Website Privacy Policy

Effective Date: June 24, 2026 Last Updated: June 24, 2026

1. Introduction

This Privacy Policy explains how Burrows Financial Holdings (“Burrows,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit our website, contact us, request information, attend our events, or otherwise engage with our services.

This Policy applies to our website at burrowsfh.com (the “Site”) and the services offered through it. Other Burrows websites may post their own separate privacy policies.

Burrows Financial Holdings is a multi-service financial group. Its affiliated businesses include Burrows Capital (wealth management and financial advisory), Burrows Business (accounting, tax, and business consulting), and a mergers-and-acquisitions (M&A) advisory practice. Depending on the service you engage, Burrows may act as a financial advisory firm, an accounting and tax practice, an insurance provider, or an M&A advisor.

2. Information We Collect

We collect personal information in three ways: information you provide to us, information we collect automatically, and information we receive from third parties.

a. Information you provide.

When you complete a contact or “request a consultation” form, subscribe to updates, register for an event, apply for a role, or communicate with us, you may provide:

• Identifiers: name, email address, postal address, telephone number, and similar contact details.

• Professional and business information: your company name, job title, industry, and, for owners exploring a sale or transaction, general information about your business.

• Communications: the contents of messages, form submissions, and correspondence you send us.

• Marketing and event information: your preferences, registrations, and, for in-person events, any details you provide such as dietary, or accessibility needs.

When you become a client of our advisory, tax, or insurance services, we collect additional financial information necessary to provide those services. That client information is generally nonpublic personal information governed by our GLBA Privacy Notice rather than this Policy.

b. Information we collect automatically.

When you use our Site, we and our service providers automatically collect:

• Device and usage data: IP address, browser type and language, operating system, referring and exit pages, the pages you view, and the dates and times of your visits.

• Online identifiers and cookies: see Section 8 (Cookies and Online Tracking).

• Approximate location: derived from your IP address.

c. Information from third parties.

We may receive information from business data and prospecting providers, marketing partners, social media platforms, our affiliates, and publicly available sources, which we may combine with information we already hold.

3. Sources of Personal Information

We collect personal information from the following sources: you, directly; your activity on our Site and in our communications; our affiliates and the businesses within the Burrows group; service providers acting on our behalf; marketing, advertising, and business-data partners; and publicly available and third-party sources.

4. How We Use Personal Information

We use personal information to:

• Respond to your inquiries and provide the information, consultations, or services you request.

• Establish and serve client relationships, and perform our advisory, tax, insurance, and M&A engagements.

• Send marketing communications, newsletters, event invitations, and other materials about Burrows, subject to your choices in Section 9.

• Operate and secure our Site and improve the services we provide.

• Conduct analytics and measure the effectiveness of our content and campaigns.

• Detect, prevent, and respond to fraud, security incidents, and misuse.

• Verify identity and conduct due diligence, anti-money-laundering (AML), and know-your-customer checks where required.

• Recruit, evaluate, and communicate with prospective team members and financial advisors.

• Comply with applicable laws, regulations, regulatory examinations, subpoenas, and our legal and recordkeeping obligations.

5. How We Share Personal Information

We do not sell your personal information for money. We share personal information only as described below.

• Within the Burrows group. We share among our affiliated businesses (Burrows Capital, Burrows Business, our M&A practice, and other affiliates) to operate our business and serve you.

• Service providers. We share with vendors who perform services on our behalf, such as website hosting, IT and security, customer-relationship management, email and marketing platforms, analytics, and professional services. They are bound by contract to protect the information and use it only for the services they provide to us.

• Financial services partners. When you become a client, we share with custodians, broker-dealers, insurance carriers, fund administrators, and similar institutions necessary to deliver the service. This sharing is governed by our GLBA Privacy Notice.

• Professional advisors and co-advisors. We share with attorneys, accountants, auditors, and co-advisors engaged in connection with our services.

• Transaction counterparties (M&A engagements). See Section 6.

• Legal, regulatory, and safety. We share with regulators, self-regulatory organizations, law enforcement, or others when required by law, subpoena, or legal process, or to protect the rights, property, or safety of Burrows, our clients, or others.

• Business transfers. In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transactions involving Burrows, information may be transferred to the successor or acquiring party.

6. Confidential Business and Transaction Information (M&A Engagements)

Burrows provides sell-side M&A and business advisory services. Information you share with us about a business or a potential transaction, such as financial statements, operating data, and ownership details, is treated differently from the personal information described in this Policy.

• That information is governed by the engagement agreement and any non-disclosure agreement (NDA) between you and Burrows, not by this website Privacy Policy.

• Please do not transmit confidential business or financial details through general website forms or unencrypted email. Our Site and ordinary email are open networks, and we cannot guarantee the confidentiality of materials sent that way. We will provide a secure channel once an engagement or NDA is in place.

• During an engagement, and with our client’s consent, we may share transaction information with prospective buyers, investors, lenders, co-advisors, and their representatives as needed to pursue and complete a transaction. We obtain our client’s consent before contacting prospective counterparties on the client’s behalf.

