1.1 Information You Directly Provide

• Contact form. Your name, email address, company name, role or title, phone number where provided, and the substance of your message or inquiry.

• Assessment report requests. Our self-assessments are free and display your score, readiness level, and highest-priority gap without any information from you. If you choose to receive the full written report, we collect the first name and email address you enter for that purpose.

• Your assessment answers stay in your browser. The responses you enter into any self-assessment on this Website, including organization name, contact name, incident details, escalation logs, and free-text notes, are processed locally in your browser and are not transmitted to JHarris Advisory LLC or to anyone else. Closing the tab clears them. When you request a report, only the name and email address you type into the report form are sent to us. Your underlying answers are not.

• Marketing subscription. If you opt in, your name and email address. Marketing consent is always requested separately from a report request and is never a condition of receiving your score or your report.

• Purchases. When you buy a digital product we collect your name, email address, billing address, the organization named at checkout, and the order details.

• We do not receive or store your full payment card number. Card details are collected and processed directly by our payment processor. We receive a confirmation of payment and limited transaction data such as the last four digits of the card and the payment status.

1.2 Information We Collect Automatically

When you visit our Website, we automatically collect certain information about your device and browsing activity through cookies and similar technologies.

• Essential Cookies: Required for basic Website functionality, including shopping cart and checkout.

• Performance and Analytics Cookies: Used to understand how visitors use the Website and improve its content and performance.

You can manage cookie preferences through the consent banner on the Website and through your browser settings. Disabling certain cookies may affect Website functionality, including the ability to complete a purchase.

We use the information we collect to:

• Respond to your inquiries submitted through the contact form

• Generate and deliver the assessment report you requested

• Process, fulfill, and deliver your purchase, and provide the update files included with it

• Provide customer support, including re-delivery and order corrections

• Send marketing and educational email, where you have separately opted in

• Maintain and improve the Website based on usage patterns

• Maintain business, tax, and accounting records

• Ensure security and protect against unauthorized or fraudulent activity

• Comply with applicable legal obligations

We do not use your information for behavioral advertising, cross-context behavioral advertising, or automated decision-making. We do not sell or share your personal information.

Requesting an assessment report does not subscribe you to marketing email. Those are separate choices and we treat them separately.

We do not sell your personal information.

We may share your information in the following limited circumstances:

With Service Providers. We use third-party platforms to operate the Website, deliver reports, and process orders:

‍ ‍Provider Role

—-———————————————————————————————-—————————-

Squarespace Website hosting, content management, and store platform

‍ ‍———————————————————————————————————————————

Squarespace Payment processing for digital product purchases
Payments

‍ ‍ —————————————————————————————————-—————————-

HubSpot Contact form processing, assessment report delivery, and marketing email

—————————————————————————————————-—————————-

These providers process personal information on our behalf, are contractually required to protect it, and may use it only for the purposes we specify.

For Legal Reasons. We may disclose your information if required by law, court order, or lawful request from public authorities.

Business Transfer. If JHarris Advisory LLC is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

With Your Consent. We may share your information for other purposes with your explicit permission.

We retain your personal information only as long as necessary to fulfill the purposes described in this Policy or to satisfy applicable legal and recordkeeping requirements.

‍ ‍Category Retention

————————————————————————————————————-——————————————————————

Contact form data As long as necessary to respond and maintain reasonable business
records, then deleted on request

————————————————————-——————————————————————————————————————

Assessment report requests Retained while we maintain reasonable business records, then
deleted on request

——————————————————————————————————-————————————————————————

Marketing subscription Until you unsubscribe, plus a suppression record so we do not contact
you again

——————————————————-————————————————————————————————————————

Order and transaction records Seven years, to meet tax, accounting, and business recordkeeping
requirements

———————————————————-———————————————————————————————————————

Cookie data Varies by cookie type, governed by your preferences, your browser
settings, and the applicable provider's practices

————————————————————————————————————————————————————-——————

Assessment answers are not retained because they are never collected. See Section 1.1.

5.1 General Rights

‍You may request access to, correction of, or deletion of personal information we hold about you, and you may request a copy of it in a portable format. We will respond as required by applicable law.

‍5.2 California Privacy

‍JHarris Advisory LLC does not currently meet the thresholds that trigger business obligations under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We do not sell or share personal information, and we do not use personal information for cross-context behavioral advertising.

‍We honor core privacy requests regardless of whether we are legally required to. California residents, and anyone else, may request access, correction, deletion, or a portable copy of their personal information using the contact details in Section 10, and we will process the request as described in Section 5.5.

For transparency, the categories of personal information we collect are set out in Section 1, the purposes are set out in Section 2, the recipients are set out in Section 3, and retention periods are set out in Section 4.

If our business practices change such that CCPA/CPRA business obligations apply, we will update this Policy accordingly and comply with all applicable requirements.

‍5.3 Cookie Preferences

You can manage or disable cookies through the consent banner on the Website and through your browser settings. Note that disabling certain cookies may affect Website functionality.

‍5.4 Do Not Track and Global Privacy Control

‍We do not currently respond to browser Do Not Track (DNT) signals, as no universally accepted standard exists. We do honor Global Privacy Control (GPC) signals as an opt-out preference where applicable under California law.

5.5 How to Exercise Your Rights

‍Email info@jharrisadvisory.com with the request and the email address associated with your information. We will acknowledge within 10 business days and respond substantively within 45 days, extending once by a further 45 days where reasonably necessary, and we will tell you if we need the extension.

‍We may need to verify your identity before acting, which we will normally do by confirming control of the email address on file. We will not require you to create an account to make a request, and we will not discriminate against you for making one.

‍To unsubscribe from marketing email, use the unsubscribe link in any message or email us directly.

Our Website may contain links to third-party websites, including LinkedIn. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

Our Website, tools, and products are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors and we do not knowingly sell products to minors.

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, use, alteration, or disclosure. Payment card data is handled directly by our payment processor and does not transit or reside on systems we control.

No internet transmission or electronic storage method is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy periodically. We will post the revised Policy on this page with an updated "Last updated" date. Material changes will be identified in Section 11. Your continued use of the Website following any changes constitutes acceptance of the revised Policy.

Questions, requests, or concerns about this Privacy Policy or your personal information:

• Email:info@jharrisadvisory.com

• Contact Form:jharrisadvisory.com/contact

JHarris Advisory LLC
50 Iron Point Circle Suite 140 PMB 1034
Folsom, CA 95630
United States

JHarris Advisory LLC is the controller of the personal information described in this Policy.