Privacy Policy

Effective Date: July 11, 2026 Last Updated: August 13, 2026 Primary Jurisdiction: Commonwealth of Virginia, United States

Prime Executive Support (“Prime Executive Support,” “Prime,” “we,” “us,” or “our”) respects the privacy of visitors, prospective clients, clients, business contacts, applicants, contractors, and other persons who interact with our website, communications, services, and technology.

This Privacy Policy describes how we may collect, use, process, retain, disclose, secure, and otherwise handle personal information in connection with primeexecutivesupport.com, our forms and communications, the Optimus AI Assistant, and our executive support, administrative, CRM, marketing, website, SEO, and business operations services.

By accessing or using our website, you acknowledge that you have received this Privacy Policy. Where consent is required by applicable law for a particular processing activity, we will seek such consent separately as required.

Nothing in this Privacy Policy is intended to waive, restrict, or eliminate any right that cannot lawfully be waived under applicable law.

1. Governing Privacy Framework

Prime Executive Support operates from Westlake Corner, Virginia.

This Privacy Policy is principally administered from the Commonwealth of Virginia and is intended to comply with applicable Virginia and United States privacy requirements.

Where the Virginia Consumer Data Protection Act (“VCDPA”), Va. Code § 59.1-575 et seq., applies to Prime Executive Support or a particular processing activity, eligible Virginia consumers may exercise the rights provided by that statute.

References to VCDPA rights in this Policy do not constitute a representation that Prime Executive Support meets every statutory applicability threshold at all times.

Where another mandatory privacy law applies to a particular individual or processing activity, Prime will comply with that law to the extent required.

2. Scope

This Privacy Policy applies to personal information handled through:

• our website;
• contact and consultation forms;
• service inquiries;
• client communications;
• Optimus AI;
• email and telephone communications;
• recruitment and professional-opportunity submissions;
• analytics and website-security systems; and
• information processed in connection with our business services.

Certain information handled solely on behalf of a client may be governed primarily by our agreement with that client and the client's own privacy obligations.

Information concerning persons acting in a commercial or employment context may also be treated differently where applicable privacy legislation distinguishes such information from consumer data.

3. Information We May Collect

Depending on your interaction with Prime, we may collect information including:

Information You Provide

• name;
• business or company name;
• professional title;
• email address;
• telephone number;
• country or general location;
• inquiry details;
• project requirements;
• budget information;
• communications;
• résumés and professional qualifications;
• service-related documents;
• CRM or operational information supplied during an engagement;
• Optimus AI messages and prompts; and
• other information you voluntarily provide.

Automatically Collected Information

Our website, hosting infrastructure, security systems, analytics technologies, and authorized service providers may automatically receive information such as:

• IP address;
• browser and device information;
• operating system;
• referring URL;
• pages visited;
• timestamps;
• session and interaction information;
• approximate geographic location derived from network information;
• cookie identifiers; and
• technical diagnostic or security information.

We may combine information obtained through different interactions where permitted by law and reasonably necessary for the purposes described in this Policy.

4. Do Not Submit Sensitive Information Unnecessarily

Unless specifically requested through an authorized and secure process, please do not provide:

• passwords;
• authentication credentials;
• Social Security numbers;
• driver's-license numbers;
• passport information;
• complete financial-account information;
• payment-card security codes;
• medical information;
• biometric identifiers; or
• other highly sensitive information

through general website forms, ordinary email, or Optimus AI.

Prime Executive Support is not responsible for a person's voluntary submission of sensitive information through a channel where Prime expressly instructed that such information should not be submitted, except to the extent responsibility cannot lawfully be excluded.

