Privacy Policy

What we collect, and what we do with it

The short version: your name, your email, and a record that you bought something. No advertising pixels, no retargeting, nothing sold or shared. The long version is below.

Last updated · 26 August 2026

1. Purpose and scope

They Left Notes is operated by Justine N Taormina, a sole proprietor doing business as They Left Notes ("Company," "we," "us," or "our"). This Privacy Policy ("Policy") explains how we collect, use, share, and protect your personal information when you visit our website theyleftnotes.co and any related subpages (the "Website").

"Products" means the digital products, services, and related offerings we sell through the Website, as defined in our Terms of Purchase for Digital Goods and Services.

This Policy applies when you:

• Visit or browse our Website.
• Submit our contact form or otherwise message us.
• Opt into our waitlist, newsletter, or other email communications.
• Purchase Products or access them in the Vault, our online delivery hub.
• Post a comment or other submission on a Product page.

This Policy does not cover data collected offline or via third-party websites or platforms.

By providing your information through forms, account registration, or purchases on our Website, you consent to the practices described here. For browsing data and cookies, see Section 6.

2. Age requirements

This Website is intended for adults. We do not knowingly collect or solicit personal information from anyone under 18. If you are under 18, please do not submit any personal information to us or create an account. If we learn that we have collected personal information from someone under 18, we will delete it promptly.

Student and minor information

Our Products are written for adult volunteers and officers of parent-teacher organizations, booster clubs, and similar groups. We do not request, and you should not send us, personal information about any student, minor, or family — including names, contact details, participation records, financial-hardship information, or membership rosters. If you send us information of that kind, whether or not you meant to, we will delete it from our systems as soon as we identify it and will not use it for any purpose. If you believe you have sent us such information, contact us at hello@theyleftnotes.co and we will confirm deletion.

3. Information we collect

We collect the following types of personal information:

• Personal identifiers. Name and email address. We collect a billing address only where our payment processor requires it to complete a transaction.
• Financial information. Payment card details are collected and processed by our payment processor. We do not receive or store full payment card numbers. We receive a record of the transaction, including the amount, date, and the last four digits of the card.
• Internet and device activity. IP address, browser type, operating system, referring page, and pages viewed on our Website.
• Account credentials. Username and password for accessing purchased Products in the Vault.
• Product data. Which Products you own, when you accessed them, and any comments you post on a Product page.
• Order and transaction information. Products purchased, order history, and order amounts.
• Communications. The contents of contact form submissions, email replies, and any support correspondence with us.
• AI Product inputs. If you use an AI-powered Product, the prompts and content you enter into it. See Section 5.

This data is collected directly from you when you provide it, automatically as you browse, or from the service providers listed in Section 5.

We do not collect demographic information, precise geolocation data, biometric data, health information, government identification numbers, or any category of sensitive personal information beyond what is described in Section 4.

4. Sensitive personal information

The only information we hold that may be classified as "sensitive personal information" under applicable privacy laws is your account login credentials — your username combined with your password.

We use this solely to authenticate you and provide access to Products you have purchased. We do not use or disclose it for any other purpose, and we do not sell or share it.

Because we do not use sensitive personal information for any purpose beyond providing the services you request, the Right to limit use of sensitive personal information described in Section 8 does not change how we handle your data. You may still exercise it.

5. Sources of information and who processes it

Your personal information is collected from, and processed by, the following:

• Directly from you. When you fill out a form, join the waitlist, subscribe to our newsletter, create an account, make a purchase, or contact us.
• Kajabi. Our hosting and commerce platform. Kajabi runs the Website, checkout, account system, email, and customer records, and provides the analytics we use. Kajabi and its subprocessors — including RudderStack, which supplies the anonymous identifier used for page-performance measurement — set the cookies described in Section 6.
• Stripe and PayPal. Our payment processors. Their scripts run on our checkout, set their own cookies, and perform fraud detection.
• AI platform providers. Where we offer an AI-powered Product that runs on a third-party platform, the prompts and content you enter into that Product are transmitted to and processed by that platform provider under its own terms and privacy policy. We identify the applicable platform in the Product description at the time of purchase. Do not enter sensitive personal information, confidential organizational records, or any information about a student or other minor into an AI Product.

If we add any other tracking, analytics, advertising, or email tool, we will name it in this Section and update Sections 6 and 7 before it goes live.

6. Cookies and tracking technologies

We use cookies and similar technologies in the following categories:

• Strictly necessary. Required for the Website to function — session management, login, checkout, and security. These cannot be disabled.
• Performance and analytics. Help us understand in aggregate how visitors use the Website and which articles are read.
• Functional. Remember your preferences and settings.

We do not run advertising on this Website, and we do not place advertising or retargeting pixels on it. Our hosting platform, payment processors, and their subprocessors set cookies to operate the site, secure checkout, prevent fraud, and measure page performance. Some cookie-scanning tools label certain of these — for example, the anonymous identifier our platform uses for page-performance measurement — as "marketing" cookies because of who publishes them. We do not use them to build advertising profiles, to target ads to you, or to follow you across other websites, and we do not disclose them to advertising networks.

We do not participate in affiliate marketing programs. We receive no commission on any third-party product or tool we mention. If this changes, we will update this Policy and disclose the relationship in accordance with the Federal Trade Commission's Endorsement Guides.

You can manage cookies through your browser settings. Disabling strictly necessary cookies will prevent login and checkout from working.

