Privacy Policy

This Privacy Policy explains how information collected through the Vaultolio website ("Vaultolio," "the Site") is handled. The Site is owned and operated by Dominic Dominguez, a Florida-licensed business broker. Where this policy uses "we," "us," or "our," it refers to Dominic Dominguez.

1. Who operates this Site

The Site is owned and operated by Dominic Dominguez, a Florida-licensed business broker. As required by Florida Real Estate Commission Rule 61J2, Dominic's broker license is registered with Hedgestone Business Advisors, a trade name of Steinberg Re Holdings, LLC, a Florida limited liability company (collectively, "Hedgestone"). Hedgestone neither owns nor operates the Site; this disclosure appears solely for brokerage-licensure compliance. Vaultolio is a brand name for the website only and is not itself a legal entity or licensed brokerage. Florida Broker License No. FL BK3529743.

Contact for privacy questions and data subject requests:
Dominic Dominguez
2431 NW 92nd Ave, Coral Springs, FL 33065
dominic.dominguez@hedgestone.com
813-389-9466

2. What information we collect

When you submit the contact form on this Site, we collect:

• Your name
• Email address
• Phone number (verified by SMS code; see Section 4)
• Your role — buyer, seller, or "just looking"
• If you are a buyer: the industries you are interested in, and any free-text industry description you provide
• Source/marketing attribution — UTM parameters from the link you arrived through, and any QR-code identifier if you scanned a Vaultolio QR
• Country (derived from your network connection — we do not store your full IP address)

If you click outbound links from emails or messages we send you, we record the click event (which link, when) for follow-up purposes.

We do not collect or use Social Security numbers, government IDs, payment card numbers, or special categories of personal information through this Site. (If a transaction proceeds beyond initial contact, additional information may be collected separately under a written engagement; that process has its own disclosures.)

3. Why we collect it

We collect this information to:

• Respond to your inquiry about buying or selling a business.
• Send you follow-up communications you have agreed to receive.
• Match you with relevant deal opportunities (for buyers) or buyer interest (for sellers).
• Comply with our recordkeeping obligations as a Florida-licensed broker.
• Detect and prevent abuse of the Site (rate-limiting, fraud prevention).

4. Service providers we use

We use a small number of third-party service providers to operate the Site. Each is bound by their own privacy commitments and only processes your data on our behalf:

• Cloudflare, Inc. — hosts the Site, provides bot protection (Turnstile), and provides rate-limit storage. Cloudflare may process limited connection metadata (IP address, user agent, country) to deliver the Site and block abuse.
• Twilio Inc. — sends and verifies the SMS code used to confirm your phone number. Twilio receives your phone number and the verification code; it does not receive your name, email, or other form contents.

We do not use Google Analytics, Facebook Pixel, ad-tech pixels, or any cross-site advertising tracker on this Site.

5. How we share your information

We do not sell your personal information. We do not "share" your personal information for cross-context behavioral advertising.

We may disclose your information to:

• Service providers above, only as needed to operate the Site.
• Counterparties to a deal you have asked us to help facilitate, only after you have signed a written engagement and applicable confidentiality agreements.
• Government agencies, regulators, or courts where legally required (subpoena, court order, regulator inquiry).

6. How long we keep your information

We retain prospect/inquiry information for up to 3 years from your last engagement with us, unless a longer period is required by Florida real estate brokerage recordkeeping rules, federal law, or an active legal matter. After the retention period, we delete the data or permanently anonymize it.

7. Your rights

Depending on where you live, you may have the following rights regarding your personal information. We honor these rights for all visitors regardless of state of residence:

• Access — receive a copy of the information we hold about you
• Correction — fix information that is inaccurate
• Deletion — ask us to delete your information (subject to legal retention obligations)
• Opt-out of marketing — stop receiving marketing emails or texts (every email we send includes a one-click unsubscribe link)
• Portability — receive your information in a machine-readable format
• Object — object to processing in specific circumstances
• Non-discrimination — we will not deny service, charge you more, or provide a worse service because you exercised a privacy right

To exercise any of these rights, email dominic.dominguez@hedgestone.com or write to the mailing address in Section 1. We will respond within 45 days (extendable once by an additional 45 days where permitted by law). We may need to verify your identity before fulfilling certain requests.

8. Florida residents (FDBR)

Florida residents have the rights listed in Section 7 under the Florida Digital Bill of Rights. Florida residents may also opt out of the sale of personal information; we do not sell personal information.

9. California residents (CCPA / CPRA)

California residents have the rights listed in Section 7 under the California Consumer Privacy Act. California residents may also opt out of the sale or sharing of personal information; we do not sell or share personal information. We do not knowingly collect personal information from California residents under the age of 16.

10. Other US states

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Tennessee (TIPA), Indiana (INCDPA), and other states with comprehensive privacy laws have substantially similar rights and may exercise them through the contact channels in Section 1.

11. International visitors

The Site is operated from the United States. If you visit from outside the US, your information will be processed in the US. By using the Site, you consent to that transfer. We honor data subject rights under the EU/UK GDPR (access, rectification, erasure, restriction, portability, objection) on request.

12. Cookies and tracking

The Site uses only strictly necessary cookies required for security, abuse prevention, and basic functionality (Cloudflare's bot-protection cookie, our session/rate-limit storage). The Site does not use advertising cookies, analytics cookies, or cross-site tracking cookies. No consent banner is required because no non-essential tracking is used.

13. Children's privacy

The Site is intended for adults (18+). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected a child's information, contact us and we will delete it.

14. Security

We use commercially reasonable technical and organizational safeguards, including TLS 1.3 encryption in transit, encryption at rest, owner-only file permissions for sensitive stores, and access controls. No system is perfectly secure; if we discover a breach affecting your information, we will notify you consistent with applicable Florida and federal breach-notification laws.

15. Changes to this policy

We may update this policy. Material changes will be reflected by updating the "Last updated" date above. If you have an active inquiry with us, we will email you about material changes that affect your rights.

16. How to file a complaint

If you believe we have not handled your information appropriately, please contact us first using Section 1. You may also contact:

• Florida Attorney General — myfloridalegal.com
• Federal Trade Commission — ftc.gov
• Your state attorney general (for residents outside Florida)