Here’s the fine print—but written with you in mind. At Jennifer Taormina & Co., we value your trust and are committed to protecting your privacy. Whether you're browsing our website, downloading a free resource, purchasing a template, booking a branding package, or getting started on a custom website, we want you to feel confident about how your information is collected, used, and protected.
This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have along the way. By using our Website, you agree to the terms outlined below.
1. INTRODUCTION
Jennifer Taormina & Co. (“Company,” “we,” or “us”) respects your privacy and is committed to protecting it through this Privacy Policy. This policy outlines the types of information we may collect from you or that you may provide when you visit www.jennifertaormina.com (the “Website”), including, but not limited to, when you:
a. Access any content, services, features, functionality, mobile applications, downloadable materials, or courses offered through the Website;
b. Interact with our advertising or applications on third-party websites or services that include a link to this Privacy Policy (collectively, the “Services”).
This Privacy Policy does not apply to information collected by:
c. Any third party, including through applications or content (including advertising) that may be linked to or accessible from the Website;
d. Any other means outside of your direct interaction with our Website and Services.
If you do not agree with our policies and practices, your choice is to not use our Website. By accessing or using the Website, you accept and agree to be bound by this Privacy Policy and our Terms of Use. This policy may be updated from time to time, and your continued use of the Website after any such changes constitutes your acceptance of those changes.
2. CHILDREN UNDER THE AGE OF 13
a. Our Website and Services are not intended for children under 13 years of age. All users must be at least 13 years old to access or use this Website.
b. We do not knowingly collect personal data from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verified parental consent, we will take reasonable steps to delete such information from our records.
c. If you have reason to believe that a child under the age of 13 has provided personal data to us through the Website or Services, please contact us immediately at admin@jennifertaorminaco.com, and we will make reasonable efforts to remove the information from our database.
d. Residents of certain U.S. states—including but not limited to California—who are under the age of 13, 16, or 18 may have additional rights regarding the collection and sale of their personal information under applicable state laws.
3. WHEN WE COLLECT INFORMATION FROM YOU
We collect and process personal and non-personal information when you access or interact with our Website and Services. This includes, but is not limited to, the following scenarios:
a. When you browse or navigate the Website;
b. When you submit information via a form, such as a contact form, inquiry, application, or other request;
c. When you make a purchase, sign up for a newsletter, register for a service, or download a resource;
d. When you respond to surveys, participate in promotions, or engage with us via email, chat, or social media platforms;
e. When you interact with embedded or third-party content, such as videos, social media feeds, or integrations;
f. When you access the Website using a mobile device or web browser that utilizes cookies, pixels, tags, or similar tracking technologies.
In addition, we may collect information indirectly through third-party service providers that we use to operate our business and deliver our Services. These include:
g. Stripe for secure payment processing;
h. HoneyBook for client relationship management, scheduling, and project workflows;
i. Flodesk for email marketing and automation;
j. Calendly for appointment scheduling.
These third-party platforms may collect and share data such as your name, email address, payment information, IP address, browser and device details, time zone, and behavioral or interaction data relevant to your engagement with our Website or communications.
k. We also use analytics tools such as Google Analytics and Meta Pixel to collect behavioral insights, understand visitor behavior, improve user experience, and deliver personalized or relevant advertising content. If you arrive at our Website via an affiliate referral link, we may track that referral for attribution purposes.
By using our Website, you consent to the collection and processing of information as described in this section.
4. WHAT TYPES OF INFORMATION WE COLLECT FROM YOU
A. Voluntary Information
1. Voluntarily Provided Information
When you visit our Website or use our Services, we may collect certain types of personal information that you voluntarily provide. This may include your name, email address, mailing address, phone number, payment details (including credit card or billing information), age, gender, marital status, and demographic or professional details such as your business name, industry, job title, or website URL. We may also collect information about your preferences, interests, social media handles, and any additional details you choose to share through forms, questionnaires, or consultation calls.
