Privacy Policy

Effective Date: May 16, 2026 Last Updated: May 16, 2026

Before You Read This: A Note from Jenn

Most privacy policies are written by lawyers, for lawyers. This one is written to actually be read. The short version sits at the top in plain English. The full legal detail sits underneath. If anything on this page is unclear, the contact information at the bottom is real, and so is the person at the other end of it.

The Short Version

  • Who runs this site: Jenn McGeehan LLC, a U.S.-based business operated by Jenn McGeehan.

  • What we collect: Information you give us when you book a call, opt into emails, or buy something. Some technical info collected automatically (cookies, analytics, ad pixels).

  • Why we collect it: To deliver the services you ask for, send you marketing you've opted into, and improve how this site works.

  • Who we share it with: A short list of trusted tools that help us run the business (Moxie, Flodesk, Stripe, Meta, Google). We don't sell your data.

  • Your rights: You can ask to see what we have on you, correct it, delete it, or stop us from using it. Depending on where you live, you may have additional legal rights, all listed below.

  • How to reach us: jenn@jennmcgeehan.com.

1. Who We Are

Jenn McGeehan LLC ("we," "our," "us") operates the website jennmcgeehan.com and provides Fractional COO and operational consulting services to coaches, course creators, and online business owners.

For purposes of EU and UK data protection law, Jenn McGeehan LLC is the data controller for personal information processed through this website and our client engagements.

Business address: PO Box 16 Zeeland, MI 49464 Contact email: jenn@jennmcgeehan.com Business jurisdiction:Michigan, United States

2. What Information We Collect

2.1 Information You Give Us Directly

  • Booking and inquiry data: Name, email address, business name or website, business stage details, and any free-text answers you provide when booking a clarity call or submitting a contact form. Collected through our Moxie CRM and booking platform.

  • Email subscription data: Email address, first name (optional), the form or lead magnet you subscribed through, and your consent timestamp. Collected through Flodesk.

  • Client engagement data: When you become a paying client, we collect additional information needed to deliver services, including business operational details, access credentials you choose to share, project files, and communication records.

  • Payment data (planned): When digital products, courses, or intensives launch on this site, payment information will be collected and processed by Stripe (via our Moxie billing integration). We do not store full payment card numbers on our systems.

  • Communication data: Emails, DMs, and messages you send us. We retain these for client service and recordkeeping.

2.2 Information Collected Automatically

When you visit jennmcgeehan.com, we automatically collect:

  • Device and browser data: IP address, browser type and version, operating system, device type, screen size.

  • Usage data: Pages visited, time on page, scroll depth, referring URL, exit pages, click activity.

  • Cookies and similar technologies: See Section 6 for the full breakdown.

2.3 Information from Third Parties

We may receive information about you from:

  • Social media platforms when you interact with our content (likes, comments, DMs, ad clicks) on Instagram, LinkedIn, Threads, or Facebook.

  • Referrals when an existing client or contact refers you to us by name.

  • Advertising platforms like Meta and Google, which may share aggregated reporting about ad performance and audience characteristics.

3. How We Use Your Information

We use the information described above to:

  1. Deliver services you have requested (a clarity call, a service engagement, a digital product).

  2. Communicate with you about your inquiry, booking, or active engagement.

  3. Send marketing emails you have opted into, including our newsletter, launch announcements, and updates about offers.

  4. Process payments and maintain billing records (planned, with Stripe).

  5. Improve our website, content, and offers based on aggregated usage patterns.

  6. Run advertising campaigns on Meta and Google, including retargeting visitors who have interacted with our site or ads.

  7. Comply with legal obligations, including tax and accounting recordkeeping.

  8. Protect our business and respond to security incidents or legal claims.

4. Legal Basis for Processing (EU and UK Visitors)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the following lawful bases under the GDPR and UK GDPR:

Purpose/Legal Basis: Responding to your inquiry, delivering a clarity call, performing client services

  • Contract (Article 6(1)(b))Sending marketing emails

  • Consent (Article 6(1)(a)), revocable at any time via the unsubscribe link. Website analytics, ad targeting, and improving our services

  • Legitimate interests (Article 6(1)(f)), balanced against your rightsMeeting tax, accounting, and legal recordkeeping obligations

  • Legal obligation (Article 6(1)(c))Defending or pursuing legal claims

You can object to processing based on legitimate interests at any time by contacting us at jenn@jennmcgeehan.com.

