Effective date: September 17, 2026
Last updated: September 17, 2026

Duke Strategy Group Incorporated (“Duke Strategy Group,” “we,” “us,” or “our”) explains in this Privacy Policy how we collect, use, disclose, and retain personal information through dukestrategygroup.com and communications associated with this website.

Personal information means information that identifies, relates to, or can reasonably be linked to an individual, as further defined by applicable law.

This policy applies to the website and services that expressly link to it. Other websites or businesses, including affiliated businesses, may have separate privacy policies. This policy does not replace a separate employment, applicant, or service-specific privacy notice.

1. Information we collect

Information you provide

Depending on how you interact with us, we collect:

• Contact information: your name, email address, phone number, mailing address, and business name when you submit them.
• Correspondence: the contents of inquiries, contact forms, service requests, and other communications you send us.
• Transaction information: billing and delivery details, purchases, order history, and information needed to provide requested products or services, where offered.

Marketing preferences: newsletter subscriptions and records of your communication choices.

Please do not send Social Security numbers, payment card details, or other sensitive information through ordinary email or a general contact form.

Information collected automatically

When you visit our website, our hosting systems and website technologies collect technical information such as your IP address, browser type and version, operating system, referring page, requested pages, and access times. Cookies and analytics tools can also collect identifiers and information about how you use the website, as described in Section 4.

Information from service providers

Providers that support the website or transactions may supply information needed to operate those services, such as payment status, delivery status, technical logs, and website usage reports. The information depends on the services you use.

2. How we use information

We use information for the following purposes, as relevant to your interactions:

• Operate, maintain, troubleshoot, and secure the website.
• Respond to inquiries and provide customer support.
• Fulfill orders, provide requested services, process payments, and manage related records.
• Send requested newsletters and other permitted marketing communications, subject to your choices.
• Understand website performance and improve our content and services.
• Detect and address fraud, misuse, and security incidents.
• Maintain business records, comply with legal obligations, resolve disputes, and protect legal rights.

Where law requires consent for a particular activity, we obtain that consent before carrying out the activity. Merely visiting this website does not supply consent for every possible use of your information.

3. How we disclose information

We disclose information as reasonably necessary for the purposes described in this policy to:

• Service providers: companies supporting website hosting, IT services, security, communications, analytics, and customer support.
• Transaction providers: payment processors, banks, shipping providers, and fulfillment partners where needed for products or services you request.
• Professional advisers: accountants, attorneys, insurers, and other advisers assisting with legitimate business needs.
• Legal and safety recipients: courts, regulators, law enforcement, or other parties where disclosure is required by law or appropriate to protect rights, investigate fraud, or address security and safety, subject to applicable law.
• Business transaction participants: prospective or actual buyers and their advisers in connection with a merger, acquisition, financing, or transfer of business assets, subject to applicable confidentiality and legal protections.
• Recipients you authorize: parties to whom you direct us to disclose information or for whom you provide legally required consent.

Sale, sharing, and targeted advertising: Duke Strategy Group Incorporated does not sell or share any information provided. If selected, you may opt-in or out of targeted advertising. 

4. Cookies, analytics, and tracking choices

Cookies are small files stored by your browser. We use cookies and similar technologies to support website functions and, where enabled, understand website usage. Some cookies expire when you close your browser; others remain until they expire or are deleted.

Analytics: [Identify the current analytics service. If Matomo is used, specify the information collected, who hosts or receives it, whether IP masking is enabled, and the actual retention period or criteria. Insert a working analytics opt-out or privacy-settings link and explain its scope.]

Tracking by other parties: [State whether third parties collect personal information about visitors' activities over time and across different websites through this website. Identify relevant categories of providers and the purposes, if applicable.]

You can manage cookies in your browser settings. Blocking or deleting cookies may affect website features. Browser settings do not necessarily prevent all tracking technologies or replace legally required opt-out mechanisms. If a preference is stored in a cookie, deleting cookies or changing browsers or devices may require you to set that preference again.

Do Not Track: [State the website's actual response to browser Do Not Track signals.]

Global Privacy Control and other recognized opt-out signals: Where applicable law requires us to honor a recognized opt-out preference signal, we treat it as a request to opt out of the covered processing. [Describe the implemented mechanism, whether it applies to the browser/device or a known account, and provide the relevant privacy-choice link. Implement and test this before publication.]

