Effective Date: May 14, 2026

Last Updated: May 14, 2026

Tight Ship Advisors, Inc. ("Tight Ship Advisors," "Tight Ship," "TSA," "we," "our," or "us") is committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us by our clients, prospective clients, website visitors, and the family members, fiduciaries, and professional advisors who work alongside them. Safeguarding sensitive personal, financial, and health-related information is a core fiduciary responsibility and essential to maintaining the trust that defines our work.
This Privacy Policy describes the types of information we collect, how that information is used and shared, the measures we take to protect it, and the choices and rights available to you.

​

1. Scope of This Policy
This Privacy Policy applies to information we collect:

• When you visit or interact with tight-ship.com or any related Tight Ship website, page, or online form.

• When you communicate with us by phone, email, text, mail, video, or in person.

• When you become a client of Tight Ship and use our personal CFO, bill pay, household management, concierge, fiduciary, or related services; and.

• When we receive information about you from a wealth manager, family office, attorney, accountant, healthcare professional, family member, or other authorized representative

       who is working with you.

 

This Privacy Policy does not cover the practices of third parties we do not own or control, including third-party websites, financial institutions, or service providers you separately engage. Their information practices are governed by their own policies.

2. Information We Collect
In order to provide our services accurately, securely, and in accordance with our engagement agreements, we collect information about clients and the individuals connected to them. The specific information we collect depends on the services you request. It may include:
Identifying and contact information — name, residential and mailing address, email address, telephone number, date of birth, photograph or video likeness, signature, government-issued identification numbers (such as Social Security number, driver's license, or passport number where required), and household member information.

Financial information — bank and brokerage account details, credit card information, bills, invoices, payment records, account balances, transaction history, tax documents, budget and cash-flow information, and information about household expenses, income, and obligations.

Wealth management and professional advisor information — names and contact details for your financial advisor, investment advisor, accountant or CPA, attorney, insurance professional, healthcare coordinator, trustee, fiduciary, and other professionals authorized to work with us on your behalf.

Insurance, Medicare, and benefits information — policy numbers, coverage details, claims information, and related correspondence.

Health and care-related information — only to the extent necessary to perform requested services, such as paying medical bills, coordinating insurance claims, scheduling appointments, organizing medications, or supporting care decisions. We do not provide clinical advice or care. Property and household information — vendor relationships, service histories, household credentials, and similar information needed to manage homes, vendors, and lifestyle logistics on your behalf.

Communications and records — the contents of letters, emails, secure messages, voicemails, meeting notes, and other correspondence sent to or from us, and the records of services we perform on your behalf.

Online and device information — when you visit our website or use our client portal, we may collect IP address, browser type, device type, operating system, referring/exit pages, pages viewed, dates and times of access, and similar diagnostic data, as further described in Section 7 (Cookies and Online Tracking).

Recruiting information — if you apply for a position with Tight Ship, we collect the information you provide in your application, resume, references, and during the interview process.

3. Sources of Information
We collect information directly from you through applications, intake materials, service requests, written correspondence, electronic communications, telephone conversations, v ideo conferences, and in-person interactions.

We also receive information from third parties who work with you, including your wealth manager or family office, financial advisor, accountant, attorney, insurance professional,
healthcare provider or coordinator, trustee, fiduciary, household staff, or family members — in each case to the extent you (or your authorized representative) have permitted them to share information with us. In addition, our website, client portal, and communications platforms automatically collect certain technical information about your visit or use, as described in Section 7.

We rely on the accuracy and completeness of information provided by you and by the third parties you authorize. If you believe any information we hold is inaccurate, please contact us using the information in Section 14.

4. How We Use Information
We use the information we collect to:

• Provide, perform, and improve the services described in our Letter of Engagement and any related work product.

• Communicate with you and with the professional advisors, family members, and other parties you have authorized.

• Process and document bills, payments, expenses, reimbursements, claims, and other financial transactions at your direction.

• Coordinate household, lifestyle, healthcare, insurance, tax, and legal matters with the appropriate professionals.

• Verify identity, prevent fraud, and protect the security of your accounts and information.

• Maintain accurate books, records, and audit trails.

• Operate, evaluate, and improve our business (including training staff, analyzing service quality, and developing new services).

