PRIVACY POLICY

Privacy Policy

This Privacy Policy explains how Golden Way Financial Group handles personal information across website visits, consultation requests, investment advisory services, and tax-related services. We manage information with a focus on compliance, necessity, transparency, and practical security controls.

Effective2026-01-01
Last Updated2026-05-03
Important Notice

Please Review Before Submitting Information

This page is sample website privacy language that describes our general information practices. Final terms are governed by the client agreements, privacy notices, regulatory filings, and applicable legal requirements formally provided or signed in connection with your relationship with us.

If this policy conflicts with a specific client agreement or legally required disclosure, the more specific, current, or legally controlling document will govern.

01

Information We Collect

We collect information only as needed to operate the website, respond to consultation requests, provide investment advisory and tax planning services, maintain client service records, meet compliance obligations, and protect our systems.

Information may be provided directly by you, generated when you interact with our website or team, or received from referral sources, professional advisers, custodians, account platforms, public records, and other lawful sources relevant to our services.

Identity and contact information
Name, email address, phone number, residence, mailing address, language preference, and necessary information about household members or authorized contacts.
Financial and tax information
Assets, income, investment objectives, risk tolerance, tax status, filing materials, account information, and documents needed to evaluate suitability and deliver services.
Website and device information
IP address, browser type, pages viewed, time on site, referring pages, form submission records, and necessary security logs.
02

Purposes of Use

We use personal information to respond to inquiries, schedule meetings, evaluate service fit, deliver investment advisory and tax-related services, and maintain accurate, complete, and auditable business records.

We may also use information, as permitted by law, for regulatory reporting, client due diligence, risk management, dispute resolution, internal training, system security, and service improvement.

  • Process appointments, inquiries, onboarding, account maintenance, and ongoing service requests.
  • Prepare financial planning, investment advisory, tax planning, tax filing coordination, and related deliverables.
  • Send market updates, event invitations, and service communications that you have subscribed to or otherwise agreed to receive, with an option to unsubscribe.
  • Detect, prevent, and investigate unauthorized access, fraud, misuse, or other security events.
03

Third-Party Sharing

We do not sell personal information. We share information only when needed to provide services, meet legal obligations, protect rights, or act with your authorization.

Recipients may include SOC 2 audited or similarly controlled technology providers, customer relationship management systems, e-signature platforms, accounting and tax software providers, file storage providers, custodians, regulators, auditors, attorneys, accountants, and government authorities that lawfully request information.

  • Share information with custodians or account platforms, including Charles Schwab, when needed for account opening, maintenance, transactions, reporting, and client support.
  • Share information with professional advisers bound by confidentiality obligations when needed to complete authorized client matters.
  • Disclose necessary information in response to subpoenas, court orders, regulatory examinations, law enforcement requests, or other legal requirements.
We require service providers to process information only for agreed purposes and to maintain confidentiality, access control, and security measures appropriate to the sensitivity of the information.
04

Cross-Border Transfers

Our clients and service relationships may involve the United States, mainland China, Hong Kong, Taiwan, and other jurisdictions. To support cross-border family wealth, investment advisory, tax, and compliance services, your information may be transferred, accessed, or stored across jurisdictions.

When information is transferred across borders, we use reasonable safeguards such as legal review, contractual controls, access permissions, encrypted transmission, vendor diligence, and internal procedures to reduce the risk of unauthorized access, loss, or misuse.

Privacy rules differ by jurisdiction. By submitting information, you understand that we may process information across borders when needed for services and compliance, to the extent permitted by applicable law.
05

Cookies & Tracking

We may use necessary cookies, pixels, log files, and similar technologies to operate the website, protect forms, understand traffic patterns, and improve page experience.

Where permitted by law and appropriately configured, we may use analytics tools such as Google Analytics to understand visit volume, page performance, and traffic sources. These tools may process website usage information in aggregated or de-identified form.

  • You can limit or delete certain cookies through your browser settings, but some website features may not work properly.
  • If we later use tracking technologies that require additional consent, we will provide choices as required by applicable law.
Necessary cookies
Used for security, abuse prevention, language preferences, session maintenance, form submission, and other core website functions.
Analytics cookies
Used to understand website activity, improve content structure, and measure the usefulness of service information.
06

Your Rights

Depending on where you live and the laws that apply, you may have the right to request access, correction, deletion, restriction of processing, a copy of your information, withdrawal of consent, or objection to certain processing activities.

We will process requests after reasonably verifying identity and will respond within the legally required or reasonably practicable time. Some information may not be immediately deleted because of regulatory recordkeeping, contract performance, legal claims, or security needs.

CCPA
If applicable, California residents may request to know, access, correct, or delete certain personal information and may have choices regarding certain sharing or use of information.
GDPR
If applicable, residents of the European Economic Area or the United Kingdom may exercise rights such as access, correction, deletion, restriction, portability, and objection.
To protect client privacy, we may ask for enough information to verify your identity and authority before handling sensitive requests.
07

Data Retention

We retain personal information during the client relationship and for as long as needed to complete services, resolve disputes, and meet regulatory and tax recordkeeping obligations.

Investment advisory, tax, accounting, electronic communication, advertising, and suitability records may be subject to minimum retention periods under U.S. federal and state regulatory rules and other applicable laws.

  • When information is no longer needed and deletion is permitted by law, we delete, de-identify, or securely archive it.
  • Backups, audit logs, and disaster recovery systems may retain information for longer periods for technical and compliance reasons.
08

Security

We use reasonable administrative, technical, and physical measures to protect personal information, including encrypted transmission, permission levels, authentication, log monitoring, vendor review, and confidentiality training.

No website, email system, or network transmission can be guaranteed to be completely secure. If you believe information shared with us may have been accessed without authorization, please contact us promptly using the details on this page.

  • Limit employee and service provider access to information needed for their roles.
  • Review key service providers and internal access permissions periodically.
  • Apply transmission, storage, and disposal controls appropriate to the sensitivity and business context of the information.
09

Minors

Our website and services are intended for adults and family financial decision makers. They are not directed to individuals under the age of 18.

We do not knowingly seek to collect personal information from anyone under 18. If you believe a minor has provided information to us, please contact us and we will take appropriate steps after reasonable verification.

10

Policy Changes

We may update this Privacy Policy because of business, technology, regulatory, or legal changes. The updated version will be posted on this page with the last updated date.

If changes materially affect your rights or how we process personal information, we will provide notice when appropriate through a website notice, email, or another reasonable method.