5. Email communications

You can unsubscribe from marketing emails by using the unsubscribe option in the message or contacting us at info@dukestrategygroup.com. We honor marketing email opt-out requests within 10 business days and do not charge a fee to unsubscribe.

Unsubscribing from marketing does not prevent us from sending necessary nonmarketing communications, such as order confirmations or responses to your inquiries. We may retain limited information on a suppression list to honor your opt-out preference.

6. Retention and security

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including meeting legal, accounting, and recordkeeping requirements, resolving disputes, and honoring privacy preferences. Retention depends on the type of information, the nature of our relationship, applicable requirements, and legitimate operational needs.

When information is no longer needed, we delete it or de-identify it, subject to applicable law. Information in backups may remain until those backups are overwritten under our retention procedures and remains subject to appropriate restrictions.

We use reasonable administrative, technical, and physical safeguards appropriate to the information we handle. No website, transmission method, or storage system can be guaranteed completely secure. Encryption reduces certain risks but does not eliminate all risk of unauthorized access.

7. Privacy requests and state-specific rights

You may contact us to ask about your information or request a correction or deletion. Legal rights depend on your state of residence, the information involved, and whether the relevant law applies to our business.

Where applicable, these rights may include access to information, correction, deletion, a portable copy, opt-outs from sale or targeted advertising and certain profiling, and controls over sensitive information. Some states also provide a right to appeal a denied request. We will not unlawfully discriminate against you for exercising an applicable privacy right.

Submit a request to [privacy email] or through [additional request channel, if required]. Tell us the request you wish to make and enough information to locate the relevant records. Do not include sensitive identity documents in an initial email.

For requests requiring identity verification, we may ask for information reasonably needed to verify you and protect your records. Authorized agents may submit requests where permitted by law, subject to applicable proof-of-authority requirements. We do not require identity verification for opt-out requests where prohibited by law.

We respond within the time required by applicable law. If an exception prevents us from fulfilling a request, we explain our decision as required. Where an appeal right applies, send your appeal to [privacy email] with the subject “Privacy Appeal.” We will review the appeal and provide the outcome and any required information about contacting your state regulator.

You may also contact your state attorney general or other appropriate regulator about privacy concerns.

8. Children's privacy

Our website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us at [privacy email] so we can investigate and take appropriate action, including deletion where required.

9. Third-party websites

Our website may link to websites or services operated by others. Their privacy practices are governed by their own notices. Review those notices before providing information. Information collected by embedded technologies on our website is addressed in Section 4.

10. Changes to this policy

We may update this policy as our practices or legal obligations change. We will post the revised policy on this page and update the “Last updated” date. For material changes, we will provide additional notice through a prominent website notice or direct communication, as appropriate and required by law. We will obtain consent where legally required before applying a change to previously collected information.

11. Contact us

Duke Strategy Group Incorporated
Attention: Privacy Requests
Website: https://dukestrategygroup.com
Email: info@dukestrategygroup.com
Mailing address: 650 Ponce de Leon Ave, Ste 300 #1438, Atlanta, GA 30308

Contact us if you need this policy in an alternative accessible format.

Legal reference notes — not part of the website policy

The following official sources informed this draft; they do not establish which laws apply to this business:

• FTC privacy and security guidance: privacy representations must be truthful and supported by actual practices.
• FTC CAN-SPAM compliance guide: commercial email requires accurate sender information and subject lines, required advertising identification, a valid postal address, and an effective unsubscribe method. Honor opt-outs within 10 business days; keep the mechanism available for at least 30 days after sending. These are operational requirements beyond publishing a policy.
• California Business and Professions Code § 22575: covered commercial websites must disclose collection and recipient categories, applicable review/change procedures, material-change notices, an effective date, and specified tracking practices. CalOPPA is distinct from CCPA and does not depend on the CCPA revenue threshold.
• California Attorney General's CCPA guidance: covered businesses have notice and consumer-rights obligations, including sale/sharing opt-outs and recognition of Global Privacy Control. Applicability and complete California disclosures require a separate factual assessment.
• Colorado Attorney General's privacy guidance: covered entities must provide meaningful privacy notices and implement applicable consumer rights and recognized universal opt-out mechanisms. State requirements vary.
• FTC children's privacy guidance: COPPA can apply to child-directed services and services with actual knowledge that they collect personal information from children under 13. A statement that children should not use a website does not resolve those obligations by itself.
• FTC guidance on protecting personal information: limit collection and retention and use safeguards suited to the information handled.