5. Purposes for Which Information May Be Used

Subject to applicable law, Prime may use personal information as reasonably necessary to:

• respond to inquiries;
• provide requested information;
• evaluate prospective engagements;
• prepare proposals;
• deliver and administer services;
• communicate with clients and business contacts;
• provide customer support;
• manage CRM and operational workflows;
• operate and improve Optimus AI;
• evaluate professional applicants;
• administer contracts;
• maintain business records;
• improve website usability and performance;
• perform analytics;
• detect abuse, spam, fraud, or unauthorized activity;
• protect Prime, its clients, personnel, systems, and users;
• investigate security incidents;
• enforce applicable agreements and policies;
• establish, exercise, or defend legal claims;
• comply with legal process;
• comply with regulatory obligations;
• protect legal rights or property;
• perform internal administration;
• maintain business continuity;
• communicate relevant service information; and
• perform other compatible purposes permitted by law.

Prime may also use aggregated or de-identified information for lawful business, analytical, security, research, and service-improvement purposes where the information is not reasonably linkable to an identifiable individual.

6. Optimus AI Assistant

Prime's website may provide access to Optimus AI, an AI-powered visitor-assistance system.

Information submitted to Optimus may be processed to:

• respond to questions;
• provide website navigation;
• explain Prime's services;
• maintain appropriate conversational context;
• identify service inquiries;
• facilitate requested human follow-up;
• detect abuse or security threats; and
• evaluate or improve system quality.

AI Outputs

Optimus provides automated informational responses.

AI-generated responses may occasionally be incomplete, inaccurate, outdated, or inappropriate for a visitor's particular circumstances.

Optimus does not provide legal, tax, accounting, financial, medical, employment, regulatory, or other licensed professional advice.

Unless expressly confirmed by an authorized Prime representative in a separate written agreement, an Optimus response does not:

• create a contract;
• modify an existing contract;
• constitute a binding quotation;
• guarantee service availability;
• create a professional-client relationship; or
• bind Prime Executive Support to a transaction or representation.

Visitors should independently verify information before relying upon it for material business decisions.

7. Location Information

Prime may derive an approximate city, state, region, or country from technical information such as an IP address.

Where Optimus or another feature offers optional device-location sharing, precise location access will be requested through the applicable browser or device permission mechanism.

You may decline optional location access.

Prime does not intend to collect precise geolocation information except where the user affirmatively enables a location-dependent feature and such processing is permitted by applicable law.

8. Cookies, Analytics & Similar Technologies

Prime may use cookies and comparable technologies for:

• essential website operation;
• security;
• session functionality;
• user preferences;
• consent management;
• analytics;
• performance measurement; and
• other lawful website functionality.

Where legally required, non-essential technologies will be subject to applicable consent or opt-out mechanisms.

Browser settings may permit you to restrict certain cookies. Disabling necessary technologies may affect website functionality.

Additional information may be provided through our Cookie Policy and Cookie Preferences controls.

9. Service Providers & Other Disclosures

Prime does not sell personal data for monetary consideration.

Subject to applicable law, information may be disclosed to parties reasonably necessary to operate our business or provide requested services, including:

• hosting and infrastructure providers;
• email and communications providers;
• CRM providers;
• analytics providers;
• security providers;
• AI and technology providers;
• professional advisers;
• contractors acting under appropriate obligations;
• payment or administrative providers where applicable; and
• other vendors supporting authorized business operations.

Prime may also disclose information where it reasonably believes disclosure is necessary or appropriate to:

• comply with applicable law;
• comply with court orders, subpoenas, warrants, or lawful governmental requests;
• investigate suspected fraud or unlawful conduct;
• enforce agreements;
• protect legal rights;
• protect the safety or security of Prime, its clients, personnel, systems, or others; or
• establish, exercise, or defend legal claims.

Where permitted by law, Prime may disclose relevant information in connection with an actual or proposed merger, financing, acquisition, reorganization, sale of assets, insolvency, or similar corporate transaction.

10. Client Data & Processor Activities

Prime may process information on behalf of clients while providing CRM management, administrative assistance, marketing support, website services, or other operational services.

Where Prime acts solely on a client's documented instructions, the client may be the party responsible for determining the purposes and means of the relevant processing.

Requests concerning information controlled by a Prime client may therefore be referred to that client where appropriate.

Nothing in this Policy expands Prime's responsibility beyond the responsibility imposed by applicable law or an applicable written client agreement.