2. Information Collected Through Your Interactions
We collect information you provide through various channels, including:
a. Forms submitted on our Website (such as newsletter sign-ups, contact forms, client applications, or downloadable opt-ins);
b. Purchases made through our Website (including templates, digital products, or services);
c. Appointment bookings made via Calendly;
d. Onboarding through HoneyBook;
e. Email interactions via Flodesk marketing campaigns.
Payment-related data is securely processed via third-party platforms such as Stripe. We may receive transactional details, including confirmation of payment and purchase history. Additionally, we may retain copies of correspondence you send to us, including emails, support inquiries, and client communication notes.
3. Publicly Shared Information (“User Contributions”)
You may also choose to provide information that is published or posted in public areas of the Website, such as blog comments or testimonials. Please note that any User Contributions are shared at your own risk, and we cannot control how others may access, view, or share that content.
B. Automatic Data Collection
1. Technologies Used and Information Collected
We also collect certain information automatically when you interact with our Website, using technologies such as cookies, pixels, web beacons, tags, scripts, and similar tracking tools. This may include:
• Your internet connection and IP address
• Browser type and device information
• Operating system and time zone
• Location data (based on IP address or device settings)
• Referring and exit pages
• Pages visited and time spent on the Website
• Traffic logs, error reports, and usage patterns
• Interactions with specific content or features
2. Purpose of Collection
This automatically collected information is used to help us:
• Analyze Website traffic and visitor behavior
• Improve Website performance, functionality, and usability
• Deliver personalized or targeted marketing and promotional content
• We use analytics and advertising tools such as Google Analytics, Meta Pixel, and similar technologies to support these efforts.
3. Categories of Data Collected in the Last 12 Months
In the preceding twelve (12) months, we have collected the following categories of consumer data:
a. Identifiers (e.g., name, email address, IP address, device identifiers);
b. Commercial information (e.g., purchase history and transaction details);
c. Internet or other electronic network activity (e.g., browsing or search history, interactions with our Website);
d. Geolocation data (derived from IP address or device);
e. Professional or employment-related information (if submitted, such as business name or job title).
4. Data Retention
We retain both voluntarily provided and automatically collected data for as long as necessary to fulfill the purposes for which it was collected. This includes providing our Services, complying with legal obligations, resolving disputes, enforcing our agreements, and supporting business operations. Retention periods may vary depending on the type of data and applicable regulatory requirements.
The data controller for this Website is Jennifer Taormina & Co., located at 6341 Stewart Rd, Suite 150, Galveston, TX 77551. You may contact us with questions regarding the collection or processing of your personal data at admin@jennifertaorminaco.com.
We collect information through both direct input (e.g., when you complete a form or make a purchase) and automatic technologies. The automatic technologies we use include, but are not limited to, the following:
A. Cookies
Cookies are small data files placed on the hard drive of your device that allow our Website and service providers to recognize your browser and store certain information.
a. Functionality cookies help us remember your preferences, such as your selected language or location.
b. Advertising cookies collect information about your browsing behavior, such as pages visited, links clicked, IP address, and browser/device type. This information may be shared with our advertising partners and used to display personalized ads on other websites based on your activity on our Website.
We use cookies in conjunction with platforms such as Google Analytics, Meta (Facebook/Instagram), Stripe, Calendly, Flodesk, and HoneyBook to enhance your experience and provide tailored services.
B. Web Beacons
Pages on our Website may contain small electronic files known as web beacons (also referred to as clear GIFs, pixel tags, or single-pixel GIFs). These technologies help us gather usage statistics, monitor traffic patterns, and measure the effectiveness of content, features, or marketing campaigns.
C. Meta Pixels
Our Website uses Meta Pixel—an invisible snippet of code provided by Meta (formerly Facebook)—to track user behavior, measure advertising performance, and serve relevant ads on Facebook and Instagram platforms. By using our Website, you consent to our use of Meta Pixel for these purposes.
