Effective and last updated: November 5, 2026. This policy covers manihatami.com, the website of Mani Hatami, providing credit and debt education through Zenith Financial Group. Questions and privacy requests: mani@zenithfg.com.
Information we collect and why
- Consultation inquiries: name, email address, optional phone number and the message you choose to provide. We use these to respond, communicate about the assistance you request and maintain inquiry records.
- Technical and security information: hosting and form systems may process IP addresses, browser information, submission time, page or form identifiers and anti-abuse information to operate, deliver and protect the service. We do not use this information here for targeted advertising.
- Privacy requests: the email associated with your inquiry, request type, confirmation and fulfillment records. We use these only to verify, respond to and document the request and meet applicable obligations.
- Privacy preferences: a first-party preference cookie and local browser storage record optional-content permission, opt-out status and the preference timestamp. They do not contain your inquiry or an advertising identifier.
We collect inquiry information directly from you. Technical information is generated when you use the site. Do not submit Social Security numbers, account credentials, full credit reports, account numbers or financial documents through public forms. We do not intentionally request sensitive personal information in these forms or use it to infer personal characteristics. If you send it inadvertently, contact us to discuss correction, restriction or deletion.
Sale, sharing and optional third-party content
We do not sell consultation inquiry information. Google Analytics, Google Ads, Meta Pixel, CRM and email marketing integrations are not currently configured for this website. We do not currently operate advertising tags for cross-context behavioral advertising.
Instagram video embeds are optional and blocked until you permit them and choose to load a video. An enabled embed connects your browser to Meta/Instagram, which receives technical information such as your IP address and browser details and may use information under its own practices, including advertising-related purposes. You can read our guides without loading an embed. Direct links to Instagram, LinkedIn, Facebook, Lulu and other outside sites navigate to independent services governed by their policies.
Use Do Not Sell or Share My Personal Information to apply an opt-out to this browser without an account or identity verification. This disables optional third-party content. For assistance applying a request to information you submitted, contact us at the email above. We do not require a paid service or consultation to exercise privacy choices.
Global Privacy Control and Do Not Track
We honor Global Privacy Control through the browser signal and the Sec-GPC request header. An active signal overrides a saved permission for optional content and applies an opt-out of sale/sharing for this browser. We also treat a recognized Do Not Track signal as a direction to block optional content. An opt-out is not a request to delete inquiry records or prevent essential security and form processing.
You can view the status and controls at Your Privacy Choices. Preferences are browser/device-specific and may need to be reapplied when storage is cleared or you change browser or device. We retain browser preferences for up to 12 months. Declining optional content does not prevent you from reading articles or submitting an inquiry.
Who processes information
WordPress and Jetpack Forms process inquiry submissions on our HostGator-hosted website. Submissions are stored in the website’s restricted administration system and delivered to the contact mailbox. Hosting, security, email delivery and backup providers process information as needed for their services. Authorized personnel handling inquiries can access relevant records. We may disclose information when legally required, to protect rights and security, or to fulfill the assistance you request.
There are no active analytics, advertising, CRM or email marketing account integrations mapped to this website at this update. Any later activation requires a new data-flow review, appropriate contractual controls, updated disclosures and tested privacy-signal handling. Our administrative data inventory records the systems that must be checked for access or deletion requests.
Retention
Our ordinary consultation inquiry retention period is 12 months after the last interaction, unless a documented legal, security or other applicable retention obligation requires longer. New website inquiry records enter an automated retention schedule. Existing imported records require a review of their actual last-interaction dates; mailbox copies are reviewed against the same period. Records subject to a documented hold are reviewed before removal.
Privacy request evidence is maintained separately as needed to demonstrate fulfillment and satisfy applicable recordkeeping requirements, including the applicable California request-recordkeeping period. Provider security logs and backups have separate operational cycles. Data awaiting backup expiration is restricted to recovery purposes; completed deletion instructions must be reapplied if a backup is restored. We do not represent that a WordPress deletion immediately removes independent mailbox, hosting or provider backup copies.
Your privacy requests
You may request access to or a copy of information you submitted, correction of inaccurate information, or deletion, subject to applicable exceptions. California consumers also have applicable rights concerning categories and specific pieces of information, portability, sale/sharing opt-out, sensitive-information use and non-discrimination. We do not use sensitive information for secondary purposes that require a separate limitation control. If that changes, we will provide the applicable notice and control.
Use the Privacy Request form for access/export or deletion, or email mani@zenithfg.com for these requests, corrections, sensitive-information concerns or an authorized-agent request. No website account is required. We first confirm control of the email used for your inquiry. Additional verification proportionate to the information and request may be necessary; do not send identity or financial documents through the public form. Authorized agents may need to show authority and consumers may need to verify directly with us where permitted.
Submitting a request does not automatically delete data. An administrator reviews verification and applicable exceptions, processes the website records, and checks email and other relevant providers before marking the request complete. For requests covered by California law, we acknowledge applicable know/correct/delete requests within 10 business days and respond within 45 calendar days, with a further 45-day extension when allowed and explained. Applicable opt-out requests are handled as required; the browser control takes effect immediately here. We do not discriminate against you for exercising privacy rights.
Children, security and policy changes
This general credit-education website is not directed to children under 13. Contact us if a child has submitted information. No system can guarantee absolute security; avoid sending sensitive documents in public forms. We may update this policy as practices change, and will change the date above and provide additional notice where required.
Official resources: California Privacy Protection Agency and California Attorney General privacy-policy guidance.