Privacy Policy

Effective date: August 17, 2026
Last updated: August 17, 2026

Fitzgerald Growth Partners LLC ("Fitzgerald Growth Partners," "we," "us," or "our") operates milliondollarhurdle.com (the "Site"), offers a free Growth Scorecard, and sells the Million-Dollar Deep Diagnostic and related services (collectively, the "Services"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.

By using the Site, submitting the Scorecard, or purchasing the Services, you consent to the practices described here.

1. Who We Are and How to Contact Us

Fitzgerald Growth Partners LLC
Glen Allen, Virginia
Email: reports@fitzgeraldgrowthpartners.com

For any question, request, or complaint about your personal information, email us at the address above using the subject line "Privacy Request."

2. Information We Collect

We collect three categories of personal information.

a. Information you give us directly

Scorecard responses. If you complete the free Growth Scorecard, we collect the email address you provide and your answers to the 25 statements, along with your resulting score.

Contact and purchase information. Your name, business name, email address, and (optionally) phone number when you purchase the Diagnostic.

Playbooks purchase information. When you purchase the Million-Dollar Playbooks, we collect the name and email address you provide at checkout and the payment confirmation we receive from Stripe. We retain these to deliver your download, restore your access if a link stops working, and honour the 100-day guarantee.

Payment information. Billing name, billing address, and payment card details. Full card numbers are processed and stored by Stripe, not by us. We receive only a token, the last four digits of your card, the card brand, and the transaction status.

Intake responses. Your answers to the 84 questions of the Diagnostic Intake, including any free-text comments you write about your business. These may describe your revenue range, headcount, industry, operations, staffing, financial practices, and other business details.

Correspondence. The content of emails, support requests, and other messages you send us.

We do not maintain user accounts, usernames, or passwords. Access to the Diagnostic Intake is granted by a single-use link sent to your email address.

b. Information we collect automatically

When you visit the Site, we and our service providers automatically collect:

Device and technical data: IP address, browser type and version, operating system, device type, screen size, referring URL, and language settings.

Usage data: pages viewed, links clicked, time spent on pages, and general navigation patterns.

Cookies and similar technologies: small text files stored on your device. See Section 8 (Cookies) below.

c. Information from third parties

• Payment confirmation from Stripe (transaction ID, amount, status)
• Email deliverability data from our email service provider (bounces, opens, unsubscribes)
• Analytics data aggregated by our analytics providers

We do not knowingly collect information from children under 18. The Services are intended for adult business owners and operators only.

3. Why We Collect It (Purposes)

We use your personal information to:

• Provide the Services — deliver your Scorecard results, process your purchase, deliver your Report, provide the 90-day retake, and respond to support requests
• Generate your Diagnostic Report — analyze your Intake responses to produce your personalized Report
• Improve the Diagnostic — analyze aggregated, de-identified patterns across Scorecards and Intakes to refine our scoring and recommendations
• Communicate with you — send transactional email (results delivery, order confirmation, Report delivery, retake notification) and, if you opt in, occasional educational content
• Comply with law — meet our tax, accounting, and other legal obligations
• Protect the Services — detect and prevent fraud, abuse, and security incidents
• Enforce our agreements — investigate violations of our Terms of Service and defend legal claims

We do not sell your personal information. Your Scorecard and Intake responses are not used to train any third-party AI model.

4. How We Share Your Information

We share personal information only in the following circumstances.

a. Service providers (processors)

We share information with third-party vendors who help us run the Services. Each is contractually required to protect your information and use it only for the purposes we specify. Our current service providers are:

Anthropic processes your Intake responses solely to generate your Report under contract to us and does not use them to train its models. Our publishing partner's marketing platform receives only your email address and a tag indicating that a purchase or completion occurred. It does not receive your Scorecard or Intake answers, your scores, your constraint, or any part of your Report. We will update this list when providers change.

b. Professional advisors

Our accountants, lawyers, and insurance providers may receive limited information as needed to advise us or to comply with law.

c. Business transfers

If we merge, sell, restructure, or transfer assets, personal information may transfer as part of the transaction. We will notify you and require the recipient to honor this Privacy Policy or provide equivalent protection.

d. Legal and safety

We may disclose information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security incidents.

e. With your consent

We will share information in other ways if you direct us to or explicitly consent.

We do not sell personal information for money, and we do not "share" personal information for cross-context behavioral advertising as those terms are defined under California, Virginia, or other US state privacy laws.

5. How Long We Keep Your Information

We retain personal information for as long as needed to provide the Services and to meet our legal obligations. Specifically:

• Scorecard and Intake data: retained for 3 years from your most recent submission, so that historical Reports and the 90-day retake comparison remain available to you
• Transaction records: retained for 7 years to comply with tax and accounting requirements
• Support correspondence: retained for 3 years after the last interaction
• Marketing email lists: retained until you unsubscribe
• Web analytics data: retained for 14 months, or the default period set by our analytics provider

After the applicable period, we delete or de-identify the information.

6. How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards, including:

• Encryption in transit (HTTPS/TLS) across the Site
• Encryption at rest for stored Scorecard and Intake responses
• Access controls limiting who at Fitzgerald Growth Partners can view personal information
• Single-use, expiring access links rather than reusable passwords
• Payment card data handled exclusively by PCI-DSS-compliant processors (Stripe)
• Regular software updates and security patches

No system is perfectly secure. If we experience a data breach affecting your personal information, we will notify you and applicable regulators as required by law.

