M-F 9:30a-6:30p
    Mesa Group Consulting
    Join
    Legal Document

    Do Not Sell or Share My Personal Information

    MESA & CO CONSULTING LLC, doing business as Mesa Group Consulting

    Effective Date: [TBD — date of publication]
    Last Updated: [TBD — date of publication]

    This page describes how California residents can exercise their right to opt out of the "sale" or "sharing" of personal information under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and how Mesa Group Consulting honors Global Privacy Control (GPC) signals.

    Table of Contents

    1
    OUR POSITION ON SELLING PERSONAL INFORMATION

    Mesa Group Consulting does NOT sell or share your personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

    We want to be absolutely clear: We do not sell, rent, lease, or exchange your personal information for monetary compensation to third-party marketers, data brokers, advertisers, or any other entities.

    What We Don't Do:

    • Sell your name, email, phone number, or address to third-party marketers
    • Sell your credit report information to data brokers
    • Sell your financial information to advertisers
    • Exchange your personal data for money
    • Provide your information to third parties for their direct marketing purposes

    What We Do:

    • Share information with trusted service partners only when necessary to provide services you requested (e.g., SmartCredit for credit monitoring, Novae for business funding and debt relief)
    • Use third-party cookies and tracking technologies (Google Analytics, Facebook Pixel) for website analytics and advertising — see Section 3
    • Comply with legal and regulatory requirements
    • Protect your information with industry-standard security measures

    For a complete list of our service partners and how we share information, see our California Privacy Rights page.

    2
    SHARING FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING

    Under the CCPA and CPRA, two terms apply to disclosures of personal information:

    "Selling" means disclosing or making available personal information to a third party in exchange for monetary or other valuable consideration.

    "Sharing" means disclosing personal information to a third party for cross-context behavioral advertising purposes, whether or not for monetary consideration.

    Examples of "Selling" or "Sharing" (Which We Do NOT Do):

    • Providing customer lists to data brokers for payment
    • Exchanging customer data with advertisers for money
    • Selling email lists to third-party marketers
    • Disclosing personal information to third parties for cross-context behavioral advertising

    What Is NOT Considered a "Sale" or "Share":

    • Sharing information with service providers who perform services on our behalf (credit bureaus, payment processors, email platforms)
    • Sharing information as required by law (subpoenas, court orders, regulatory requests)
    • Sharing information to protect against fraud or illegal activity
    • Transferring information as part of a business merger or acquisition
    • Sharing with consumer's direction or consent

    While Mesa Group Consulting does not sell your personal information in the traditional sense, we use third-party cookies and tracking technologies that may be considered "sharing" under the CCPA/CPRA's broad definitions. See Section 3 for the full list.

    3
    THIRD-PARTY TECHNOLOGIES WE USE

    We use the following third-party cookies, pixels, and tracking technologies on our website. Each may collect device or activity information that, under the CCPA/CPRA's broad definitions, could be considered "sharing" for cross-context behavioral advertising.

    Third-Party Technologies We Use:

    • Google Analytics: Tracks website traffic, user behavior, and demographics
    • Facebook Pixel: Tracks conversions, retargets website visitors on Facebook/Instagram
    • TikTok Pixel: Tracks conversions, retargets website visitors on TikTok
    • YouTube Ads: Tracks video engagement and ad performance
    • X (Twitter) Pixel: Tracks conversions, retargets website visitors on X/Twitter
    • LinkedIn Insight Tag: Tracks conversions, retargets website visitors on LinkedIn
    • GoHighLevel (GHL): CRM and marketing automation platform
    • Advertising Networks: Display ads and retargeting campaigns

    How These Technologies Work:

    • Third-party cookies collect information about your website activity (pages visited, clicks, time on site)
    • This information may be used to display personalized ads on other websites
    • Advertising networks may use this data to build interest-based profiles

    Is This a "Sale" or "Share" Under CCPA/CPRA?

