Privacy Policy
Last updated: September 01st, 2026
Thank you for visiting the Bereck & Co. website. We take your privacy seriously and want you to understand how your personal information is collected, used, disclosed and protected when you interact with our website and services.
This Privacy Policy describes our privacy practices in accordance with applicable U.S. privacy laws and, where applicable, the European Union General Data Protection Regulation (“GDPR”), the UK GDPR and other applicable data protection laws.
Who We Are and Scope of This Privacy Policy
Bereck & Co., LLC (“Bereck & Co.,” “we,” “us,” or “our”) is a limited liability company organized under the laws of the State of California, United States.
For purposes of the GDPR and other applicable data protection laws, Bereck & Co., LLC is the data controller responsible for the processing of personal data described in this Privacy Policy, unless otherwise stated.
This Privacy Policy applies to personal information we collect when you:
-
visit or interact with our website;
-
contact us by email, telephone, contact form or other electronic means;
-
inquire about or engage our services;
-
communicate or otherwise interact with us in a professional or business context; or
-
interact with us in connection with potential transactions, business opportunities or advisory engagements.
Personal Information We Collect
Depending on how you interact with our website and services, we may collect the following categories of personal information:
Information You Provide to Us
When you contact us through a form, email or other means, we may collect:
-
Contact information – such as your name, email address, telephone number and business or postal address;
-
Professional information – such as your company name, professional title or position;
-
Communication and message content – information contained in inquiries, emails, contact forms or other communications you send to us; and
-
Other information you voluntarily provide when communicating or interacting with us.
Business and Transaction Information
In connection with our M&A, corporate finance, valuation and transaction advisory activities, we may receive professional and business-related personal information concerning business owners, shareholders, directors, officers, employees, advisers, prospective clients, counterparties, investors and other individuals.
Such information may include names, professional contact details, positions, company affiliations, ownership information and other information relevant to a potential or actual business relationship or transaction.
Information Obtained From Other Sources
We may obtain professional or business-related personal information from publicly available sources, company websites and public registers, professional networking platforms, business information databases, clients and prospective clients, advisers, referrals, professional contacts and other third parties lawfully providing information to us.
Where required by applicable data protection law, including Article 14 GDPR, we will provide any additional information or notices required in connection with personal data obtained from third parties.
Automatically Collected Technical Information
When you visit our website, we or our service providers may automatically collect certain technical and usage information, including:
-
IP address;
-
browser type and version;
-
device type and operating system;
-
referring website;
-
pages visited and interactions with our website;
-
date and time of access; and
-
approximate geographic information derived from your IP address.
The precise information collected depends on the technologies enabled on the website and, where required, your consent choices.
Cookies and Similar Technologies
We may use cookies and similar technologies to provide essential website functionality, improve website performance and user experience, and, where applicable and subject to your consent, understand how visitors interact with our website.
Further information about cookies and your choices is provided in Section 5 below.
Sensitive Personal Information
We do not seek to collect sensitive personal information through our general website, including information concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric information, health information, or information concerning an individual's sex life or sexual orientation.
Please do not provide sensitive personal information through our website unless specifically requested and necessary for a legitimate legal or business purpose.
How and Why We Use Personal Information
We may process personal information to:
-
respond to inquiries and communications;
-
evaluate prospective clients and advisory engagements;
-
provide our advisory services;
-
identify and evaluate potential business or transaction opportunities;
-
communicate with clients, prospective clients, business owners, investors, advisers and other professional contacts;
-
establish and maintain professional and business relationships;
-
administer existing or prospective contractual relationships;
-
operate, maintain, secure and improve our website;
-
understand website usage and performance;
-
maintain internal business and transaction records;
-
protect against fraud, misuse and unauthorized or unlawful activity;
-
comply with applicable legal, regulatory and contractual obligations;
-
establish, exercise or defend legal claims; and
-
otherwise operate and develop our business.
Where permitted by applicable law, we may also use professional contact information to communicate regarding Bereck & Co., our services, potential transactions, business opportunities, publications or other matters that we reasonably believe may be professionally relevant to you.
Legal Bases Under the GDPR
Where the GDPR or UK GDPR applies, we process personal data only where a lawful basis exists.
Depending on the circumstances, our legal bases may include:
Consent — Article 6(1)(a) GDPR.
Where you have provided consent, including where required for non-essential cookies or certain electronic marketing communications.
Contract — Article 6(1)(b) GDPR.
Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legal obligation — Article 6(1)(c) GDPR.
Where processing is necessary to comply with a legal obligation applicable to us.
Legitimate interests — Article 6(1)(f) GDPR.
Where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your interests, rights or freedoms.
Our legitimate interests may include developing and operating our business, identifying and evaluating potential business and transaction opportunities, maintaining professional relationships, responding to business inquiries, protecting our systems, preventing fraud and establishing or defending legal claims.
