Privacy Policy

Last updated: Oct 6, 2025

Karen Winner (“we,” “us,” “our”) provides this Privacy Policy to explain how we collect, use, disclose, and safeguard personal information in connection with https://www.karenwinner.com/ and related services (collectively, the “Services”). By using the Services, you agree to this Privacy Policy.

If you do not agree, please do not use the Services.

1) Personal information we collect

We collect information in three ways, from you, automatically, and from third parties.

a) Information you provide

Account and profile, name, email, password, phone, mailing address, time zone.
Purchases and billing, order details, billing address, and payment method details processed by our payment processor. We do not store full card numbers.
Consultations and uploads, scheduling details, documents you upload, and messages you send.
Support inquiries, feedback, and survey responses.
Audio or media you choose to share if you use optional features.

b) Information collected automatically

Usage data, pages viewed, features used, referring pages, date and time, and approximate location based on IP.
Device and technical data, browser type, device type, operating system, language, cookie IDs, and advertising IDs.
Cookies and similar technologies, see “Cookies and analytics” below.

c) Information from third parties

Payment processors, fraud and payment status signals.
Scheduling and communications providers.
Analytics and advertising partners.
Social sign-in providers if you choose them.

2) How we use personal information

We use information to:
• Provide, maintain, and improve the Services.
• Process orders and payments, deliver purchases, and provide customer support.
• Authenticate users and secure accounts, prevent fraud and misuse.
• Operate scheduling, consultations, and document handling.
• Send transactional messages, receipts, confirmations, and service notices.
• Personalize content and measure performance.
• Comply with legal obligations and enforce terms.
• With your consent, send marketing communications. You can opt out at any time.

3) Disclosing personal information

We disclose information to:
• Service providers that perform services for us, for example hosting, payment processing, email and SMS delivery, analytics, scheduling, customer support, and security. They may access personal information only to perform services for us.
• Business partners when you choose integrations or connect accounts.
• Legal and safety recipients, to comply with law, lawful requests, or protect rights, safety, and property.
• Corporate transactions, in connection with a merger, acquisition, financing, reorganization, or asset sale.

We do not disclose documents uploaded by customers to other customers. Only the uploading customer and authorized admin users can access those documents.

4) Sales, shares, and targeted advertising

Some US laws define “sell” or “share” broadly. We do not sell personal information for money. We may “share” limited identifiers and usage data with advertising partners to deliver targeted ads or to measure ads. You can opt out of such sharing and targeted advertising, see “Your privacy choices.”

We do not knowingly sell or share the personal information of users under 16.

5) Sensitive personal information

We do not seek to collect sensitive personal information. If you submit sensitive information in documents or communications, you do so voluntarily. We use any sensitive information only for the limited purposes permitted by law, for example, providing the Services at your request or ensuring the security and integrity of our systems.

6) Cookies and analytics

We and our partners use cookies, pixels, and similar technologies to operate the site, remember preferences, analyze traffic, and deliver and measure ads.

Your choices:
• Use browser controls to block or delete cookies.
• Use platform controls for mobile advertising IDs.
• Use our cookie banner and preference center, where available.

Key partners and links to their policies are listed in our cookie settings.

7) Data retention

We keep personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and purpose. For example, order records are typically retained for at least the period required by tax and accounting laws. Uploaded documents are retained for 12 months after a consultation completes unless you request deletion earlier, subject to legal holds.

8) Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and regular monitoring. No method of transmission or storage is fully secure. If you have reason to believe your account has been compromised, contact us immediately.

9) Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it. Parents who believe a child has provided information can contact us.

10) Your privacy choices and rights

a) Email marketing

You can unsubscribe from marketing emails by using the unsubscribe link. You will still receive transactional emails.

b) Targeted advertising and “sharing” opt out

You can opt out of targeted advertising and the “sharing” of personal information for cross-context behavioral advertising:
• Use the “Do Not Share or Target My Data” link in the site footer.
• Or send a request to [email protected] with the subject “Opt out of targeted advertising.”

We also process browser Global Privacy Control signals where required.

c) State privacy rights

Depending on where you live, you may have the right to:
• Access, confirm, and know categories and specific pieces of personal information.
• Correct inaccurate personal information.
• Delete personal information.
• Opt out of sales, sharing, and targeted advertising.
• Restrict the use of sensitive personal information where applicable.
• Appeal a decision if we deny your request, for Virginia, Colorado, and Connecticut.

To exercise rights, submit a request at https://www.karenwinner.com/contact/ or email [email protected]. We will verify your identity to a reasonable degree. You may authorize an agent to act for you, subject to verification and signed permission.

California notices. For California residents, we provide the following:
Categories collected, identifiers, commercial information, internet or network activity, geolocation at a general level, inferences, and customer support content.
Sources, you, your devices, service providers, partners.
Purposes, as listed in Section 2.
Disclosures, as listed in Section 3. We “share” identifiers and internet activity for cross-context advertising unless you opt out.
Retention, as described in Section 7.
Shine the Light, California Civil Code §1798.83, you may request information about disclosures to third parties for direct marketing. We do not disclose personal information to third parties for their direct marketing without your consent.

Nevada residents. You may opt out of any sale of covered information by emailing [email protected] with the subject “Nevada Do Not Sell Request.”

11) International users

We operate in the United States. If you access the Services from outside the United States, you understand that your information may be processed in the United States where laws may differ from those in your country.

12) Third-party links and services

The Services may link to third-party websites or services. Their privacy practices are governed by their own policies.

13) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date. Significant changes will be highlighted on the site or sent via email where appropriate.

14) Contact us

If you have questions or requests, contact us at:
Email, [email protected]
Mail, 252 West 37th St. Suite E600, New York, NY 10018
Phone, (917) 741-0213