This Privacy Policy describes how Dr. Nolyn Johnson LLC ("Company," "we," "us," or "our") collects, uses, and protects information when you visit our website or engage our services. We are committed to protecting your privacy and handling your data with transparency and care.

1. Information We Collect

Information You Provide Directly

• Contact and inquiry form submissions (name, email, phone, organization, message)
• Newsletter and email communication subscriptions
• Discovery call and service proposal requests
• Book purchases and digital product orders
• Training program, webinar, or event registrations

Information Collected Automatically

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 5)

2. How We Use Your Information

• Respond to inquiries and provide requested services
• Send newsletters, threat briefings, and educational content (with your consent)
• Process book orders and deliver digital products
• Schedule and manage discovery calls and consultations
• Improve our website, services, and user experience
• Comply with legal obligations
• Send service-related communications (invoices, contracts, updates)

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area, we process data on the following bases:

• Consent: Newsletter subscriptions and marketing communications
• Contract: To fulfill service agreements and book purchases
• Legitimate Interests: Site analytics, fraud prevention, improving services
• Legal Obligation: Compliance with applicable laws and regulations

4. Sharing Your Information

Service Providers

Trusted third-party vendors who assist in operating our business, including email platforms (Mailchimp), scheduling tools (Calendly), payment processors (Stripe, PayPal), website hosting (Webflow), and website analytics (Google Analytics). These providers are contractually obligated to protect your data.

Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect our rights, your safety, or the safety of others.

5. Cookies & Tracking

We use the following types of cookies:

• Essential: Required for Site functionality
• Analytics: Help us understand visitor behavior (Google Analytics)
• Marketing: Deliver relevant content and measure campaign effectiveness

You can control cookies through your browser settings. Our cookie consent banner allows you to manage preferences on your first visit.

6. Data Retention

• Contact form submissions: 3 years
• Client engagement records: 7 years (legal and accounting purposes)
• Newsletter subscriber data: Until you unsubscribe
• Book purchase records: 7 years

7. Your Rights

Depending on your location, you may have rights to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion ("right to be forgotten")
• Restriction: Request limits on how we use your data
• Portability: Receive your data in a machine-readable format
• Withdraw Consent: Opt out of marketing at any time

To exercise these rights, contact us at njohnson@drnolyn.com. We will respond within 30 days.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Delete personal information we hold about you
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Non-discrimination for exercising any of these rights

We do not sell or share personal information as those terms are defined under the CCPA/CPRA. To submit a request, contact njohnson@drnolyn.com. We will verify your identity before fulfilling access or deletion requests.

9. Children's Privacy

Our Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. DNJ Cyber Academy programs for youth require parental or guardian consent for participants under 18.

10. Security & Breach Notification

We implement appropriate technical and organizational security measures to protect your personal information. Please see our Data Security Policy for full details. No method of transmission over the Internet is 100% secure. In the event of a security incident that compromises your personal information, we will notify affected individuals without undue delay and in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated Policy with a new effective date. For material changes, we will also notify via email where we have your contact information.

12. Contact Us