• Respond to your inquiries, support requests, and feedback.

• Comply with applicable laws, regulations, court orders, subpoenas, and lawful requests from government authorities; and.

• Establish, exercise, or defend legal claims, and enforce our agreements.

 

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising or other unrelated marketing purposes.

 

5. How We Share Information
We share information only as necessary to provide services, fulfill your instructions, operate our business, or comply with applicable legal requirements. Categories of recipients include:

Your authorized representatives and professional advisors — including your wealth manager, financial advisor, investment advisor, accountant, attorney, insurance professional, healthcare coordinator, trustee, fiduciary, designated family members, and other professionals identified in your Letter of Engagement or other written authorization.

 

Service providers and vendors engaged on your behalf — such as household vendors, repair and maintenance providers, healthcare or in-home care providers, and other suppliers we coordinate with at your direction.

Tight Ship's own technology and operations providers — including providers of secure email, document storage, accounting and bill-pay software, customer relationship management, client portals, encrypted password management, communications platforms, mail processing, and similar back-office services. These providers are contractually required to handle information in a manner consistent with this Privacy Policy and applicable law.

 

Successor businesses — in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction involving Tight Ship, subject to confidentiality protections.

Government authorities and other parties as required by law — to comply with applicable law, regulation, subpoena, court order, or other legal process; to cooperate with law
enforcement or regulatory investigations; or to protect the rights, property, or safety of Tight Ship, our clients, or others.

 

Medical information is shared only at your direction and only with specialist firms or professionals separately engaged by you (or by your authorized representative) for healthcare billing, insurance coordination, or care purposes.

Sharing with any third party is governed by your signed Letter of Engagement (or other written authorization), which defines the scope and purpose of such sharing. You may revoke or modify these permissions at any time by providing written notice to Tight Ship using the contact information in Section 14. Revocation does not apply retroactively to information already shared in good-faith reliance on prior authorization.

We do not disclose personal information about clients or former clients to unaffiliated third parties except as described in this Privacy Policy or as permitted or required by law.

6. Data Security
Tight Ship maintains administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction. These safeguards include:

• A cloud-native, all-SaaS operating environment with no on-premise production servers.

• Multi-factor authentication ("MFA") enforced on every business application that holds client data, including email, document storage, the accounting and bill-pay system, the

       customer relationship management system, and the credential vault.

• Full-disk encryption on all company-issued endpoints.

• Encryption of data in transit and at rest as supported by our platform providers.

• A shared, enterprise-grade password manager (1Password Business) for storing and sharing any client credentials required to perform services — Tight Ship does not record

• or exchange client credentials on paper, in plain-text email, in text messages, or in any unsecured location.

• Endpoint anti-malware, firewalls, and automatic security updates.

• Role-based access controls limiting access to personal information to personnel and service providers with a legitimate business need.

• Vendor due diligence and contractual confidentiality and security commitments from material service providers.

• Written information security, business continuity, and incident-response procedures, reviewed and updated periodically.

• Secure destruction (shredding or equivalent) of paper records and secure deletion of electronic records when retention is no longer required; and.

• Staff training on confidentiality, data protection, and information-security practices.

No security program can guarantee absolute protection, and no method of transmission over the internet or method of electronic storage is 100% secure. In the event of a data security incident involving personal information, Tight Ship will investigate the incident and provide notice to affected individuals and applicable regulators as required by federal and state law.

7. Cookies and Online Tracking
Our website uses cookies and similar technologies (such as pixels, tags, and local storage) to operate the site, remember your preferences, measure site performance, and improve your experience.

Strictly necessary cookies are required for the site to function (for example, to load pages, secure the site, and route traffic) and cannot be turned off in our systems.

Functional cookies allow the site to remember choices you make (such as your region or language) and to provide enhanced features.

Analytics cookies help us understand how visitors interact with the site so we can improve content and navigation. These analytics are aggregated and not used to build profiles for advertising.

We do not use cookies or similar technologies for cross-context behavioral advertising and we do not sell information collected through our website.

You can control cookies through your browser settings and, on supported browsers, by sending a Global Privacy Control ("GPC") signal, which we will treat as a request to opt out of any sale or sharing of personal information. Disabling certain cookies may affect site functionality.