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing conducted before withdrawal.
Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Strictly necessary cookies may be used without consent where necessary for website operation, security and essential functionality.
Analytics, functionality, advertising or other non-essential cookies will be used only in accordance with applicable law and, where required, after you have provided consent.
Where a cookie preference or consent tool is provided, you may use it to accept, reject or subsequently change your choices regarding non-essential cookies.
You may also configure your browser to block or delete cookies. Doing so may affect certain website functionality.
Where required by applicable law, non-essential cookies and tracking technologies will not be activated before the required consent has been obtained.
Analytics and Third-Party Technologies
We may use third-party technologies and service providers to operate our website, measure website usage, understand visitor interactions or improve our website and services.
Depending on the technologies implemented, these providers may receive technical information such as IP addresses, device identifiers, browser information and website interaction data.
Where such technologies require consent under applicable law, they will be activated only after the required consent has been obtained.
Specific providers and technologies may also be identified through our cookie consent tool or Cookie Policy, where applicable.
Do Not Track and Global Privacy Control
Some web browsers provide “Do Not Track” (“DNT”) signals. Because there is currently no universally accepted standard governing DNT signals, our website may not respond to traditional DNT signals.
Where applicable law requires recognition of legally valid opt-out preference signals, such as Global Privacy Control (“GPC”), we will process such signals as required by applicable law.
Third-party services integrated into our website may independently collect information concerning your online activities, subject to your consent choices and the privacy practices of those third parties.
This section is particularly useful for California compliance: CalOPPA specifically requires disclosure of how an operator responds to DNT or similar mechanisms and whether third parties may conduct cross-site tracking.
Disclosure of Personal Information
We do not sell or rent personal information for monetary consideration. We may disclose personal information as reasonably necessary to:
-
website hosting and infrastructure providers;
-
IT, cloud and cybersecurity providers;
-
CRM and business software providers;
-
communications providers;
-
analytics and website service providers;
-
document-management and data-room providers;
-
professional advisers, including attorneys, accountants and consultants;
-
contractors and service providers acting on our behalf;
-
transaction participants where appropriate and legally permissible;
-
governmental, regulatory, judicial or law-enforcement authorities where required or permitted by law; and
-
potential purchasers, investors, successors or other relevant parties in connection with a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction involving Bereck & Co.
Service providers processing personal information on our behalf are expected to process such information only for authorized purposes and subject to applicable legal and contractual requirements.
Sale, Sharing and Targeted Advertising
Bereck & Co. does not sell personal information for monetary consideration.
If we engage in activities that constitute a “sale,” “sharing,” “targeted advertising” or similar regulated activity under applicable U.S. state privacy laws, we will provide any notices and opt-out mechanisms required by applicable law.
We do not knowingly sell or share the personal information of individuals under the age of 16.
International Data Transfers
Bereck & Co. is organized in the United States. Personal information collected from individuals in the European Economic Area (“EEA”), United Kingdom, Switzerland or elsewhere may therefore be transferred to and processed in the United States and other jurisdictions.
These jurisdictions may have data protection laws that differ from those in your country.
Where required by applicable law, we use an appropriate legal mechanism for international transfers of personal data. Depending on the recipient and circumstances, such safeguards may include:
-
an applicable adequacy decision;
-
participation by an eligible recipient in the EU-U.S. Data Privacy Framework, UK Extension or Swiss-U.S. Data Privacy Framework, as applicable;
-
European Commission Standard Contractual Clauses (“SCCs”);
-
the UK International Data Transfer Agreement or UK Addendum, where applicable; or
-
another transfer mechanism permitted by applicable law.
You may contact us for additional information concerning the safeguards applicable to a particular transfer.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention periods may depend on:
-
the nature and purpose of the information;
-
the duration of a client or business relationship;
-
contractual requirements;
-
applicable limitation periods;
-
legal, regulatory, accounting or reporting requirements; and
-
the need to establish, exercise or defend legal claims.
When personal information is no longer required, we may delete, anonymize or otherwise dispose of it in accordance with applicable law and our retention practices.
Residual information may remain temporarily in backups until those backups are overwritten or deleted in the ordinary course.
Whether You Are Required to Provide Personal Data
You are generally not legally required to provide personal information merely to browse our website.
Certain information may, however, be necessary for us to respond to an inquiry, evaluate a potential engagement, enter into or perform an agreement, comply with legal obligations or provide requested services.
If required information is not provided, we may be unable to respond to your request, enter into an engagement or provide the relevant service.
Automated Decision-Making
Bereck & Co. does not use personal data collected through this website for solely automated decision-making, including profiling, that produces legal effects or similarly significant effects concerning individuals within the meaning of Article 22 GDPR.