5. Who We Share Your Information With

We do not sell your personal information. We share it only with the service providers ("sub-processors") that help us run this business. Each is bound by their own privacy and security commitments.

ToolPurposeData SharedWhere They Process

Moxie: CRM, booking, contracts, invoicing. Name, email, business details, free-text inquiry answers, billing records. United States

Flodesk: Email marketing and subscriber management. Email address, name, opt-in source, engagement data. United States

Stripe (planned): Payment processing. Name, email, billing address, payment method details. United States

Meta (Facebook/Instagram): Advertising, retargeting, conversion measurement via Meta Pixel and Conversions API. Hashed email, IP address, browser data, on-site behavior, conversion events. United States and global

Google (Analytics, Tag Manager)Website analytics and tag management. IP address (truncated where supported), device data, usage data. United States

Email and cloud productivity toolsDay-to-day operations, file storage, communications. Whatever you send us by email or share through collaborative tools. United States

We may also disclose your information when required by law, in response to a valid legal request, to protect our rights or the rights of others, or in connection with a business transition (e.g., a merger, acquisition, or sale of assets), with prior notice to you where feasible.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our site, remember your preferences, analyze traffic, and run advertising. The cookies fall into four categories:

  • Strictly necessary cookies: Required for the site to function (e.g., form submissions, booking flow). These cannot be disabled.

  • Performance and analytics cookies: Help us understand how visitors use the site. Google Analytics is the primary tool here.

  • Functional cookies: Remember preferences and improve the user experience.

  • Marketing and advertising cookies: Track visitors across sites to enable retargeting and conversion measurement. Meta Pixel is the primary tool here.

For EU, UK, and Swiss visitors: A cookie consent banner appears on your first visit. Non-essential cookies (analytics, marketing) do not load until you grant consent. You can change your preferences at any time through the cookie settings link in the site footer.

For visitors in other regions: A cookie notice appears with information about how to opt out. You can also control cookies through your browser settings, though some site functionality may not work properly if you block all cookies.

7. Advertising and Analytics

Meta Pixel and Conversions API

We use the Meta Pixel and Conversions API to measure ad performance and show ads to people who have shown interest in our work. This includes hashing your email address (where you have provided one) and sending it to Meta for matching against their user base.

You can opt out of Meta's interest-based advertising through your Facebook ad preferences or via the Digital Advertising Alliance opt-out tool at optout.aboutads.info.

Google Analytics

We use Google Analytics 4 to understand how visitors find and use our site. Google Analytics collects information through cookies and similar technologies. You can opt out by installing the Google Analytics Opt-out Browser Add-on or by declining analytics cookies in our consent banner.

8. International Data Transfers

Because Jenn McGeehan LLC is based in the United States and our sub-processors are primarily U.S.-based, personal information from visitors in the EU, UK, Switzerland, Canada, or Australia is transferred to and processed in the United States.

For transfers from the EU and UK, we rely on:

  • The EU-U.S. Data Privacy Framework and UK Extension where our sub-processors are certified (Stripe and Google are; Meta has its own framework arrangements; verify Moxie and Flodesk certifications at their respective trust pages).

  • Standard Contractual Clauses (SCCs) where applicable.

  • Your explicit consent where neither of the above applies.

You can request a copy of the safeguards in place by contacting jenn@jennmcgeehan.com.

9. Data Retention

We keep personal information only as long as we need it for the purposes described in this policy, or as required by law.

  • Inquiry data (clarity calls, contact forms): Retained for up to 24 months after last contact, then deleted or anonymized.

  • Email subscribers: Retained while you are subscribed. After unsubscribe, your email is retained on a suppression list to honor your opt-out and is otherwise removed within 12 months.