7. How we use your information, and who we share it with

How we use it

• To process your transactions — completing purchases, managing billing, and delivering the Products you buy.
• To deliver and maintain your access to purchased Products, your account, and the Vault.
• To communicate with you about your account, purchases, or inquiries, including order confirmations, receipts, delivery emails, and replies to your messages.
• To send email you asked for — waitlist and newsletter messages.
• To improve the Website and decide what to write next, using aggregate traffic and reading data.
• To prevent fraud and protect transaction security.
• To comply with legal obligations and protect our legal rights, including tax and accounting requirements and enforcement of our Terms.
• To use testimonials and feedback you have shared, subject to the limits in Section 10 of our Website Terms and Conditions and Section 9 of our Terms of Purchase. We identify you by first name and last initial and general role only, and we do not publish your full name, your school or organization, or your photograph without your separate written permission.

We do not use your information to build advertising profiles, and we do not use it for automated decision-making that produces legal or similarly significant effects.

Who we share it with

• Service providers — Kajabi, Stripe, PayPal, and their subprocessors, as described in Section 5, and any AI platform provider used to deliver an AI Product you use.
• Legal authorities — where required by law, regulation, or legal process, including a court order, subpoena, or governmental request, or to protect our legal rights, privacy, safety, or property.
• In a corporate transaction — in a merger, acquisition, restructuring, or sale of assets, your personal information may transfer as part of the transaction. We will notify you of any significant change in how it is handled.
• Aggregated or de-identified information that cannot reasonably be used to identify you.
• With your consent, in any other situation.

We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use third-party advertising pixels, retargeting tools, or ad networks.

If this changes, we will update this Policy, add a "Do Not Sell or Share My Personal Information" link to the Website, and provide the opt-out mechanisms applicable law requires, before the change takes effect.

International data transfers

Our Website is operated from the United States and intended for users located in the United States. If you access it from outside the United States, your personal data will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

8. Your rights

Most of these rights are not currently required of a business our size. State privacy laws generally apply only to companies above revenue or consumer-count thresholds we do not meet. We extend these rights anyway, as a matter of practice rather than legal obligation, to anyone who asks, wherever they live. If we ever become subject to a state privacy law, we will update this Policy and comply with its specific requirements.

• Right to access. Request access to the personal data we hold about you.
• Right to know. Request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the parties we share it with.
• Right to correction. Request correction of inaccurate or incomplete data.
• Right to deletion. Request that we delete your personal data. We will honor the request except where we are required to keep records — most commonly, we must retain a record of completed purchases for seven years to meet tax and accounting obligations, as described in Section 10. In that case we will delete everything else and tell you specifically what we kept and why. Deleting your account ends your access to Products you have purchased, so download anything you want to keep first.
• Right to data portability. Request a copy of your data in a commonly used format.
• Right to limit use of sensitive personal information. Direct us to limit use of your login credentials to providing the services you request. As explained in Section 4, that is already the only way we use them.
• Right to opt out. Stop receiving marketing email at any time. See Section 9.
• Right to non-discrimination. We will not treat you differently for exercising any of these rights.

How to exercise them. Contact us at hello@theyleftnotes.co or use any method in Section 12. We aim to respond within 45 days. We may need to verify your identity before acting on a request. If you use an authorized agent, we may require proof of authorization.

If we say no. You may appeal by emailing hello@theyleftnotes.co with the subject line "Privacy Rights Appeal." We will respond with our reasoning. If you remain unsatisfied, you may contact your state attorney general.

9. Email and opting out

You can unsubscribe from marketing email at any time using the link at the bottom of any waitlist or newsletter message, or by emailing us at hello@theyleftnotes.co. We will honor the request within ten (10) business days.

We will still send you transactional messages about purchases you have made — order confirmations, receipts, product delivery, and account or security notices — because you need them to use what you bought. Those messages are not marketing and do not carry an unsubscribe link.

Global Privacy Control and Do Not Track. We do not sell or share personal information, so there is nothing for a Global Privacy Control (GPC) signal to opt you out of. If our practices ever change, we will honor GPC signals as valid opt-out requests. There is no industry-wide standard for Do Not Track browser signals; we will update this Policy if one is adopted. For more on GPC, see globalprivacycontrol.org.

10. Data retention

We keep your personal information only as long as necessary:

• Account and transaction data: for the life of your account, plus seven (7) years to meet tax, accounting, and legal obligations.
• Marketing data: until you unsubscribe or request deletion.
• Contact form and support correspondence: three (3) years.
• Analytics and cookie data: retained by our hosting platform on its own schedule, generally no longer than twenty-four (24) months. Cookies set on your device expire on the schedule described in Section 6 or when you clear them.
• Legal and compliance records: as required by applicable law.

After the applicable period we securely delete or anonymize the data unless retention is required by law. We securely dispose of customer records containing personal information when we no longer need them.

11. Data security and breach notification

Security. Our Website and customer records are hosted by Kajabi. Payment card data is handled entirely by our payment processors and is never stored by us. We use multi-factor authentication on administrative accounts and limit access to those records to the sole proprietor. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials secure. We are not liable for unauthorized access resulting from your failure to safeguard your login information.

If there is a breach. If we determine that a security breach has resulted in unauthorized access to your unencrypted personal information, we will notify you by email as quickly as we can, and in any event no later than thirty (30) days after that determination, as required by Florida Statutes § 501.171. Where the law requires it, we will also notify the Florida Department of Legal Affairs and any other authority entitled to notice.

12. Contact us

If you have questions, concerns, or want to exercise your privacy rights, reach us using any of the following:

• Email: hello@theyleftnotes.co
• Contact form: theyleftnotes.co/contact
• Mail: They Left Notes, 1650 N Mills Ave #332, Orlando, FL 32803

13. Changes to this policy

We may update this Policy to reflect changes in our practices or legal obligations. The "Last updated" date at the top reflects the latest version. If we make material changes, we will notify you by email or post a notice on the Website.

Your continued use of the Website after a change indicates your acceptance of the updated Policy.

Questions · hello@theyleftnotes.co