Privacy Notice
Last updated October 15, 2024
Jump to Sections
Introduction
This notice explains how Bommarito Consulting, LLC ("I" or "me") collects, uses, and discloses your personal information when you visit jillianbommarito.com (the "site"). If you decide to work with me, you should review the privacy terms of your contract and any related notice or consent forms.
If you have any questions about this privacy notice or my data practices, please contact me at legal@bommaritollc.com.
How I Collect Your Data
I collect data from you through:
- Direct interactions: You may give me your identity and contact information by filling in forms or corresponding with me by email, phone, or otherwise. This includes personal data you provide when you:
- — Subscribe to my newsletter
- — Request marketing to be sent to you
- — Give me feedback or contact me
- Automated technologies or interactions: As you interact with my website, I may automatically collect technical data about your equipment and browsing actions. I do not use cookies on my website.
Information I Collect
I may collect, use, store, and transfer different kinds of personal data about you, which I have grouped together as follows:
- Contact details:
- — First name
- — Last name
- — Email address
- — Telephone number
- — Address
- Technical information:
- — Internet protocol (IP) address
- — Browser type and version
- — Time zone setting and location
- — Operating system and platform for the devices you use to access this website
- — Geolocation information about where you might be
Information I Don't Collect
Sensitive Data
I do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). I also do not collect any information about criminal convictions and offenses.
Children's Data
This is a business site directed and intended for use only by those who are at least 18 years old. My site does not target children, and I do not knowingly collect personal data from any person who is under 16 years old.
If I discover that I have collected personally identifying information about children under 16, I will delete that information. If you are the parent or legal guardian of a child under 16 for whom you believe I have personal information from or about, please contact me using the email contact listed on this page.
Information from Cookies
You may have noticed that my site doesn't have a cookie banner; that's because I don't use any cookies on my site. I do, however, love a good chewy chocolate chip cookie.
How and Why I Use Your Data
I will only process your personal data when the law allows me to. Most commonly, I will process your personal data in the following circumstances:
- To provide and maintain my services. For example, using your contact details to communicate with you about the consulting services that I'm providing to you. Legal basis: contractual
- For marketing and communications. For example, sending you newsletters or information about my services if you've opted in. Legal basis: consent
- To gather analysis or valuable information so that I can improve my site or services. For example, analyzing which blog posts are most frequently read. Legal basis: legitimate interest
- For security and to detect, prevent, and address technical issues and fraud. For example, monitoring site usage to detect and prevent a denial of service attack. Legal basis: legitimate interest
- For legal and regulatory compliance. For example, maintaining customer records for tax purposes. Legal basis: legal obligation
Legal Bases for Processing Your Data
I rely on different legal bases for processing your personal data, depending on the specific purpose. Here's a brief explanation of the main legal bases I use:
- Consent: This means you have given me clear permission to process your personal data for a specific purpose. For example, when you enter your email address and opt in to receive my newsletter, you're giving consent for me to process your email address for that purpose.
- Contractual necessity: This applies when I need to process your personal data to fulfill my contractual obligations to you, or because you've asked me to do something before entering into a contract. For instance, I need to process your contact details to provide you with the consulting services you've requested.
- Legal obligation: Sometimes I need to process your personal data to comply with a common law or statutory obligation. For example, I may need to retain certain information for tax purposes or to comply with employment law.
- Legitimate interest: Processing is necessary for my legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
You can withdraw your consent at any time by contacting me at legal@bommaritollc.com. If I have another legal basis for processing your information, then I may continue to do so, to the extent allowed by law; if I do not have another legal basis for processing your information, then I will cease to process it.
For the other legal bases, you have the right to object to processing in certain circumstances, which I'll consider on a case-by-case basis.
How and Why I Share Your Data
I may share or transfer your data in the circumstances described below.
Legal Purposes
I may share your personal information when required to do so by law or if I have a good faith belief that disclosure of such information is reasonably necessary to:
- satisfy any applicable law, regulation, legal process or enforceable governmental request, including those outside of your country of residence;
- enforce my contractual terms, including investigation of potential violations thereof;
- protect against imminent harm to my rights, operations, property, privacy or safety, or that of our users or the public as required or permitted by law; or
- allow me to limit the damages I may sustain or to pursue available remedies.
Fraud and Security
I may share your personal information to detect, prevent, or otherwise address fraud, security or technical issues.
Corporate transaction
In the event that I become involved in a merger, acquisition, bankruptcy, or any form of sale of some or all of my assets, I may share and/or transfer your personal data to or with the new owners of the business or company.
Consent
I may share your personal information with a third party with your consent.
Aggregate Information
I may also share highly-aggregated, non-identifying information with the public or third parties for any reason; for example, to report on trends about the industry or the number of visitors to my site.
Service Providers
I use third-party service providers to support my website and business functions. The following service providers process information on my behalf:
| Service Provider | Data Collected or Shared | Purpose | Place of Processing |
|---|---|---|---|
| Amazon Web Services (AWS) | Data about web traffic to my site | Website hosting | US |
| Google Workspace | Contact details, communications | Workspace management, including email | US |
| Plausible | See below | Web analytics | EU |
My use of Plausible allows me to track overall trends in my site traffic.
| Data point | Example | Comment |
|---|---|---|
| Page URL | https://yoursite.com/pricing | They track the page URL of each page view on my site. They use this to show me which pages have been viewed and how many times a particular page has been viewed. The hostname and path are collected. Query parameters are discarded, except for these special query parameters: `ref=`, `source=`, `utm_source=`, `utm_medium=`, `utm_campaign=`, `utm_content=` and `utm_term=`. |
| HTTP Referer | https://linkedin.com | They use the referrer string to show me the number of visitors referred to my site from links on other sites. |
| Browser | Chrome 86.0 | They use this to show me what browsers and browser version numbers people use when visiting my site. This is derived from the User-Agent HTTP header. The full User-Agent is discarded. |
| Operating system | macOS 10.15 | They use this to show me what operating systems people use when visiting my site. They show the brand of the operating system and the version number. This is derived from the User-Agent HTTP header. The full User-Agent is discarded. |
| Device type | Desktop | They use this to show me what devices people use when visiting my site. Devices are categorized into desktop, mobile or tablet. This is derived from the User-Agent HTTP header. The full User-Agent is discarded. |
| Country, region, city | United Kingdom, England, London | They look up the visitor's location using their IP address. They do not track anything more granular than the city level and the IP address of the visitor is discarded. They never store IP addresses in their database or logs. |
Data Retention
I will only retain your personal data for as long as reasonably necessary to fulfill the purposes I collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
Your Data Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:
- Request access to your personal data
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Withdraw consent
If you wish to exercise any of these rights, please contact me at legal@bommaritollc.com.
International Transfers
I do not transfer your personal data outside the European Economic Area (EEA) or the United States.
Changes to This Privacy Notice
I may update this privacy notice from time to time. I will notify you of any changes by posting the new privacy notice on this page and updating the "Last updated" date.