11. Security

Prime uses administrative, technical, and organizational safeguards reasonably designed for the nature and volume of information handled.

Such safeguards may include:

• encrypted network communications;
• access restrictions;
• authentication controls;
• anti-spam and abuse controls;
• credential-management practices;
• monitoring;
• backups; and
• vendor controls.

No Internet transmission, software application, cloud environment, electronic communication, or storage system can be guaranteed to be completely secure.

Accordingly, Prime does not warrant or guarantee absolute security.

Nothing in this section limits any responsibility imposed by applicable law.

12. Data Retention

Prime may retain personal information for the period reasonably necessary to:

• provide services;
• administer an engagement;
• maintain legitimate business records;
• comply with applicable law;
• satisfy accounting or tax requirements;
• maintain security records;
• resolve disputes;
• investigate misconduct;
• enforce agreements; or
• establish, exercise, or defend legal claims.

Retention periods may therefore vary according to the information, relationship, applicable legal requirements, and legitimate operational need.

Information may be deleted, securely destroyed, anonymized, or de-identified when retention is no longer reasonably necessary, subject to applicable law and legitimate archival, backup, fraud-prevention, dispute, and legal-hold requirements.

13. Virginia Consumer Privacy Rights

To the extent the VCDPA applies to Prime Executive Support and to the person or processing activity concerned, an eligible Virginia consumer may have the statutory right to:

1. confirm whether Prime processes the consumer's personal data and obtain access;
2. correct inaccuracies;
3. request deletion of qualifying personal data;
4. obtain qualifying personal data in a portable format; and
5. opt out of qualifying processing for targeted advertising, sale of personal data, or profiling in furtherance of decisions producing legal or similarly significant effects.

These rights are subject to the definitions, scope, exceptions, authentication requirements, and limitations established by applicable law.

14. Submitting a Privacy Request

Requests may be submitted to:

Email: connect@primeexecutivesupport.com Phone: +1 (540) 510-2575 Mail: Attn: Privacy Request, Prime Executive Support, 96 Builders Pride Dr., Westlake Corner, VA 24101

Prime may use commercially reasonable methods to authenticate the identity of the requester and may request additional information reasonably necessary for authentication.

Prime is not required to disclose personal information to a person whose identity or authority cannot reasonably be authenticated where applicable law permits Prime to decline the request.

Prime ordinarily will respond to an applicable authenticated VCDPA request without undue delay and within the statutory period.

Where reasonably necessary because of the complexity or number of requests, Prime may extend the response period as permitted by applicable law and provide the required notice.

To the extent permitted by law, Prime may charge a reasonable administrative fee or decline to act upon requests that are manifestly unfounded, excessive, or repetitive.

15. Appeals

Where the VCDPA applies and Prime declines an eligible consumer request, the consumer may appeal the decision by contacting:

connect@primeexecutivesupport.com

Subject line:

Privacy Request Appeal

Prime will process a qualifying appeal in accordance with applicable Virginia law.

If an appeal is denied, Prime will provide the applicable mechanism or information through which an eligible consumer may submit a complaint to the Office of the Attorney General of Virginia, as required by law.

16. Legal Preservation & Exceptions

Nothing in this Policy requires Prime to delete, alter, disclose, or cease processing information where retention or processing is permitted or required for purposes including:

• compliance with applicable law;
• legal claims;
• litigation holds;
• regulatory obligations;
• contractual administration;
• fraud prevention;
• cybersecurity;
• internal investigations;
• protection of rights or property;
• exercising or defending legal rights; or
• other purposes permitted by applicable privacy law.

Privacy requests remain subject to all applicable statutory exceptions.

17. Business & Professional Communications

Prime primarily provides business and professional services.

Certain information received from individuals acting on behalf of companies, clients, prospective clients, employers, contractors, vendors, or other organizations may constitute business or professional-context information.

Where applicable law excludes such information from a statutory definition of “consumer” or otherwise treats it differently, Prime may process that information in accordance with the applicable legal framework.

