Thomas & Company Consulting

Thomas & Company Consulting (“we,” “our,” “us”) respects the privacy of every business owner who visits this website or engages our services. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the rights you have over it. By using this site or submitting any form, you consent to the practices described below.

1. Who We Are

Thomas & Company Consulting is a one-on-one business consulting company owned and operated by O.T. Thomas, headquartered at 505 20th Street North, Suite 1220, Birmingham, AL 35203. Most client engagements are conducted over secure video. In-person sessions are available for clients in the greater Birmingham region by appointment.

2. Information We Collect

We collect only the information necessary to respond to inquiries, schedule conversations, deliver our services, and fulfill our legal obligations. Specifically:

Identity & contact information — name, email address, phone number, business name, mailing address.
Inquiry content — the message you write to us in the contact form, the scheduling form, or any email.
Assessment responses — if you complete our Business Readiness Assessment, we store your name, email, and the answers you provide so the report can be generated and retrieved.
Engagement records — once you become a client, we maintain notes, agreements, deliverables, and correspondence connected to your engagement.
Technical & usage data — standard server logs (IP address, browser type, pages visited, timestamps) generated automatically when you visit the site.
Cookies — see our Cookie Policy for details.

We do not knowingly collect information from anyone under the age of 18, and we do not sell personal information to third parties under any circumstance.

3. How We Use Your Information

To respond to your inquiry or scheduling request.
To deliver the services you have engaged us for.
To generate, store, and retrieve your Business Readiness Assessment report.
To send you transactional communications (confirmation emails, meeting links, deliverables).
To maintain accurate business records as required by law.
To protect the security and integrity of this website and our systems.

We do not use your information for behavioral advertising or third-party marketing.

4. Sharing of Information

We share your information only in the limited circumstances described below:

Service providers we rely on — our website host, email delivery provider, video conferencing provider, payment processor, document storage provider, and database provider. These providers are contractually limited to processing data only as instructed and only to the extent reasonably necessary to deliver the work you have engaged us for.
Legal obligations — if we are required to disclose information by valid subpoena, court order, or other legal process, or where disclosure is necessary to protect our rights or comply with applicable law.
Business transitions — in the unlikely event of a merger, acquisition, sale of assets, or similar transaction, your information may be transferred as part of that transaction, subject to the protections of this Privacy Policy.

We do not sell, rent, lease, or trade your personal information to anyone.

5. Data Retention

We retain personal information for as long as is reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal and accounting obligations, and to resolve disputes. Inquiry submissions and assessment records are retained for up to seven (7) years. Engagement records are retained for the duration of the engagement plus seven (7) years thereafter. You may request earlier deletion at any time by emailing [email protected]; we will honor the request unless retention is required by law.

6. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect the information you provide, including encrypted data transmission (HTTPS/TLS), access controls, and reputable third-party infrastructure. No method of electronic transmission or storage is perfectly secure, however, and we cannot warrant absolute security. You are responsible for maintaining the confidentiality of any credentials you create.

7. Your Rights

Depending on the laws of your state or country, you may have the right to:

Request access to the personal information we hold about you.
Request that we correct inaccurate information.
Request deletion of your personal information.
Request a copy of your data in a portable format.
Withdraw consent for future communications at any time.
Lodge a complaint with the appropriate data protection authority in your jurisdiction.

To exercise any of these rights, email [email protected]. We will respond within thirty (30) days.

8. California, Virginia, Colorado & Other State Residents

Residents of states with comprehensive privacy laws (including the California Consumer Privacy Act and similar statutes in Virginia, Colorado, Connecticut, Utah, and others) have additional rights, including the right to know what personal information is collected, the right to delete, and the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise your state-specific rights, contact us at the email above.

9. International Visitors

Our services are operated from the United States. If you visit our site or engage us from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

10. Children’s Privacy

This site is intended for adult business owners. We do not knowingly collect information from individuals under 18. If we learn that we have collected such information, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective” date at the top of this page reflects the most recent revision. Material changes will be communicated by updating the date and, where appropriate, by a notice on the website.

12. Contact

Questions or requests regarding this Privacy Policy may be sent to:
Thomas & Company Consulting
Attn: Privacy
505 20th Street North, Suite 1220
Birmingham, AL 35203
[email protected]
(888) 357-6620