D. Embedded Tools and Third-Party Cookies
We may use embedded tools or integrations provided by third parties, including:
a. Stripe (secure payment processing)
b. HoneyBook (client relationship and workflow management)
c. Flodesk (email marketing and automation)
d. Calendly (appointment scheduling)
In some cases, affiliate tracking links may place cookies to attribute visits or purchases to a referring partner. This data is used solely for referral tracking and is not sold or shared for unrelated purposes.
These platforms may place cookies or use similar technologies to collect data about your interaction with forms, booking tools, emails, or payment pages.
E. Flash Cookies and Other Local Storage Technologies
We may also use Flash cookies and similar technologies to store information about your preferences, navigation behavior, and interaction with specific content on our Website.
F. Managing Cookies
You can choose to disable or refuse browser cookies through your device settings. However, doing so may limit your access to certain features or functionality of the Website.
In addition to the above, you may provide information that is publicly displayed on the Website—such as comments, testimonials, or other submissions (“User Content”). Please be aware that any User Content you share is posted at your own risk. We cannot guarantee how others may use, view, or distribute such content.
We process your personal information based on legitimate business interests, contractual obligations, legal requirements, and, where applicable, your consent. Such processing does not infringe upon your fundamental rights and freedoms.
Legitimate interests may include, but are not limited to:
a. Direct marketing and promotional communications
b. Processing client data for branding, website, and digital product services
c. Ensuring the security and functionality of our systems and Website
d. Fraud prevention and unauthorized activity detection
We use the information we collect to:
e. Understand visitor preferences and improve Website performance and user experience
f. Compile aggregate data about Website traffic, usage trends, and engagement metrics
g. Provide you with information, products, and services that you request or that we believe may be of interest to you
h. Manage billing, transactions, and payment processing
i. Send account-related notices, confirmations, and administrative messages
j. Provide customer support and respond to inquiries
k. Send promotional communications, newsletters, and marketing materials (where permitted by law)
l. Fulfill any other purpose disclosed when you provide the information
We do not sell personal information or consumer data for monetary gain or valuable consideration.
We also do not use automated decision-making processes in a way that produces legal effects or similarly significant outcomes. If any automated decision-making is used (e.g., for internal segmentation or analytics), you have the right to request a manual review of the process if you disagree with the outcome.
If you have questions about how your data is used or would like further clarification, please contact us at admin@jennifertaorminaco.com.
a. Some content or applications on the Website, including advertisements and embedded features, may be served or provided by third parties. These third parties may use cookies, web beacons, or other tracking technologies to collect information about your interaction with our Website and other websites.
b. We do not control the data collection technologies or privacy practices of these third parties. You are encouraged to review the privacy policies of any such third-party providers for information about how they collect, use, and disclose your data.
c. Our Website may also contain links to external websites that are not operated or controlled by Jennifer Taormina & Co. This Privacy Policy applies only to our Website. If you click on a link to another website, you should review that site’s privacy policy before providing any personal information.
a. We may disclose aggregated, anonymized information about our users and information that does not identify any individual without restriction.
b. We do not sell or disclose your personal information to third parties for their own direct marketing purposes. We also do not transfer your personal data to international third-party processors. If this ever changes, we will update this Privacy Policy accordingly and notify you where required by law.
c. We may disclose personal information that we collect or that you provide as described in this Privacy Policy to trusted third-party service providers and contractors that help us operate our business and provide our Services. These may include:
• Stripe (payment processing)
• HoneyBook (client management and invoicing)
• Flodesk (email marketing)
• Calendly (scheduling services)
• Google Analytics and Meta (analytics and advertising)
These third parties are bound by contractual obligations to keep your personal data confidential and use it only for the purposes for which we disclose it.
d. We may disclose your personal information to comply with applicable laws, court orders, legal processes, or governmental regulations; to enforce our policies or terms of service; or to protect our rights, property, or the safety of our users or others.
e. In order to prevent fraud, we may also share limited personal data with credit reference agencies or fraud prevention services as part of our payment verification process.
f. We may share limited data with affiliate partners in connection with referral programs, collaborations, or joint promotions. This data is typically limited to name, email address, and information related to your referral source or transaction. Affiliate partners are required to protect your personal data and may only use it to fulfill the purpose of the partnership.
