Effective Date: June 19, 2026

HCP Associates (“HCP,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly and transparently. This Privacy Policy explains what information we collect through our website at https://www.hcpassociates.com (the “Site”), how we use and share it, and the rights and choices available to you.

HCP Associates is a research, strategy, marketing, advisory, and public-affairs firm based in Tampa, Florida, serving business and government clients. This Policy applies to information collected through our Site and our related marketing and communications activities. It does not govern the personal information we process on behalf of our clients under contract, where our clients act as the controller and we act as a service provider or processor; that information is handled in accordance with our agreements with those clients.

Scope of This Policy

This Policy applies to visitors to our Site, individuals who contact us, and people who subscribe to our marketing communications. It is written to apply to anyone who interacts with us, regardless of where you are located. By using our Site or providing information to us, you acknowledge that you have read and understood this Policy.

Information We Collect

We collect information in the following ways:

Information You Provide Directly

Information Collected Automatically

We do not intentionally collect sensitive personal information (such as data revealing racial or ethnic origin, religious beliefs, health conditions, sexual orientation, citizenship or immigration status, precise geolocation, or genetic or biometric data) through our Site. Please do not submit sensitive information to us through our contact forms.

How We Use Your Information

We use the information we collect to:

Cookies and Tracking Technologies

Cookies are small text files placed on your device. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until they expire or you delete them). We use:

You can control cookies through your browser settings, including blocking or deleting them. If you disable certain cookies, some parts of the Site may not function properly. Where required by law, we will request your consent before placing non-essential cookies, and we honor recognized browser-based opt-out preference signals as described under “Your Privacy Rights” below. For more detail, see our Cookie Policy.

Analytics and Advertising

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to help us understand how visitors interact with our Site. GA4 collects information such as pages viewed, time spent on the Site, and general (non-precise) location derived from IP address, and uses cookies and similar identifiers to do so. We use this information in aggregate to measure and improve the performance of our Site.

You can learn how Google collects and processes data at https://policies.google.com/technologies/partner-sites, and you can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.

HCP is a business-to-business professional services firm. We do not sell your personal information for money, and we do not engage in broad cross-context behavioral advertising of the kind associated with consumer retail. To the extent any analytics or advertising technology we use could be considered “sharing” or “targeted advertising” under applicable state privacy laws, we honor opt-out preference signals and opt-out requests as described below.

How We Share Information

We do not sell your personal information. We share personal information only as follows:

Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information. We honor verifiable requests as required by applicable law. The rights described below apply to residents of states and regions with applicable privacy laws.

Florida Residents

The Florida Digital Bill of Rights (FDBR) provides Florida consumers with certain rights, including the right to confirm whether we process their personal data and to access it; to correct inaccuracies; to delete personal data; to obtain a portable copy of their data; and to opt out of the sale of personal data, targeted advertising, and certain profiling. The FDBR applies in full only to companies that meet high revenue and activity thresholds (generally those with more than $1 billion in global gross annual revenue and significant digital-advertising or app-store operations), and HCP does not meet those thresholds. Even so, we are committed to honoring the privacy choices of Florida residents and will respond to requests submitted to us as described under “How to Exercise Your Rights.”

California Residents

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), California residents have the right to:

HCP does not sell personal information for monetary value. To the extent our use of analytics or advertising technologies constitutes “selling” or “sharing” under the CCPA, you may opt out. We recognize and honor the Global Privacy Control (GPC) and other browser-based opt-out preference signals as a valid opt-out of sale and sharing for the browser or device from which the signal is sent. You may also submit a request as described below. You may designate an authorized agent to make a request on your behalf, and we may require verification of the agent’s authority and your identity.

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and Other States

Residents of states with comprehensive consumer privacy laws — including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Utah, Delaware, Iowa, Indiana, Tennessee, Minnesota, Nebraska, New Hampshire, New Jersey, Kentucky, Maryland, Rhode Island, and others as such laws take effect — generally have the right to:

Where your state’s law requires it, we recognize and honor a universal opt-out preference signal, such as the Global Privacy Control (GPC), as a valid request to opt out of targeted advertising and the sale of personal data. We will not discriminate against you for exercising these rights. If we decline a request, you may have the right to appeal our decision; our response will explain how to do so.

EU, UK, and Other International Visitors

If you are located in the European Economic Area, the United Kingdom, or another region with applicable data protection law, and the EU or UK General Data Protection Regulation (GDPR) applies to our processing of your personal data, we process your personal data on one or more lawful bases: your consent (for example, to send marketing emails); the performance of, or steps to enter into, a contract; our legitimate interests in operating and promoting our business (balanced against your rights); and compliance with legal obligations.

Subject to applicable law, you have the right to access your personal data; to request correction or erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local data protection authority. Where we rely on legitimate interests, you may object to that processing.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us through our contact page at https://www.hcpassociates.com/contact/. We will take reasonable steps to verify your identity before fulfilling your request, which may include confirming information we already hold about you. We will respond within the timeframes required by applicable law. There is generally no charge to exercise your rights, although we may charge a reasonable fee or decline a request that is excessive, repetitive, or manifestly unfounded, as permitted by law.

You may also opt out of our marketing emails at any time by clicking the “unsubscribe” link in any marketing message or by contacting us. We honor opt-out requests promptly and, in any event, within the time required by the CAN-SPAM Act and other applicable law. Note that even if you opt out of marketing, we may still send you non-promotional messages, such as responses to your inquiries.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to respond to your inquiries, provide and improve our services, maintain business records, and comply with our legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we take reasonable steps to delete, anonymize, or securely store it. Retention periods vary depending on the type of information and the purpose for which it was collected.

Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping any credentials you use to interact with us confidential.

Children’s Privacy

Our Site is intended for a business and professional audience and is not directed to children. We do not knowingly collect personal information from children under the age of 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information, please contact us and we will take appropriate steps to delete it. We also do not knowingly process the personal data of minors in a manner that would require parental consent or opt-in consent under applicable state privacy laws.

Third-Party Links

Our Site may contain links to third-party websites, services, or resources that we do not operate or control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party site you visit.

International Data Transfers

HCP is based in the United States, and our Site is operated from the United States. If you access our Site or provide information to us from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. Where required by applicable law, we implement appropriate safeguards for such transfers. By using our Site or providing information to us, you understand that your information may be processed in the United States.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will revise the “Effective Date” at the top of this Policy and, where appropriate, provide additional notice. We encourage you to review this Policy periodically. Your continued use of the Site after changes take effect constitutes acceptance of the updated Policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you would like to exercise your privacy rights, please reach out to us through our contact page at https://www.hcpassociates.com/contact/. HCP Associates is located in Tampa, Florida.