Data Security
We maintain reasonable administrative, organizational and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, loss or destruction.
However, no method of electronic transmission or storage can be guaranteed to be completely secure. We therefore cannot guarantee the absolute security of personal information transmitted to or maintained by us.
Your Privacy Rights
Depending on your location and applicable law, you may have rights regarding your personal information.
These may include the right to:
-
obtain confirmation whether we process your personal information;
-
request access to your personal information;
-
request correction of inaccurate information;
-
request deletion of personal information;
-
restrict certain processing;
-
object to certain processing;
-
withdraw consent at any time where processing is based on consent;
-
receive certain personal data in a portable format;
-
opt out of certain marketing communications;
-
opt out of certain sales, sharing or targeted advertising where applicable;
-
appeal certain decisions concerning privacy requests where applicable; and
-
lodge a complaint with an applicable supervisory or regulatory authority.
These rights are subject to the conditions, limitations and exceptions provided by applicable law.
We may take reasonable steps to verify your identity and authority before fulfilling a privacy request.
Rights of EEA and UK Individuals
Where the GDPR or UK GDPR applies, you may have the rights described in Articles 15–22 GDPR, including rights of access, rectification, erasure, restriction, portability and objection.
Right to Object
Where we process your personal data on the basis of legitimate interests under Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing, including related profiling.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority, particularly in the EEA Member State or UK jurisdiction of your habitual residence, place of work or place of an alleged infringement.
We encourage you to contact us first so that we have an opportunity to address your concerns.
California Privacy Disclosures
California residents may have rights under California privacy laws.
California Online Privacy Protection Act
In accordance with applicable California law, this Privacy Policy describes:
-
categories of personal information we collect;
-
categories of third parties with whom information may be disclosed;
-
how individuals may request access to or correction of information;
-
our approach to online tracking;
-
how material changes to this Privacy Policy are communicated; and
-
the effective date of this Privacy Policy.
CalOPPA applies broadly to operators of commercial websites collecting personally identifiable information from California consumers and requires a conspicuously posted privacy policy containing specified disclosures.
California Consumer Privacy Act
If Bereck & Co. is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), California residents may have additional rights, including rights to:
-
know what personal information is collected, used and disclosed;
-
access specific pieces of personal information;
-
request deletion;
-
request correction;
-
opt out of the sale or sharing of personal information;
-
limit certain uses or disclosures of sensitive personal information, where applicable; and
-
not receive discriminatory treatment for exercising applicable privacy rights.
The CCPA currently provides rights including knowing, deletion, correction, opt-out of sale/sharing and non-discrimination.
Nothing in this section represents that Bereck & Co. is subject to the CCPA where the applicable statutory thresholds or requirements are not satisfied.
Other U.S. State Privacy Rights
Residents of certain U.S. states may have additional rights under applicable comprehensive state privacy laws.
Where such a law applies to Bereck & Co., we will honor applicable rights and provide any additional disclosures or opt-out mechanisms required by that law.
To exercise an applicable privacy right, please contact us using the information in Section 23 below.
Marketing Communications
Where permitted by applicable law, we may send professional or business-related communications concerning our services, publications, transaction opportunities or other relevant matters.
Where consent is legally required, such communications will be sent only after obtaining the required consent.
You may unsubscribe from marketing emails at any time by following the unsubscribe instructions contained in the communication or by contacting us.
Opting out of marketing does not prevent us from sending non-marketing communications relating to an existing business relationship, inquiry, engagement or legal obligation.
Third-Party Websites
Our website may contain links to third-party websites, platforms or services.
Bereck & Co. does not control and is not responsible for the privacy, security, content or data-processing practices of those third parties.
We encourage you to review their privacy policies before providing personal information.
Children's Privacy
Our website and services are intended for business and professional audiences and are not directed to children.
We do not knowingly collect personal information online from children under the age of 13. We also do not knowingly sell or share personal information of individuals under 16.
If we become aware that we have collected personal information from a child in circumstances prohibited by applicable law, we will take reasonable steps to delete it.
Changes to This Privacy Policy
We may amend this Privacy Policy from time to time to reflect changes in our website, services, technologies, business practices or applicable laws.
The revised Privacy Policy will be posted on this website and the “Last Updated” date will be updated accordingly.
Where required by applicable law, we will provide additional notice of material changes or obtain consent before applying material changes to personal information previously collected.
We encourage you to review this Privacy Policy periodically.
Contact and Data Controller
For questions regarding this Privacy Policy, our processing of personal information, or to exercise applicable privacy rights, please contact:
Data Controller:
Bereck & Co., LLC
2108 N St Ste N, Sacramento, CA 95816 US
United States
Email: info@bereckco.com
Website: www.bereckandco.com