  • Active client records: Retained for the duration of the engagement plus seven years for tax and recordkeeping purposes.

  • Payment records (when applicable): Retained for at least seven years under U.S. tax and accounting requirements.

  • Website analytics: Retained in identifiable form for up to 14 months in Google Analytics, then aggregated.

10. Your Privacy Rights

Depending on where you live, you have different rights regarding your personal information. We honor all of the rights below regardless of jurisdiction, to the extent legally permitted.

If You Are in the EU, UK, or Switzerland (GDPR / UK GDPR)

You have the right to:

  • Access the personal data we hold about you.

  • Rectify inaccurate or incomplete information.

  • Erase your personal data ("right to be forgotten") in certain circumstances.

  • Restrict how we process your data.

  • Object to processing based on legitimate interests or for direct marketing.

  • Data portability: receive your data in a structured, machine-readable format.

  • Withdraw consent at any time without affecting prior lawful processing.

  • Lodge a complaint with your local supervisory authority (e.g., the UK ICO, the Irish DPC, your national DPA).

If You Are a California Resident (CCPA / CPRA)

You have the right to:

  • Know what personal information we collect, use, disclose, and sell or share.

  • Access the specific pieces of personal information we hold about you.

  • Delete personal information we have collected (subject to legal exceptions).

  • Correct inaccurate personal information.

  • Opt out of the sale or sharing of personal information. We do not sell personal information. We do share information with advertising platforms (Meta, Google) for cross-context behavioral advertising, which California law treats as "sharing." You may opt out of this sharing by emailing us or by using the Global Privacy Control signal in your browser.

  • Limit the use of sensitive personal information.

  • Non-discrimination for exercising your rights.

If You Are in Virginia, Colorado, Connecticut, Utah, or Other U.S. States with Privacy Laws

You have rights substantially similar to the California rights above, including access, deletion, correction, and opt-out of targeted advertising. Contact us using the information below to exercise these rights.

If You Are in Canada (PIPEDA / CASL)

You have the right to access, correct, and withdraw consent for the use of your personal information. Marketing emails comply with CASL requirements, including identification, consent, and an unsubscribe mechanism.

If You Are in Australia (Privacy Act 1988)

You have the right to access and correct your personal information and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

11. How to Exercise Your Rights

To exercise any right above, email us at jenn@jennmcgeehan.com with the subject line "Privacy Request."

We will respond within:

  • 30 days for GDPR and UK GDPR requests (extendable by 60 days for complex requests, with notice).

  • 45 days for U.S. state law requests (extendable as state law allows).

We may need to verify your identity before processing your request. This typically means confirming your email address or asking a security question. We will never charge you a fee for exercising your rights unless your request is manifestly unfounded or excessive.

12. Children's Privacy

This site is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us at jenn@jennmcgeehan.com and we will delete it.

13. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, disclosure, alteration, or destruction. These include:

  • Encryption in transit (TLS/HTTPS) for all data transferred through this site.

  • Encryption at rest where supported by our sub-processors.

  • Access controls limiting who on our team can see what data.

  • Regular review of our security practices and sub-processor security postures.

No system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify you in accordance with applicable law.

14. Third-Party Links

This site contains links to third-party websites and services (Instagram, LinkedIn, scheduling platforms, etc.). We are not responsible for the privacy practices of those services. Read their privacy policies before sharing information with them.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of the page reflects the most recent revision.

For material changes (changes to how we use your data, new categories of data collected, new sub-processors handling sensitive data), we will provide at least 30 days' notice before the changes take effect by posting a notice on the site and, where appropriate, by email.

Continued use of the site after the effective date constitutes acceptance of the revised policy.

16. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, contact us:

Email: jenn@jennmcgeehan.com Mail: Jenn McGeehan LLC, PO Box 16, Zeeland, MI 49464 Subject line for privacy requests: "Privacy Request"

For EU/UK residents who feel their concerns have not been adequately addressed, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EU, locate your national DPA at edpb.europa.eu/about-edpb/about-edpb/members_en.