Privacy Policy

This Privacy Policy describes how Jonas Muthoni (“Jonas,” “we,” “us,” or “our”), acting in his individual capacity, collects, uses, discloses, retains, and protects personal information in connection with jonasmuthoni.com and any pages, forms, accounts, digital products, communications, or services that link to this Policy (collectively, the “Website”). Jonas Muthoni is the controller or business responsible for the personal information described in this Policy unless a separate notice or written agreement states otherwise.

This Policy does not govern personal information processed solely on behalf of a consulting client under a separate agreement. It also does not govern third-party websites, platforms, payment processors, scheduling providers, or social networks that have their own privacy notices.

The information we collect depends on how you use the Website and which features you choose.

Where a law requires a legal basis, we rely on one or more of the following: performance of a contract or steps requested before entering a contract; compliance with legal obligations; our legitimate interests in operating, securing, analyzing, and improving the Website and communicating about our business, balanced against your rights; your consent, including for non-essential cookies or certain marketing; and protection of vital interests or legal claims where applicable. You may withdraw consent at any time, but withdrawal does not affect processing already completed lawfully.

We and our providers may use cookies, pixels, tags, local storage, software development kits, and similar technologies. These technologies may fall into the following categories:

Where required, non-essential technologies will not be activated until you provide consent. You can use the Website’s cookie or privacy settings to accept, reject, or change categories. Browser controls may also block or delete cookies, although doing so may affect functionality. Consent choices should be as easy to withdraw as to give.

We may disclose personal information to the following categories of recipients for the purposes described above:

We require service providers to use personal information only for authorized purposes and to protect it appropriately, subject to the terms of our agreements and applicable law.

We do not sell personal information for money. Some analytics, advertising, or social-media technologies may involve disclosure of identifiers, device information, or internet activity in a manner that certain U.S. privacy laws define as a “sale,” “sharing,” or processing for targeted advertising, even when no money changes hands. Where applicable, you may opt out through the Website’s cookie/privacy settings, a “Your Privacy Choices” link, a recognized Global Privacy Control signal, or the contact method below.

We do not knowingly sell or share personal information of individuals under 16. We do not use sensitive personal information to infer characteristics about you or for purposes requiring a right to limit without providing the legally required choice. We do not make decisions that produce legal or similarly significant effects based solely on automated processing unless separately disclosed and permitted by law.

Payments may be processed by third-party payment processors. Those processors collect and process payment-card and bank information under their own privacy notices and security standards. We typically receive transaction status, limited billing information, and a payment token or reference rather than a complete card number. We use transaction information to fulfill purchases, prevent fraud, administer refunds or disputes, maintain records, and comply with tax and accounting obligations.

If you subscribe or otherwise provide valid permission, we may send promotional emails or recurring promotional text messages. Consent to receive marketing texts is not a condition of purchase. Message frequency may vary, and message and data rates may apply. You can unsubscribe from marketing email using the link in the message. You can opt out of marketing texts by replying STOP or by any other reasonable method communicated to you. Reply HELP for help when that feature is available. We may send one confirmation of an SMS opt-out. We may continue sending non-marketing communications that are necessary for transactions, security, account administration, or services you requested.

We retain minimal suppression records so we can honor opt-outs. Mobile opt-in information and consent records are not sold, rented, or disclosed to third parties for their independent marketing; they may be shared with providers that deliver or support the messaging program and as required by law.

We keep personal information only as long as reasonably necessary for the purposes described in this Policy. Retention depends on the nature of the information, the relationship, and legal or operational needs. For example, we generally retain inquiries while evaluating or maintaining a business relationship; account information while an account is active and for a reasonable period afterward; transaction, contract, tax, and accounting records for legally required periods; consent and suppression records as needed to document and honor communication choices; and security logs for a limited period appropriate to fraud prevention and incident response. We may retain information longer when required by law, subject to a legal hold, needed to resolve disputes, or necessary to enforce agreements. We delete, anonymize, or securely isolate information when retention is no longer justified.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, taking into account its sensitivity and the nature of the Website. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for using a unique password, protecting account credentials, and notifying us promptly if you suspect unauthorized access.

Residents of California and other U.S. states may have privacy rights when an applicable law covers our processing. Depending on your state and subject to exceptions, those rights may include the right to confirm processing; access or know categories and specific pieces of personal information; correct inaccuracies; delete information; obtain a portable copy; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive information; and appeal a denied request. You also have the right not to receive unlawful discriminatory treatment for exercising a privacy right.

If applicable law in the European Economic Area, United Kingdom, or Switzerland governs our processing, you may have rights to be informed; access, correct, or erase personal data; restrict or object to processing; receive portable data; withdraw consent; and object at any time to direct marketing. You may also lodge a complaint with the data-protection authority where you live or work or where you believe an infringement occurred.

We process personal data on the legal bases described in Section 4. When we rely on legitimate interests, those interests generally include operating and securing the Website, responding to business inquiries, improving services, preventing fraud, and communicating with business contacts, unless your rights override those interests. We do not use solely automated decision-making with legal or similarly significant effects unless separately disclosed. If we are required to appoint a representative or data protection officer, current contact details will be added to this Policy.

If Canadian privacy law applies, you may request access to and correction of personal information and may withdraw consent subject to legal or contractual restrictions. Commercial electronic messages sent to recipients in Canada will be managed in accordance with applicable consent, identification, and unsubscribe requirements. Residents of Brazil, Australia, and other jurisdictions may have additional rights under local law. We will honor verified requests to the extent required by the law that applies to our processing.

The Website is operated from the United States. Personal information may be processed in the United States and other countries where we or our providers operate. Those countries may have different privacy laws than your country. Where required, we use legally recognized transfer safeguards, such as adequacy decisions, contractual protections, or another lawful transfer mechanism. You may contact us for information about safeguards relevant to your data.

The Website is intended for people age 18 and older and is not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and delete it where required. Users under the age of majority in their location should use the Website only with permission and supervision of a parent or legal guardian.

The Website may link to or integrate services operated by others, including scheduling, payment, video, social-media, authentication, and content platforms. Their privacy practices are governed by their own notices. A link or integration does not mean we control or endorse their privacy or security practices. Review their terms and notices before providing information.

We may update this Policy to reflect changes in the Website, services, vendors, or law. We will post the revised version and update the effective date. If changes are material, we will provide additional notice or request consent when required. Your continued use after the effective date of an update is subject to the revised Policy, but we will not apply material changes retroactively where prohibited.

For questions about this Privacy Policy, or to submit a request, contact Jonas Muthoni through the contact form at jonasmuthoni.com/contact/. Please use the subject line or first line “Privacy Request” and provide enough information for us to understand and respond to your request. Do not submit passwords, full payment-card numbers, government identification numbers, or other highly sensitive information through the form.

Operator: Jonas Muthoni, California, United States.