7. Job Applicants and Advisor Recruiting

If you apply for a position with Burrows, or respond to our advisor-recruiting materials, we collect the information you provide (resume, work history, professional credentials, and contact details). We use it to evaluate your candidacy, communicate with you, and, where applicable, conduct background and regulatory checks. We share this information with service providers and, where required, regulatory and background-check providers.

8. Cookies and Online Tracking

Our Site uses cookies, pixels, web beacons, tags, and similar technologies, both our own and those of third parties, to operate the Site, remember your preferences, analyze traffic, and support marketing and advertising. The third-party tools we use may include:

• Analytics, such as Google Analytics, to understand how visitors use our Site.

• Advertising, such as Google Ads and Meta (Facebook) advertising tools, to measure and deliver relevant advertising, including across other websites and platforms.

• Other similar analytics and advertising technologies we may use from time to time.

These third parties may collect information about your online activities over time and across different websites. Some of this activity may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising under certain state laws. See Section 10 for your opt-out rights.

Your cookie choices. You can manage cookies through your browser settings and, where available, through the cookie-preferences tool on our Site. You can opt out of certain interest-based advertising through the Digital Advertising Alliance (optout.aboutads.info), the Network Advertising Initiative (optout.networkadvertising.org), and your device and platform ad settings.

“Do Not Track” and Global Privacy Control. Some browsers transmit “Do Not Track” (DNT) signals. Because there is no common industry standard for DNT, our Site does not currently respond to DNT signals. We do honor the Global Privacy Control (GPC) signal as a valid request to opt out of “sale” or “sharing” where required by law.

9. Your Marketing Choices

• Email. You can unsubscribe from marketing emails using the “unsubscribe” link in any such email, or by contacting us. We will honor opt-out requests promptly. You may still receive non-marketing, service-related communications.

• Telephone. You may ask to be placed on our internal do-not-call list.

10. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information. Note: Much of the information Burrows holds about its clients is exempt from state privacy laws because it is regulated by the federal Gramm-Leach-Bliley Act. The rights below apply to personal information that is not subject to that exemption, for example, website-visitor and prospect information.

a. Texas residents (Texas Data Privacy and Security Act).

You may have the right to:

• Confirm whether we process your personal data and access it.

• Correct inaccuracies.

• Delete personal data you provided or that we obtained.

• Obtain a portable copy of your data.

• Opt out of (i) targeted advertising, (ii) the “sale” of personal data, and (iii) certain profiling.

To exercise these rights, contact us as described in Section 13. We will respond within 45 days, extendable by an additional 45 days where permitted. If we deny your request, you may appeal by contacting us at team@burrowsfh.com. If your appeal is denied, you may contact the Texas Attorney General at texasattorneygeneral.gov.

b. California residents (CCPA/CPRA).

Subject to the GLBA exemption, California residents may have the right to know and access the categories and specific pieces of personal information we collect, use, disclose, and “share”; delete personal information; correct inaccurate information; opt out of the “sale” or “sharing” of personal information; limit the use of sensitive personal information; and not receive discriminatory treatment for exercising these rights.

• We do not sell your personal information for money. To the extent our use of advertising cookies counts as “sharing,” you may opt out by using the “Do Not Sell or Share My Personal Information” control on our website and by enabling the Global Privacy Control in your browser.

• To exercise your rights, contact us as described in Section 13. We will verify your request and respond within the timeframes required by law. You may use an authorized agent.

c. Other states.

Residents of other states with comprehensive privacy laws, such as Virginia, Colorado, Connecticut, and Oregon, may have similar rights, subject to each law’s exemptions (including the GLBA exemption). Contact us as described in Section 13, identify your state of residence, and we will honor the rights available to you under applicable law.

11. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. These measures include access controls and authentication, encryption of sensitive data in transit, network and email security protections, restricted physical access to records and offices, due-diligence and contractual safeguards with our service providers, and ongoing staff training. Because our investment-advisory affiliate (Burrows Capital) is registered with the U.S. Securities and Exchange Commission, we maintain a written information-security program, incident-response procedures, and breach-notification practices consistent with SEC Regulation S-P. Our other affiliated businesses maintain comparable safeguards. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

12. Retention, Children’s Privacy, Third-Party Links, and International Visitors

• Retention. We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to provide our services, to comply with our legal, regulatory, and recordkeeping obligations (which, for a financial firm, may be lengthy), and to establish, exercise, or defend legal claims.

• Children’s privacy. Our Site is intended for adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have done so, we will delete it.

• Third-party links. Our Site may link to third-party websites and services we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.

• International visitors. Our Site is operated in the United States and intended for U.S. users. If you access it from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.

13. Changes to This Policy and How to Contact Us

Changes. We may update this Policy from time to time. When we do, we will revise the “Last Updated” date above and, for material changes, provide a more prominent notice as appropriate. Your continued use of our Site after an update constitutes acceptance of the revised Policy.

Contact us. For questions about this Policy or to exercise your privacy rights:

• Email: team@burrowsfh.com

• Mail: Burrows Financial Holdings, Attn: Privacy, 224 Sandhill St., Webster, TX 77598

• Phone: (832) 290-7446