Privacy Policy

Brett Johnson Last Updated: 2026-04-27 Effective Date: 2026-05-01

1. Introduction

Brett Johnson Services, LLC ("we," "us," "our," or "Company") operates brettjohnson.xyz (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website and use our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Website. By accessing or using brettjohnson.xyz, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Inquiry & Contact Forms:

  • Name
  • Organization
  • Email address
  • Phone number (optional)
  • Engagement type and budget range
  • Message content
  • Any other information you voluntarily provide

Booking & Service Requests:

  • Full legal name
  • Business contact information
  • Event details and requirements
  • Payment information (processed through secure third parties)
  • Calendar integration data

Media Kit Access:

  • Email address for verification and gating

Newsletter & Communications:

  • Email address
  • Subscription preferences
  • Engagement history

2.2 Information Collected Automatically

Cookies & Tracking Technologies:

  • Session cookies for functionality
  • Analytics cookies (via Plausible Analytics - privacy-first, no cookie tracking)
  • Device information (browser type, OS, device type)
  • IP address and approximate location
  • Pages visited and time spent
  • Referral sources
  • Click streams and navigation patterns

Server Logs:

  • HTTP request headers
  • Server response status
  • Timestamp of activity
  • User agent information

3. How We Use Your Information

3.1 Primary Purposes

We use collected information for:

  • Service Delivery: Processing inquiries, booking requests, and service fulfillment
  • Communication: Responding to your requests, confirming bookings, sending confirmations
  • Legal Compliance: Meeting regulatory and legal obligations
  • Safety & Fraud Prevention: Detecting and preventing fraudulent activity
  • Analytics & Improvement: Analyzing Website performance and user behavior
  • Marketing & Outreach: Sending promotional materials (with opt-in consent)

3.2 Lead Management

Information submitted through inquiry forms is:

  • Stored securely in our customer relationship management (CRM) system
  • Used to evaluate speaking/consulting requests
  • Shared with our booking and operations team
  • Retained for contract and business record purposes

4. How We Share Your Information

4.1 Service Providers

We share information with trusted third parties who help us operate:

  • HubSpot - CRM and booking pipeline management
  • Calendly - Calendar and scheduling integration
  • Resend - Transactional email delivery
  • Supabase - Secure database and authentication
  • Vercel - Website hosting and edge functions
  • Cloudflare - Content delivery, security, and DDoS protection
  • Plausible Analytics - Privacy-focused analytics

4.2 Legal Requirements

We may disclose information when required by law or when we believe in good faith that such action is necessary to:

  • Comply with legal obligations or court orders
  • Enforce our Terms of Service
  • Protect the safety, rights, and property of our users and the public
  • Prevent fraud or security breaches

4.3 Business Transfers

If Brett Johnson Services, LLC is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

5. Data Retention

  • Inquiry Forms: Retained for 2 years for business records and legal compliance
  • Booking Data: Retained per contract terms (typically 3-7 years)
  • Analytics Data: Retained for 12 months (then aggregated or deleted)
  • Email Communications: Retained per our email retention policy
  • You may request deletion at any time, subject to legal and contractual obligations

6. International Data Transfers

brettjohnson.xyz is hosted in the United States. If you are accessing from outside the US, your information will be transferred to and processed in the United States. By using brettjohnson.xyz, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may have different data protection rules.

7. Your Privacy Rights

7.1 Access & Portability

You have the right to request a copy of the personal information we hold about you.

7.2 Correction & Update

You can request that we correct inaccurate or incomplete information.

7.3 Deletion (Right to Be Forgotten)

You may request deletion of your personal information, subject to legal and contractual obligations.

7.4 Opt-Out

You can opt out of marketing communications by clicking the unsubscribe link in any email or contacting us.

7.5 Cookie Management

You can disable or delete cookies through your browser settings, though this may affect Website functionality.

7.6 Do Not Track

We respect Do Not Track (DNT) signals. Our analytics provider (Plausible) does not track across websites or build profiles.

To exercise any of these rights, contact us at legal@brettjohnson.xyz.

8. Security

We implement technical, administrative, and physical safeguards to protect your information:

  • Encryption: Data in transit uses TLS/SSL encryption
  • Database Security: Row-level security policies via Supabase
  • Access Controls: Limited access to personal information based on role
  • Monitoring: Continuous security monitoring via Sentry and Cloudflare
  • Incident Response: We have procedures in place to address data breaches

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

brettjohnson.xyz is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information and terminate the child's account.

10. Third-Party Links

brettjohnson.xyz may contain links to third-party websites and services. This Privacy Policy applies only to brettjohnson.xyz. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies before providing personal information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information collected from you
  • Right to opt-out of the sale or sharing of personal information
  • Right to non-discrimination for exercising your rights

To make a request, contact us at legal@brettjohnson.xyz with "CCPA Request" in the subject line.

12. European Privacy Rights (GDPR)

If you are an EU resident, you have rights under the General Data Protection Regulation (GDPR):

  • Right of access to your data
  • Right to rectification of inaccurate data
  • Right to erasure (deletion)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with your supervisory authority

Our lawful basis for processing includes: contract performance, legal compliance, and legitimate interests (marketing with consent).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

  • Updating the "Last Updated" date at the top of this policy
  • Posting a notice on brettjohnson.xyz
  • Sending an email notification for significant changes

Your continued use of brettjohnson.xyz following such notification constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a data breach, please contact us:

Brett Johnson Services, LLC} Email: legal@brettjohnson.xyz Support Email: support@brettjohnson.xyz Address: Available upon request

Version 1.0 | Effective as of 2026-05-01

Privacy Policy | Brett Johnson