    Under the CCPA/CPRA's broad definitions, using third-party cookies and tracking technologies for advertising and retargeting purposes may be considered "sharing" for cross-context behavioral advertising — even though we do not receive monetary compensation for this activity. We honor your right to opt out of this sharing. See Section 4 below for how to submit an opt-out request, and Section 5 for our automatic GPC honoring.

    For a complete cookie inventory, see our Cookie Policy.

    4
    HOW TO SUBMIT A DO NOT SELL OR SHARE REQUEST

    To submit a "Do Not Sell or Share My Personal Information" request, contact our Compliance Department by email or mail.

    4.1 Email (Preferred Method)

    4.2 Mail

    MESA GROUP CONSULTING

    Attn: Compliance Department — Do Not Sell or Share Request

    5001 California Ave, Suite 219

    Bakersfield, CA 93309

    4.3 What to Include in Your Request

    To help us process your opt-out request quickly, please include:

    • Your full name
    • Email address associated with our website or services (if applicable)
    • Phone number
    • Mailing address
    • A clear statement that you are submitting a "Do Not Sell or Share" request
    • The browser, device, or account you want the opt-out applied to (if specific)
    • Confirmation that you are a California resident

    4.4 Response Timeline

    • We will acknowledge receipt of your request within 10 business days
    • We will process and confirm your opt-out within 15 business days of receipt, as required by CPRA
    • Once processed, your opt-out will remain in effect unless you affirmatively consent to the sale or sharing of your information again

    5
    HONORING GLOBAL PRIVACY CONTROL (GPC) SIGNALS

    Mesa Group Consulting honors Global Privacy Control (GPC) signals as a valid opt-out request under the CCPA/CPRA.

    What Is GPC?

    The Global Privacy Control is a browser-level signal that automatically communicates your opt-out preference to every website you visit, eliminating the need to submit individual opt-out requests on each site.

    How Mesa Group Honors GPC

    When we detect a GPC signal from your browser:

    • We treat it as a valid opt-out request to the sale or sharing of personal information
    • We will not load non-essential marketing or advertising cookies that involve "sale" or "sharing" of personal information as those terms are defined under California law
    • The opt-out applies to that browser/device for as long as the GPC signal is present
    • No additional submission is required from you

    How to Enable GPC

    GPC is built into or supported by several browsers and extensions:

    • Mozilla Firefox (with privacy settings enabled)
    • Brave Browser (built-in)
    • DuckDuckGo Privacy Browser (built-in)
    • Privacy Badger (browser extension)

    For more information about GPC, visit https://globalprivacycontrol.org.

    6
    OTHER WAYS TO OPT OUT

    In addition to submitting a Do Not Sell or Share request (Section 4) and using GPC (Section 5), you have several other tools to limit third-party tracking and interest-based advertising.

    6.1 Our Cookie Consent Banner

    When you first visit our website, you will see a cookie consent banner that allows you to reject non-essential cookies (analytics, marketing, functional, social) before they load. You can also reopen the banner at any time using the "Manage Cookie Preferences" link in the footer.

    6.2 Browser Cookie Settings

    Most browsers allow you to block or delete cookies:

    • Google Chrome: Settings > Privacy and Security > Cookies and other site data
    • Safari: Preferences > Privacy > Manage Website Data
    • Firefox: Settings > Privacy & Security > Cookies and Site Data
    • Microsoft Edge: Settings > Privacy, search, and services > Cookies

    Note: Blocking all cookies may affect website functionality.

    6.3 Opt Out of Interest-Based Advertising

    Use these tools to opt out of interest-based advertising:

    6.4 Google Analytics Opt-Out

    Install the Google Analytics Opt-Out Browser Add-On: https://tools.google.com/dlpage/gaoptout

    6.5 Mobile Device Settings

    iOS (iPhone/iPad):

    • Settings > Privacy > Tracking > Toggle off "Allow Apps to Request to Track"
    • Settings > Safari > Privacy & Security > Toggle on "Prevent Cross-Site Tracking"

    Android:

    • Settings > Google > Ads > Opt out of Ads Personalization

    6.6 Browser Privacy Tools

    Use privacy-focused browser extensions:

    For more details, see our Cookie Policy.

