Privacy Policy

What this document is

This Privacy Policy describes how IAMJAMESNOLAN LLC, doing business as J.K. Nolan ("we," "us," or "our"), collects, uses, and protects information when you visit jknolan.com (the "Site") or engage with our services. It governs every point of contact we have with you—from a first visit to this page through the full arc of a client engagement.

If anything here is unclear, or if you want to know exactly what we hold about you, write to the address at the bottom of the page and we will answer directly.

What we collect

We collect only what we need to run the practice and serve the people who engage us. There are three categories.

Information you give us. Your name, email address, phone number, company, role, and anything else you share through a contact form, discovery call, or direct correspondence. If you become a client, this expands to include commercial, strategic, and operational information you choose to share with us during the engagement.

Information collected automatically. When you visit the Site, standard web infrastructure records your IP address, browser type, device type, referring page, pages visited, and time of visit. This is handled by our hosting and content delivery provider (Cloudflare) and is used for security, performance, and basic analytics.

Information from cookies and similar technologies. See Section 04.

How we use it

We use the information above to:

• respond to inquiries and schedule conversations;
• deliver the services you engage us to deliver;
• send occasional correspondence relevant to a current or prospective engagement;
• operate, secure, and improve the Site;
• comply with legal and tax obligations.

We do not sell personal information. We do not rent it, trade it, or make it available to data brokers. We do not use it to train advertising profiles, and we do not share it with third parties for their own marketing purposes.

Cookies and analytics

The Site uses cookies and similar technologies, limited to what is necessary for the Site to function, to understand aggregate usage, and to measure the effectiveness of advertising. These include essential cookies set by our hosting provider for security and session continuity; basic analytics cookies that help us see which pages are read and how visitors arrive; and the Meta Pixel, which Meta sets to measure advertising performance. We also use Meta's Conversions API (CAPI) in combination with custom server-side tracking middleware to send conversion events to Meta server-to-server, which complements the Pixel's client-side tracking. Where our forms are hosted by a third-party provider (such as GoHighLevel), that provider may set its own cookies to make the form work.

Most browsers let you block or delete cookies in their settings. Blocking essential cookies may cause parts of the Site to stop working.

Service providers

We rely on a small, deliberate stack of third-party providers to run the practice. Each of them processes limited information on our behalf and is bound by its own privacy terms. The principal providers are:

• Cloudflare — DNS, content delivery, and basic analytics;
• GoHighLevel — site hosting, CRM, forms, calendar, SMS, and email;
• Google Workspace — email and productivity;
• Calendly — booking and calendaring (where GoHighLevel is not used);
• Typeform — forms and data collection (where GoHighLevel is not used);
• DocuSign — electronic signature of Services Agreements and related documents;
• Wave Payments — credit card processing (where card payment is used; most engagements settle by wire transfer);
• Meta Platforms, Inc. — advertising measurement via the Meta Pixel and Meta's Conversions API.

We review the stack periodically and remove providers that no longer meet our standard.

Use of AI tools

In the course of research, synthesis, and preparation of client deliverables, we may use artificial-intelligence tools — large language models and similar systems — as instruments of professional work. We select tools with appropriate data-handling practices, favoring enterprise configurations that do not train on inputs, and we avoid submitting client-identifying personal information to tools that do not offer such protections. The confidentiality obligations we owe our clients extend to any such use.

We do not and will not fabricate client testimonials, outcomes, or voices using AI. Where AI assists in our work, the output carries the fingerprint of a specific human mind — ours.

How long we keep it

We keep information for as long as it serves the purpose it was collected for, or for as long as the law requires us to. Inquiry correspondence is typically retained for twenty-four months. Client engagement records are retained for seven years following the close of the engagement, which is the window generally required for tax and professional purposes. You may request deletion at any time, subject to those legal obligations.

Your rights

Depending on where you live, you have some or all of the following rights with respect to the information we hold about you: the right to know what we hold, the right to correct it if it is wrong, the right to delete it, the right to restrict how we use it, the right to receive a copy, and the right to object to certain uses. These rights are provided under laws including the California Consumer Privacy Act (CCPA) and, where applicable, the European General Data Protection Regulation (GDPR).

To exercise any of these, write to the address at the bottom of this page. We will respond within thirty days.

Security

We use industry-standard administrative and technical measures to protect information, including encryption in transit, access controls, and vendor review. No system is perfectly secure, and we do not promise that it is. We promise to take the protection of your information seriously and to notify you promptly if we ever learn of a breach that affects you.

Children

The Site is not directed to children under the age of thirteen, and we do not knowingly collect information from them. If you believe a child has provided us with information, write to us and we will delete it.

Changes

We will update this Policy when the practice or the law requires it. The effective date on the masthead always reflects the current version. Material changes will be announced on the Site before they take effect.

How to reach us

Questions, corrections, or requests under one of the rights above—write to us at the address in the closing block below.