8. Data Retention
We retain personal information for as long as necessary to provide our services, maintain accurate books and records, comply with legal, tax, accounting, regulatory, and audit
obligations, resolve disputes, and enforce our agreements. When personal information is no longer required for these purposes, we securely destroy, delete, or de-identify it. Retention periods vary by record type and applicable law; we apply the longest applicable retention period required for a given record.

9. Your Choices and Rights
Tight Ship respects your control over your personal information. Subject to verification of your
identity and applicable legal limitations, you may:

• Access — request a copy of the personal information we hold about you.

• Correct — request that we correct inaccurate or incomplete information.

• Delete — request that we delete personal information we hold about you, subject to our need to retain information for legal, regulatory, audit, fiduciary, or contractual reasons.

• Limit use of sensitive information — request that we limit the use or disclosure of sensitive personal information to what is necessary to perform requested services.

• Withdraw or modify authorization — revoke or modify the authorizations contained in your Letter of Engagement or other written authorization (revocation is prospective and

• does not affect information already shared).

• Opt out of sale or sharing — although we do not sell personal information and do not share it for cross-context behavioral advertising, you may submit an opt-out request at any time; and.

• Non-discrimination — exercise any of the rights above without being subjected to discriminatory treatment.

To exercise any of these rights, please contact us using the information in Section 14. We will respond within the timeframes required by applicable law. If we deny a request in whole or in part, we will explain why, and you may appeal that decision by replying to our response with the words "Privacy Appeal" in the subject line.

You may also designate an authorized agent to submit a request on your behalf, subject to verification that the agent is authorized to act for you.

 

Depending on where you live, additional state-specific rights may apply to you. The substantive rights described above are intended to align with current U.S. state consumer-privacy laws. Residents of certain states may have additional rights or remedies under those laws; nothing in this Privacy Policy limits any right you have under applicable law.

10. Children's Privacy
Tight Ship's services are directed to adults. We do not knowingly collect personal information from children under the age of 13, and our website is not directed to children. If you believe a child has provided personal information to us, please contact us using the information in Section 14 and we will take appropriate steps to delete it.

 

11. Third-Party Links and Services
Our website and communications may contain links to websites or services operated by third parties. Tight Ship is not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party site or service before providing personal information.

12. Marketing Communications
If you have opted in to receive newsletters, educational content, or other marketing communications from Tight Ship, you may unsubscribe at any time using the unsubscribe link in
those emails or by contacting us at info@tight-ship.com. Service-related communications (such as those related to your engagement or your account) will continue regardless of marketing preferences.

13. Changes to This Privacy Policy
We may amend this Privacy Policy from time to time. The "Last Updated" date at the top of this policy reflects the most recent revision. We will post the current version on our website and, where material changes are made, will provide notice to active clients as required by law or our engagement agreements. We encourage you to review this policy periodically.

14. How to Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy
practices, please contact us:
Tight Ship Advisors, Inc. PO Box 494 Winnetka, IL 60093
Phone: 312-566-7812

Email: info@tight-ship.com

Web: https://www.tight-ship.com

For privacy-rights requests, please write "Privacy Request" in the subject line.

15. Governing Law and Jurisdiction
This Privacy Policy and any disputes arising from or related to it are governed by the laws of the State of Illinois, without regard to its conflict-of-law principles. The exclusive jurisdiction and venue for any such disputes shall be the state and federal courts located in Cook County, Illinois, except where otherwise prohibited by law and except for the rights you may have under the consumer-privacy laws of your state of residence.

16. Consent
By accessing or using the tight-ship.com website, by submitting information to Tight Ship, or by engaging Tight Ship for services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and contact us before submitting personal information or proceeding with services.

17. Whistleblower Policy
Tight Ship is committed to ethical conduct and legal compliance. Our Whistleblower Policy encourages employees, clients, vendors, and other interested parties to report concerns
regarding unethical behavior, suspected violations of law, or breaches of company policy without fear of retaliation.
Reports may be submitted in good faith and, if you choose, anonymously. Retaliation against any individual who raises a concern in good faith is strictly prohibited and may result in disciplinary action, up to and including termination.

Concerns may be reported by email to info@tight-ship.com or anonymously through the following form:
https://forms.gle/7dmL6SYgyBKqCPwGA