Who is responsible for the information
GFM Acquisitions LLC, based in Tazewell, Tennessee, decides how information submitted through this website is used. Kevin Bonilla handles website inquiries. Privacy questions and requests can be sent to kevin@gfmacquisitions.com.
Information involved
An inquiry may contain your name, email address, phone number, business name, town or business location, the topic you select, and anything you write in the message. When you submit the form, the system also records the current Terms and Privacy versions, the time you accepted them, the inquiry status, and a keyed hash derived from the request IP address for abuse prevention.
Vercel, our website host, processes ordinary technical request information such as IP address, approximate IP-derived location, browser or device details, request time, and diagnostic information. GFM does not add advertising pixels or behavioral analytics to this site.
The public About page includes Kevin Bonilla’s name, general location, work history, LinkedIn link, and a portrait derived from a photograph he supplied. The site does not use facial recognition or create a biometric template.
How we collect and use it
- To read and respond to an inquiry you choose to send.
- To evaluate a possible business conversation or opportunity.
- To protect the form and owner login from abuse.
- To operate, secure, diagnose, and maintain the website.
- To keep records required for an active matter or by law.
We do not sell personal information. We do not share it for cross-context behavioral advertising, build advertising profiles, or add it to a marketing list without separate permission.
Online submissions and email drafts
The contact form stores your inquiry in GFM’s private inquiry database and sends Kevin an email notification with its contents.
If online submission is ever unavailable, the form says so and instead prepares a message in your email application. You review and send it yourself, and GFM does not receive it until your email provider sends it.
Service providers and processing locations
Vercel hosts and protects the website. Purelymail hosts GFM’s email. Neon hosts the inquiry database. GitHub stores nightly backups of that database in a private repository, and GitHub Actions runs the backup job. Those providers may process information in the United States and other locations permitted by their contracts and privacy terms. Your own email provider also processes any message you send.
Links to LinkedIn and venture websites take you to services governed by their own privacy notices. GFM does not control information those services collect after you leave this site.
How long we propose to keep it
- General inquiries: deleted automatically 24 months after the last meaningful contact. Kevin can also delete an inquiry sooner.
- Active transactions or disputes: for as long as reasonably needed for the matter and applicable recordkeeping duties.
- Form-abuse identifiers: ordinarily no more than 30 days.
- Login codes expire after ten minutes. A count of login attempts for the owner account is kept for up to 24 hours to block guessing. Owner sessions expire after seven days unless revoked sooner.
- Database backups: copies rotate out on a fixed schedule (seven nightly, four weekly, and twelve monthly copies), so a deleted inquiry can remain in a backup for up to about 12 months.
- Email and provider backups: according to mailbox settings, operational needs, and the provider’s backup schedule.
These proposed periods need attorney review. Legal holds, tax rules, executed transactions, or a dispute may require a longer period.
Your choices and requests
You may ask whether GFM has information about you and request access, correction, or deletion by emailing the address above. Include enough information for us to locate the inquiry. We may ask for reasonable verification before disclosing or deleting information. A deleted inquiry leaves the database right away and rolls out of backups as they rotate. Some information may be retained when required by law or needed to protect legal rights.
If a privacy law gives you additional rights—such as restriction, objection, portability, appeal, or freedom from discrimination—GFM will evaluate the request under the law that applies. An attorney must determine which state or international laws apply to a particular request.
Children
This website is intended for adults discussing businesses, properties, and professional opportunities. It is not directed to children under 13, and GFM does not knowingly request their personal information. A parent or guardian who believes a child submitted information should contact Kevin so it can be reviewed and removed.
Security
The site uses HTTPS, restricted server-side credentials, input validation, rate limits, hashed login codes and sessions, and a private owner dashboard. No internet service can promise absolute security. Please do not send Social Security numbers, bank credentials, medical records, payment-card details, trade secrets, or other sensitive records through the first-contact form.
Document changes
Material changes receive a new version. The inquiry form records or includes the version presented when you submit it. The current Terms version is 2026-09-11. See the draft Terms of Use and draft Website Disclosures.