18. Applicants & Professional Opportunities

Information submitted in connection with employment, contractor, freelance, internship, partnership, or other professional opportunities may be used to:

• evaluate qualifications;
• communicate with applicants;
• verify information where lawful;
• administer recruitment;
• maintain recruiting records;
• protect Prime's legal interests; and
• comply with applicable obligations.

Submission of an application does not guarantee an interview, engagement, employment, contractor relationship, or other opportunity.

19. Children

Prime's website and services are intended for business and professional audiences and are not directed to children.

Prime does not knowingly solicit personal information from children through its general business website.

If Prime learns that information concerning a child has been collected in circumstances requiring deletion or parental consent under applicable law, Prime will take appropriate action.

20. Third-Party Websites & Services

Prime's website may contain links, integrations, maps, embedded services, social networks, or other functionality operated by independent third parties.

Prime does not control independent third parties and is not responsible for their separate privacy practices, security, availability, terms, or content.

Use of third-party services is subject to the applicable third party's own terms and privacy practices.

21. International Processing

Prime and its authorized service providers may process information in the United States or other jurisdictions.

Privacy and data-protection laws may differ between jurisdictions.

Where applicable law requires safeguards for particular transfers, Prime will implement legally required measures.

22. Other U.S. Privacy Laws

Residents of other U.S. jurisdictions may have privacy rights under laws applicable to them and to Prime.

Prime will honor legally valid requests to the extent required by applicable law.

Nothing in this Privacy Policy voluntarily extends a statutory right, remedy, cause of action, or obligation beyond what applicable law requires.

23. No Sale Representation

Prime currently states that it does not sell personal data for monetary consideration.

If Prime's data practices materially change in a manner requiring additional disclosure, consent, or opt-out rights under applicable law, this Policy and relevant controls will be updated as legally required.

24. Data Breach & Incident Response

Prime maintains procedures intended to identify, investigate, contain, and respond to suspected security incidents.

Where a security incident constitutes a legally reportable breach, Prime will provide notifications to affected individuals, governmental authorities, or other parties to the extent and within the time required by applicable law.

Nothing in this Policy creates a contractual notification obligation broader than an obligation imposed by applicable law or an express written agreement.

25. No Guarantee of Website Availability

Prime may modify, suspend, restrict, replace, or discontinue website features, including Optimus AI, at any time subject to applicable contractual and legal obligations.

Availability of a website feature does not guarantee continued availability of that feature or any particular service.

26. Changes to this Privacy Policy

Prime may amend this Privacy Policy from time to time to reflect:

• changes in law;
• operational changes;
• new technology;
• security practices;
• service changes;
• vendor changes; or
• changes in data-processing practices.

The revised Policy becomes effective when published unless a different effective date is stated or applicable law requires additional notice or consent.

The Last Updated date will identify the latest published revision.

27. Virginia Administration; Mandatory Rights Preserved

This Privacy Policy is administered by Prime Executive Support from the Commonwealth of Virginia.

To the extent a dispute concerning this Policy is governed by a valid contractual choice-of-law or forum provision contained in a separate agreement with Prime Executive Support, that agreement will control to the extent permitted by law.

Nothing in this Policy is intended to override mandatory consumer protections, statutory privacy rights, or other rights that applicable law prohibits the parties from waiving or limiting.

28. Interpretation

Headings are provided for convenience and do not limit the meaning of this Policy.

Terms such as “including” and “includes” are illustrative and are not intended to be exhaustive.

If a provision of this Privacy Policy conflicts with a mandatory requirement of applicable law, the mandatory requirement controls to the minimum extent necessary, and the remaining provisions should continue to be interpreted consistently with applicable law.

Nothing in this Privacy Policy creates rights, remedies, warranties, fiduciary duties, or contractual obligations beyond those imposed by applicable law or expressly assumed by Prime in a separate written agreement.

29. Contact

For privacy questions or qualifying privacy requests:

Prime Executive Support Attn: Privacy & Data Protection 96 Builders Pride Dr. Westlake Corner, VA 24101 United States

Email: connect@primeexecutivesupport.com Phone: +1 (540) 510-2575 Website: https://primeexecutivesupport.com/