Do Not Track (DNT) Policy
We honor “Do Not Track” signals sent by your browser. When DNT is enabled, we do not track your activity across other websites or engage in cross-site behavioral advertising.
International Transfers
We do not currently transfer personal data collected from you to third-party processors located outside the United States. If we ever need to transfer your data internationally, we will ensure that appropriate safeguards are in place in accordance with applicable data protection laws, and your personal data will continue to be governed by this Privacy Policy.
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. These security measures include, but are not limited to:
a. All payment information is encrypted using secure socket layer (SSL) technology.
b. All information you provide is stored on secure servers protected by firewalls.
c. We conduct regular malware scanning and monitoring for potential vulnerabilities.
Please note that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You should exercise caution when transmitting personal information via email or through public networks.
We retain your data for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data and the context in which it was collected. Specifically:
For clients who engage our services (such as branding, website development, or other contracted projects), we retain records, contracts, project files, and related data for seven (7) years.
For marketing communications and email subscriptions (such as those managed through Flodesk), we retain your information until you unsubscribe or delete your account.
Once the applicable retention period has expired, we will securely delete or anonymize your personal data.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. To learn more, you may visit the official California Attorney General’s privacy site at https://oag.ca.gov/privacy/ccpa.
Subject to certain limitations and exceptions, California residents have the right to:
a. Know what categories and specific pieces of personal information we collect, use, disclose, and retain;
b. Request deletion of your personal information;
c. Correct inaccurate personal information we maintain about you;
d. Opt out of the sale or sharing of your personal information;
e. Limit the use of your sensitive personal information, if applicable;
f. Not be discriminated against for exercising your privacy rights.
We do not sell your personal information and have not sold any personal information in the past twelve (12) months. Our policy is that we do not and will not sell your personal information unless you give us express consent to do so.
To exercise any of your CCPA/CPRA rights, or to submit an opt-out request, you may contact us by:
• Email: admin@jennifertaorminaco.com
• Phone: (415) 699-1979
We may need to verify your identity before fulfilling certain requests to protect your personal information.
Although we do not currently display a cookie banner, California residents may still exercise their right to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. If you wish to submit such a request, please contact us directly via email or phone as listed above. We will honor your request in accordance with applicable California law.
Several U.S. state consumer privacy laws provide residents with additional rights regarding the use of their personal information. States currently providing such rights include: California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia.
Depending on your state of residence, you may have the right to:
a. Confirm whether we process your personal information;
b. Access and delete certain personal information;
c. Correct inaccuracies in your personal information;
d. Request a copy of your personal data in a portable format (data portability);
e. Opt out of the processing of personal data for targeted advertising or profiling, or limit/restrict the use of sensitive personal information.
The scope and availability of these rights vary by state. To exercise any of these rights, please contact us at:
• Email: admin@jennifertaorminaco.com
• Phone: (415) 699-1979
If you have agreed to receive marketing communications from Jennifer Taormina & Co., you may opt out at any time. This includes withdrawing consent for us to share your personal information with third parties for marketing purposes.