7. Your Rights

Depending on where you live, you have some or all of the following rights regarding your personal information:

• Right to know / access — request a copy of the personal information we hold about you
• Right to correct — ask us to correct inaccurate information
• Right to delete — ask us to delete your personal information (subject to legal exceptions such as tax-record retention)
• Right to portability — receive your information in a portable, machine-readable format
• Right to opt out — of sale of personal information or targeted advertising (we do not sell or share for targeted advertising, so this right is honored by default)
• Right to non-discrimination — we will not discriminate against you for exercising these rights
• Right to withdraw consent — where we rely on consent, you may withdraw it at any time

How to exercise your rights. Email reports@fitzgeraldgrowthpartners.com with the subject line "Privacy Request." Please describe:

• The right you want to exercise
• The email address associated with your Scorecard or purchase
• Enough detail for us to verify your identity

Response time. We will acknowledge your request within 10 business days and respond substantively within 45 calendar days (extendable by an additional 45 days if reasonably necessary, with notice to you).

Verification. We may ask for additional information to verify your identity before fulfilling a request, particularly for deletion or portability requests. We will not use this information for any other purpose.

Appeals (Virginia residents). If we deny your request, you may appeal by replying to our decision email within 60 days. We will respond to your appeal within 60 days. If the appeal is denied, you may contact the Virginia Attorney General at oag.state.va.us to submit a complaint.

Authorized agents. You may designate an authorized agent to make a request on your behalf. We will require written proof of the agent's authority and may require you to verify your identity directly.

8. Cookies and Similar Technologies

We use cookies and similar technologies to run the Site, remember your preferences, and measure how the Site is used.

Types of cookies we use:

• Strictly necessary cookies — required for the Site to function (session management, checkout, security). These cannot be disabled.
• Functional cookies — remember your preferences.
• Analytics cookies — help us understand how visitors use the Site so we can improve it.

Advertising. We do not currently use advertising, retargeting, or cross-site tracking technologies on this Site. If we introduce them, we will update this Policy, identify the advertising partners involved, and present a cookie banner allowing you to opt in before any non-essential advertising cookie is set on your device.

Your choices. Most browsers let you control cookies through settings. Blocking strictly necessary cookies may break parts of the Site.

Do Not Track and Global Privacy Control (GPC). We honor Global Privacy Control (GPC) signals sent by your browser as an opt-out of any "sale" or "sharing" (though as noted, we do neither by default).

9. Other Sites and Sellers

This Policy covers milliondollarhurdle.com only. Our book, The Million Dollar Hurdle, and related offers are sold through other channels operated by third parties, including online retailers and independent marketing partners. Those sellers operate their own websites, collect information under their own privacy policies, and may use advertising and tracking technologies that we do not use on this Site. If you arrived here from one of those sites, review that seller's privacy policy for information about what it collects.

We also operate fitzgeraldgrowthpartners.com, which has its own separate privacy policy.

10. Information for Specific US States

Because state privacy laws differ, this section clarifies how the general rights above apply where you live.

a. California residents (CCPA/CPRA)

Categories of personal information we collect: identifiers (name, email, IP), commercial information (purchases), internet activity (usage), and inferences (from your Scorecard and Intake responses). We do not collect sensitive personal information as defined by the CPRA.

We do not sell or share personal information as defined by the CCPA/CPRA.

Right to limit use of sensitive PI: not applicable (we do not use sensitive PI).

California residents also have the "Shine the Light" right (Cal. Civ. Code § 1798.83) to request information about disclosures to third parties for their direct-marketing purposes. Email us to request this.

b. Virginia residents (VCDPA)

You have the rights described in Section 7, including the right to appeal a denied request. Contact us at reports@fitzgeraldgrowthpartners.com.

c. Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other US state privacy law residents

We honor the access, correction, deletion, and opt-out rights granted under your state's comprehensive privacy law. To exercise these rights, follow the process in Section 7.

11. International Users

The Site is operated from the United States. If you access the Site from outside the US, your information will be transferred to, stored in, and processed in the United States. By using the Site, you consent to that transfer.

EU/UK residents: the Services are primarily marketed to US-based business owners, and we do not target EU or UK residents. If you nonetheless purchase from within the EU or UK, we rely on the lawful bases of contract performance (to provide the Services you purchased) and legitimate interests (to improve and secure the Services). You may exercise GDPR/UK-GDPR rights by emailing reports@fitzgeraldgrowthpartners.com.

12. Third-Party Links

The Site may link to third-party sites (for example, articles or resources referenced in a Report). We are not responsible for the privacy practices of those sites. Review each third party's privacy policy before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy on the Site and update the "Effective date" above. For material changes affecting how we use previously collected information, we will make reasonable efforts to notify you by email.

14. Complaints

If you have a complaint about how we handle your personal information, please contact us first at reports@fitzgeraldgrowthpartners.com — most issues can be resolved quickly. You also have the right to lodge a complaint with your state attorney general or, if outside the US, your local data-protection authority.

By using milliondollarhurdle.com, submitting the Growth Scorecard, or purchasing the Million-Dollar Deep Diagnostic, you acknowledge that you have read and understood this Privacy Policy.