Privacy Policy

Effective date: October 11, 2026

This policy explains what personal information karenfinnphd.com collects, why, who it’s shared with, and the choices and rights you have. We do not sell your personal information.

Who we are

karenfinnphd.com is operated by Finn and Associates, LLC (“we,” “us”), the business of Karen Finn, PhD, based in Texas, USA. For the EU and UK General Data Protection Regulation (GDPR), we are the controller of your personal data.

Contact: karen@karenfinnphd.com · 1920 Saint Andrews Dr, Suite #120, Red Oak, TX 75154

What we collect

Information you give us

Contact form: your name, email address and message.
Newsletter signup: your name and email address.
Book download (The Business Growth Plan): your name and email address.
Fit Call booking: your name, email address, phone number, business name, business website or social page, your role in the business, your business’s annual revenue range, and anything else you choose to tell us before the call.
Emails and calls: whatever you share when you write to us or speak with us.

Information collected automatically

Site usage (Google Analytics): pages viewed, time on site, the site that referred you, device and browser type, and approximate location (city or region). Google Analytics does not give us your name or email.
How you found us: when you submit a form, our system records the page you came from and the source of your visit (for example, LinkedIn or a search engine).
Spam protection (Google reCAPTCHA): device and interaction information Google uses to tell people from bots.

We do not collect sensitive personal information such as health, financial account, government ID, racial or ethnic, or biometric data. Please don’t send it to us through our forms.

How we use it

Purpose	Information used	Legal basis (GDPR)
Reply to your messages	Contact form details, emails	Our legitimate interest in responding to you
Send the book and the weekly Insight newsletter	Name, email	Your consent
Schedule and prepare for your Fit Call	Booking details	Steps you ask for before a possible contract
Provide services if you become a client	Contact and business details	Performance of our contract
Understand and improve the site	Site usage data	Your consent where required; otherwise our legitimate interest
Keep forms free of spam and abuse	reCAPTCHA data, form details	Our legitimate interest in security
Meet legal, tax and accounting duties	Records we must keep	Legal obligation

We do not use automated decision-making or profiling that has legal or similarly significant effects on you.

Email from us

We only email you if you ask us to. When you download the book or sign up for the newsletter, you agree to join our email list and receive the weekly Insight and occasional related emails. Every email identifies us, includes our mailing address and has an unsubscribe link. You can also unsubscribe by writing to karen@karenfinnphd.com. We honor unsubscribes within 10 business days and keep your address on a do-not-email list so we don’t email you again by mistake. We follow the US CAN-SPAM Act, Canada’s Anti-Spam Legislation (CASL), the UK and EU rules on electronic marketing, Australia’s Spam Act and New Zealand’s Unsolicited Electronic Messages Act.

We share personal information only with service providers that help us run the site and the business, under contracts that limit their use of it to serving us:

GoHighLevel (LeadConnector): our forms, contact records, scheduling and email.
Our website host and WordPress/Elementor: running the website and its contact form.
Google: Google Analytics (site usage) and reCAPTCHA (spam protection).
YouTube (Google): plays the video on our Contact page.
Professional advisors: such as our accountant or attorney, when needed.

We may also disclose information when the law requires it, to protect our rights or safety, or as part of a sale or transfer of the business.

We do not sell personal information. We do not share it for cross-context behavioral advertising (targeted ads), and we have not done either in the past 12 months.

Cookies and similar technologies

Cookie or tool	What it does	How long
Google Analytics (_ga, ga*)	Counts visits and shows how the site is used	Up to 2 years
Google reCAPTCHA	Tells people from bots on the Contact form	Session to 6 months
YouTube	Plays videos on our site; may set cookies when you play it	Up to 2 years
GoHighLevel forms	Runs our signup and booking forms and records how you found us	Up to 1 year

You can block or delete cookies in your browser settings. You can opt out of Google Analytics with Google’s opt-out add-on at https://tools.google.com/dlpage/gaoptout. Blocking cookies may stop some forms from working.

We honor the Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information. Because we don’t sell or share it, there is nothing further to switch off.

How long we keep it

Contact form messages and Fit Call details: up to 3 years after our last interaction, unless you become a client.
Client records: for the length of our work together, plus 7 years for tax and legal purposes.
Email list: until you unsubscribe. After that, only your email address stays on our do-not-email list.
Google Analytics data: up to 14 months.

Your rights

Wherever you live, you can ask us to:

Tell you what personal information we hold about you and give you a copy
Correct information that is wrong
Delete your information
Stop sending you marketing email

If you are in the EU or UK, you also have the right to restrict or object to how we use your data, to receive it in a portable format, and to withdraw your consent at any time (this doesn’t affect use before you withdrew). You can complain to your local data protection authority, though we’d appreciate the chance to fix the problem first.

If you are in the United States, you also have:

The right to know the categories of personal information we collect, where it comes from, why we use it and who we disclose it to (see the table below)
The right to opt out of the sale or sharing of your personal information, targeted advertising and profiling. We don’t do any of these.
The right not to be treated differently for using your privacy rights
The right to appeal if we decline your request

If you are in Canada, you also have the right to withdraw your consent at any time, to know how your information is used and disclosed, and to complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information. We protect your information as Canada’s PIPEDA and Quebec’s Law 25 require.

If you are in Australia or New Zealand, you also have the right to complain to the Office of the Australian Information Commissioner or New Zealand’s Office of the Privacy Commissioner.

How to make a request: email karen@karenfinnphd.com with the subject “Privacy Request.” We’ll confirm your identity by matching the email address and details we have on file, and reply within 30 days. You may use an authorized agent; we’ll ask for proof that the agent may act for you. There’s no charge. If we decline your request, you can appeal by replying with the subject “Privacy Appeal,” and we’ll answer within 30 days. If you’re not satisfied, you can contact the privacy regulator where you live, such as your state attorney general in the US.

What we collected in the past 12 months

Category	Examples	Source	Why	Disclosed to
Identifiers	Name, email, phone number	You	Replies, email list, Fit Calls	GoHighLevel, website host
Professional information	Business name, website, role, revenue range	You	Preparing for Fit Calls	GoHighLevel
Internet activity	Pages viewed, referring site, device	Your browser	Improving the site, spam protection	Google
Approximate location	City or region from your IP address	Your browser	Site statistics	Google

Children

This site is for business owners and isn’t directed to children under 16. We don’t knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email us and we’ll delete it.

Where your data is stored

We’re based in the United States, and our service providers store data in the US. If you’re outside the US, including in Canada, the UK, the EU, Australia or New Zealand, your information is transferred to and stored in the US, where it may be accessible to US authorities under US law. For the UK and EU, those transfers rely on safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses that our providers use.

Security

We use reasonable safeguards, including encrypted (HTTPS) connections, access controls and reputable service providers. No website or email system is completely secure, so we can’t guarantee absolute security.

Links to other sites

Our site links to other sites, such as LinkedIn and YouTube. Their privacy policies, not this one, apply when you visit them.

Changes to this policy

We’ll post any changes on this page and update the effective date. If a change materially affects how we use information you’ve already given us, we’ll email you if you’re on our list.

Contact us

Questions or requests about your privacy: karen@karenfinnphd.com · 1920 Saint Andrews Dr, Suite #120, Red Oak, TX 75154