If you no longer wish to be contacted for marketing purposes, you may opt out by:
• Clicking the unsubscribe link provided in our emails, or
• Contacting us directly at admin@jennifertaorminaco.com
Depending on your location and applicable data protection laws (including the GDPR and similar U.S. state laws), you may have the following rights with respect to your personal data:
a. Right to Be Informed
You have the right to know what data is being collected, why it’s being collected, and who it may be shared with.
b. Right to Access
You have the right to request a copy of the personal data we hold about you.
c. Right to Rectification
You have the right to request that we correct or complete inaccurate or incomplete information.
d. Right to Erasure (“Right to Be Forgotten”)
You have the right to request the deletion of your personal data when it is no longer needed for the original purpose, or if you withdraw consent or object to processing.
e. Right to Restrict Processing
You may request a temporary halt to processing—for example, while data is being verified or during a legal dispute.
f. Right to Data Portability
You may request that your personal data be provided to you (or another organization) in a structured, machine-readable format. We may charge a reasonable fee for fulfilling such requests where applicable.
g. Right to Object
You may object to the processing of your personal data if it conflicts with the purpose for which it was originally collected, including profiling and direct marketing.
h. Rights Related to Automated Decision-Making and Profiling
You have the right not to be subject to decisions made solely through automated processing, including profiling, that may significantly affect you.
i. Right Not to Be Discriminated Against
We will not deny you services, charge you different prices, or provide a different level of service based on your exercise of any data protection rights.
To exercise any of these rights, please contact us at:
• Email: admin@jennifertaorminaco.com
• Phone: (415) 699-1979
The effective date and last revision date of this Privacy Policy are listed at the top of this document. We reserve the right to update or revise this Privacy Policy at any time. If we make material changes to how we collect, use, or disclose your personal information, we will notify you by email or by posting a prominent notice on our Website.
You are responsible for periodically reviewing this Privacy Policy to stay informed of any updates. Your continued use of the Website following the posting of changes constitutes your acceptance of those changes.
If you have questions about this Privacy Policy or wish to access, correct, or delete any personal information you have provided to us, you may contact us at:
Jennifer Taormina & Co.
Attn: Jennifer Taormina
6341 Stewart Rd, Box 150
Galveston, TX 77551
Phone: (415) 699-1979
Email: admin@jennifertaorminaco.com
If you are located in the United Kingdom and believe that we have not addressed your concern in a satisfactory manner, you may file a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.
If you are located within the European Union, you may contact your country’s data protection authority or the European Data Protection Board (EDPB) at https://edpb.europa.eu.
If you are located in the United Kingdom, please note that your personal data may be transferred to and processed in countries outside the UK. These transfers are known as “restricted transfers” under the UK General Data Protection Regulation (UK GDPR).
a. Restricted Transfers and Safeguards
We may make a restricted transfer if the recipient is located in a third country or international organization that is covered by UK "adequacy regulations." Where no adequacy regulation applies, we will assess whether the transfer can proceed under appropriate safeguards as outlined in the UK GDPR.
Before relying on any safeguard, we conduct a risk assessment to ensure your data will continue to receive protection essentially equivalent to that under the UK data protection regime. This includes evaluating the legal environment of the destination country and the specific protections offered by the safeguard. If additional protection is needed, we will implement further technical, contractual, or organizational measures.
Acceptable safeguards may include:
A legally binding and enforceable instrument between public authorities or bodies
Binding corporate rules in accordance with Article 47 of the UK GDPR
Standard Contractual Clauses (SCCs) recognized under UK law
An approved code of conduct or certification mechanism
A bespoke contractual arrangement authorized by the Information Commissioner’s Office (ICO)
Administrative arrangements between public authorities that ensure enforceable data subject rights
b. Use of Exceptions
If no adequacy regulation or appropriate safeguard applies, we may proceed with a transfer under one of the exceptions in Article 49 of the UK GDPR. These include situations where the transfer is necessary to perform a contract, is made with your explicit consent, or is required for important reasons of public interest.
c. Children Under the Age of 13 (UK Users)
Our Website and Services are not intended for children under the age of 13 located in the United Kingdom. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete the information promptly.