    7
    WHAT HAPPENS AFTER YOU OPT OUT

    Once we receive and process your Do Not Sell or Share request (or detect a valid GPC signal), here's what you can expect:

    • We will process and confirm your opt-out within 15 business days of receipt, as required by CPRA.
    • We will not load non-essential marketing or advertising cookies that involve "sale" or "sharing" of personal information as those terms are defined under California law.
    • Your opt-out will remain in effect unless you affirmatively consent to the sale or sharing of your information again.
    • You will still receive the same level of service from Mesa Group Consulting (see Section 9 — Non-Discrimination).
    • We will continue to share information with service providers only as necessary to provide the services you requested (this is not a "sale" or "share" under CCPA/CPRA).

    Browser-level opt-outs (cookie banner choices and GPC signals) are tied to that specific browser/device. If you switch browsers, devices, or clear your cookies, you may need to re-apply your opt-out preferences. Account-level opt-outs (those submitted to compliance@mesagroupconsulting.com) are tied to your account and persist across browsers and devices.

    8
    VERIFICATION PROCESS

    For opt-out requests, we use a simplified verification process. We may match the information you provide against our records, but we will not require extensive documentation for opt-out requests as we would for access or deletion requests.

    Authorized Agents

    You may designate an authorized agent to submit a Do Not Sell or Share request on your behalf.

    To authorize an agent, the agent must provide:

    • Written authorization signed by you (notarized authorization is preferred)
    • A copy of the agent's government-issued identification
    • Sufficient information about you to allow us to verify your identity

    Submission methods:

    • Email: compliance@mesagroupconsulting.com (with required documents attached)
    • Mail: Mesa Group Consulting, Attn: Compliance Department — Authorized Agent Request, 5001 California Ave, Suite 219, Bakersfield, CA 93309

    For full details on the authorized agent process, see our California Privacy Rights page.

    9
    NON-DISCRIMINATION

    You have the right to non-discrimination. You will receive equal service and pricing even if you exercise your CCPA/CPRA rights, including your right to opt out of the sale or sharing of your personal information.

    What Mesa Group Consulting Will NOT Do:

    • Deny you goods or services because you exercised your right to opt out
    • Charge you different prices or rates for goods or services because you exercised your right to opt out
    • Provide you with a different level or quality of goods or services because you exercised your right to opt out
    • Suggest that you will receive a different price, rate, level, or quality of goods or services because you exercised your right to opt out
    • Retaliate against you in any way for submitting a Do Not Sell or Share request

    For full details on each of your CCPA/CPRA rights and how to exercise them, see our California Privacy Rights page.

    10
    CONTACT INFORMATION

    If you have questions about the sale or sharing of personal information or wish to exercise your CCPA/CPRA rights, contact us:

    MESA GROUP CONSULTING

    MESA & CO CONSULTING LLC, doing business as Mesa Group Consulting

    Mailing Address

    5001 California Ave, Suite 219

    Bakersfield, CA 93309

    Privacy / Compliance Email

    compliance@mesagroupconsulting.com

    Compliance Department

    For all Do Not Sell or Share requests, privacy-related questions, or complaints:

    The Compliance Department serves as our point of contact for all California privacy matters.

    Hours of Operation:

    Monday – Friday: 9:30 AM – 6:30 PM Pacific Time

    Saturday: 10:30 AM – 2:30 PM Pacific Time

    Sunday: Closed

    California Resident Notice

    If you are a California resident, you may report complaints to the California Attorney General's Office:

    California Attorney General's Office
    Consumer Law Section
    1300 I Street, Sacramento, CA 95814
    Phone: (916) 445-9555
    Website: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company

    Changes to This Notice

    Mesa Group Consulting reserves the right to update this notice at any time. When we make changes, we will:

    • Update the "Last Updated" date at the top of this page
    • Post the revised notice on our website
    • Notify you via email (if applicable)

    © 2026 Mesa Group Consulting. All Rights Reserved.