time: click “unsubscribe” in any marketing email, reply STOP to any text message, tell us on a call, or email us at privacy@iboadvisors.com. We will still send transactional or engagement‑related messages where we have an active matter with you.

8. Your Privacy Choices and Rights

Choices available to everyone

• Opt out of marketing using any of the methods in Section 7.
• Control cookies through your browser settings, and use the platform‑specific opt‑outs listed in Section 2.
• Send a Global Privacy Control signal. If your browser or extension transmits a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale and sharing of personal information for that browser, and we act on it automatically — you do not need to contact us. Specifically: our visitor identification and marketing attribution tags (IDPixel and Vaudit) are not loaded at all for your visit, and we instruct Google not to use your data for advertising personalization. Our first‑party analytics and the HubSpot code that connects a form you choose to submit back to the page you submitted it from continue to operate, because neither involves selling or sharing your information. Sending a GPC signal does not stop you from using the Site, does not prevent you from contacting us, and does not stop us from responding to an inquiry you submit.
• Ask us to stop. Email privacy@iboadvisors.com and ask us to opt you out of visitor identification, advertising, or marketing, or to delete what we hold. We will honor the request regardless of which state you live in.

California residents

If you are a California resident, the California Consumer Privacy Act, as amended, gives you the right to:

• Know the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties to whom we disclose it.
• Delete personal information we have collected from you, subject to legal and recordkeeping exceptions.
• Correct inaccurate personal information we maintain about you.
• Opt out of the sale or sharing of your personal information, and of targeted advertising.
• Limit the use of sensitive personal information. We do not collect sensitive personal information as defined by the CCPA through the Site, and we do not use or disclose it for purposes that require this option.
• Not be discriminated against for exercising any of these rights. We will not deny you services, charge you a different price, or provide a different quality of service because you made a request.

In the preceding twelve months we have collected the following categories of personal information: identifiers (name, email address, phone number, IP address, and online identifiers); commercial information (the services you inquired about); professional or employment‑related information (company, role, and approximate company financial range); internet or network activity (browsing and interaction with the Site); and inferences drawn from the above (such as whether an inquiry appears to fit our criteria). We collect these from you directly, automatically from your device, and from the third‑party sources described in Section 1. We disclose these categories to the recipients listed in Section 5 for the business purposes listed in Section 4. Identifiers and internet activity information may be “sold” or “shared” as those terms are defined in Section 5. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Residents of other U.S. states

If you live in a state with a comprehensive consumer privacy law — including Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia, among others — you have comparable rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, sale, and certain profiling. Some of these states also let you appeal a decision we make about your request; if we decline a request, our response will tell you how to appeal.

How to make a request

You can reach us three ways: email privacy@iboadvisors.com, use the contact form on this Site, or write to us at IBO Advisors LLC, 2099 First Street, SW, Suite 2260, Washington, DC 20024. Tell us what you would like us to do and give us enough detail to locate your records. We will verify your identity before acting, typically by confirming information we already hold or by corresponding with you at an email address we have on file. An authorized agent may submit a request on your behalf with written permission that we can verify. We respond within the time allowed by applicable law — generally 45 days, extendable once where permitted.

9. Data Retention

We keep personal information for as long as it serves the purpose it was collected for, and then for as long as we need it to meet legal, tax, regulatory, and recordkeeping obligations or to resolve disputes. Inquiry and CRM records are generally retained for the life of the business relationship and for a period afterward; engagement and transaction records are retained for longer periods required by law and professional practice; website analytics data is retained according to the settings of the platforms described in Section 2. When information is no longer needed, we delete it or de‑identify it.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls that limit information to people who need it, reputable vendors with their own security programs, and contractual confidentiality obligations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send detailed financial statements, tax returns, or other sensitive transaction documents through the Site’s forms or by unencrypted email — ask us and we will provide a secure channel.

11. Third‑Party Websites

The Site links to third‑party websites and tools, including our scheduling pages. Those services have their own privacy policies, and we are not responsible for their practices. We encourage you to read them before providing information.

12. Children’s Privacy

The Site is intended for business owners and professionals. It is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Visitors Outside the United States

We are based in the United States and our service providers process information in the United States. If you access the Site from another country, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

14. Changes to This Policy

We may update this policy as our practices, the technologies we use, or the law change. When we do, we will revise the “Last updated” date above, and we will provide more prominent notice of material changes. Your continued use of the Site after an update means you accept the revised policy.

15. Contact Us

Questions about this policy, or about how we handle your information:

IBO Advisors LLC
2099 First Street, SW, Suite 2260
Washington, DC 20024
Email: privacy@iboadvisors.com
Web: Send us a message