If you have reason to believe that a child under 13 has submitted personal data, please contact us at admin@jennifertaorminaco.com, and we will take appropriate action. We will not disclose such information to any third party unless legally required or unless we have obtained verifiable parental or guardian consent.
d. Local Representative in the United Kingdom
In accordance with Article 27 of the UK GDPR:
We do not actively offer goods or services to individuals in the United Kingdom, nor do we monitor the behavior of UK-based users in a way that would require the designation of a local representative under the UK GDPR. While individuals in the UK may independently access and purchase from our Website, our business is primarily directed to customers within the United States.
As such, we are not currently required to appoint a local UK representative.
If you are located in a country within the European Union, please be aware that your personal data may be transferred to and processed in countries outside the EU, including the United States, where data protection laws may not offer the same level of protection as EU law.
a. Restricted Transfers and Safeguards
When transferring personal data outside the EU, we rely on one or more of the following legal mechanisms to ensure compliance with the EU General Data Protection Regulation (EU GDPR):
An adequacy decision by the European Commission
Standard Contractual Clauses (SCCs) approved by the European Commission
Binding corporate rules or other safeguards under Article 46 of the GDPR
Your explicit consent, after being informed of the potential risks
We conduct transfer risk assessments and, where necessary, implement supplementary safeguards to ensure the protection of your data consistent with GDPR standards.
b. Use of Exceptions
If no appropriate safeguard is available, we may rely on a permitted derogation under Article 49, such as where the transfer is necessary for the performance of a contract, made with your explicit consent, or required for compelling public interest.
c. Local Representative in the EU
We do not actively target or market our products or services to individuals located in the European Union, nor do we monitor user behavior in the EU in a way that would require the appointment of an EU representative under Article 27 of the GDPR. Therefore, we are not currently required to appoint a local representative in the EU.
19. YOUR RIGHTS UNDER THE GDPR (EU & UK)
If you are located in the United Kingdom or the European Union, you have the following rights under the UK GDPR or EU GDPR, subject to certain conditions and limitations:
a. Right to Access
You have the right to request access to the personal data we hold about you and receive a copy of that data.
b. Right to Rectification
You may request that we correct or update inaccurate or incomplete personal data.
c. Right to Erasure (“Right to Be Forgotten”)
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent.
d. Right to Restrict Processing
You may request that we restrict processing of your data under certain conditions, such as when accuracy is contested or processing is unlawful.
e. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another controller, where feasible.
f. Right to Object
You may object to the processing of your personal data for direct marketing or when processing is based on our legitimate interests.
g. Right to Withdraw Consent
Where we rely on your consent to process your personal data, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
h. Right to Lodge a Complaint
You have the right to file a complaint with the appropriate data protection authority in your country if you believe we have violated your rights under applicable data protection law.
How to Exercise Your Rights
To exercise any of the rights listed above, please contact us at admin@jennifertaorminaco.com. We may need to verify your identity before responding to your request to ensure the security of your personal information. We will respond in accordance with applicable data protection laws and within legally required timeframes.
If you are located in the United Kingdom or the European Union, you have the following rights under the UK GDPR or EU GDPR, subject to certain conditions and limitations:
a. Right to Access
You have the right to request access to the personal data we hold about you and receive a copy of that data.
b. Right to Rectification
You may request that we correct or update inaccurate or incomplete personal data.
c. Right to Erasure (“Right to Be Forgotten”)
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent.
d. Right to Restrict Processing
You may request that we restrict processing of your data under certain conditions, such as when accuracy is contested or processing is unlawful.
e. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another controller, where feasible.
f. Right to Object
You may object to the processing of your personal data for direct marketing or when processing is based on our legitimate interests.
g. Right to Withdraw Consent
Where we rely on your consent to process your personal data, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
h. Right to Lodge a Complaint
You have the right to file a complaint with the appropriate data protection authority in your country if you believe we have violated your rights under applicable data protection law.
How to Exercise Your Rights
To exercise any of the rights listed above, please contact us at admin@jennifertaorminaco.com. We may need to verify your identity before responding to your request to ensure the security of your personal information. We will respond in accordance with applicable data protection laws and within legally required timeframes.
