PRIVACY STATEMENT

DIANNE MORIN INC

PRIVACY POLICY

Last Updated: April 12, 2026

www.diannemorininc.com | hello@diannemorininc.com | 14715 Seattle Slew Place, Orlando, FL 32826

PRIVACY POLICY — DIANNE MORIN INC.

Dianne Morin Inc. ("Company," "we," "us," "our") operates www.diannemorininc.com and associated platforms, online courses, and digital products (collectively, "Websites" or "Services"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our Websites, purchase our products or services, or interact with us in any way.

We use the words "you" and "your" to mean you, the visitor, user, customer, or subscriber. By using our Websites or Services, you agree to the terms of this Privacy Policy.

California Notice: To learn more about your California privacy rights, see "CALIFORNIA CONSUMER PRIVACY ACT (CCPA/CPRA)" below.

WHO WE ARE

Dianne Morin Inc. is a compliance consulting and business coaching firm headquartered in Orlando, Florida. We offer compliance education, consulting services, online courses, coaching programs, and related digital products. For purposes of applicable privacy laws:

For U.S. residents: Dianne Morin Inc. is the Business responsible for your personal data
For EU/EEA and UK residents: Dianne Morin Inc. is the Data Controller responsible for your personal data

WHAT PERSONAL INFORMATION WE COLLECT

We collect the following categories of personal information:

Information You Provide Voluntarily

Identifiers: Name, email address, mailing address, phone number
Professional information: Business name, industry, job title
Financial information: Payment card details (processed by our third-party payment processor — we do not store full card numbers)
Account credentials: Username and password for account access
Communications: Content of emails, inquiry forms, or messages you send us
Course and program data: Responses, assessments, and participation data from courses or coaching programs

Information Collected Automatically

Device and browser information: Operating system, browser type, IP address
Usage data: Pages visited, links clicked, time spent on pages, referral URLs
Location data: General geographic location derived from IP address
Cookie and tracking data: See "Cookies and Tracking Technologies" below

Information From Third Parties

Course delivery platforms: If you access our courses through a third-party platform (such as BetterMe), that platform may share enrollment and progress data with us
Payment processors: Our payment processor provides transaction confirmation data
Social media platforms: If you interact with our social media presence, those platforms may share limited data with us per their own privacy policies

HOW WE USE YOUR INFORMATION

We use your personal information for the following lawful purposes:

To provide, manage, and improve our Services — including consulting, coaching, courses, and digital products
To process transactions and send order confirmations, receipts, and invoices
To create and manage your account
To communicate with you about your orders, subscriptions, or inquiries
To send marketing and promotional emails — you may opt out at any time
To personalize your experience on our Websites
To improve our Website based on usage data and feedback
To detect and prevent fraud, unauthorized access, and security threats
To comply with applicable legal obligations
To enforce our Terms of Service

Our lawful bases for processing under GDPR include: performance of a contract, legitimate interests (fraud prevention, security, marketing analytics), legal obligation, and your consent (where required).

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your experience on our Websites. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

Types of Cookies We Use

Essential cookies: Necessary for the Website to function. These cannot be disabled.
Analytics cookies: We use Google Analytics to understand how visitors use our site. Google Analytics uses cookies to collect anonymized information about traffic and usage patterns. You can opt out at https://tools.google.com/dlpage/gaoptout.
Marketing cookies: Used to deliver relevant advertising and track campaign effectiveness. These are only placed with your consent where required by law.
Functional cookies: Remember your preferences and settings for a better experience.

EU/UK visitors: We obtain your consent before placing non-essential cookies on your device. You may withdraw consent at any time through your browser settings or our cookie preference center.

Most browsers allow you to control cookies through settings. Disabling cookies may affect the functionality of our Websites. Some browsers have a "Do Not Track" feature — we currently do not respond to DNT signals, but we respect user opt-out choices for marketing cookies.

WHEN AND WITH WHOM WE SHARE YOUR INFORMATION

We do not sell or rent your personal information to third-party data vendors or marketing companies. We may share your information in the following circumstances:

Service Providers and Vendors

We share your information with trusted third-party vendors who help us operate our business, including: payment processors (who handle transactions under PCI-DSS standards), email marketing platforms, course delivery platforms (including BetterMe), website hosting providers, and customer relationship management tools. These vendors are contractually required to use your information only as directed by us and to maintain appropriate security standards.

Legal Requirements

We may disclose your information to government authorities or third parties when required by law, court order, or subpoena, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Dianne Morin Inc., our users, or the public.

Business Transfer

If Dianne Morin Inc. is acquired by, merged with, or transfers substantially all of its assets to a third party, your personal information may be one of the transferred assets. We will notify you of any such transfer and your options.

Affiliates

We may share your information with affiliated entities within our family of companies, who will use it in a manner consistent with this Privacy Policy.

DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

Account data: Retained for the duration of your account and for 3 years after account closure
Transaction data: Retained for 7 years to comply with financial recordkeeping requirements
Marketing data: Retained until you opt out, then deleted within 30 days
Course participation data: Retained for 3 years after course completion
Usage and analytics data: Generally retained for 13 months (Google Analytics default) or less
Legal and compliance records: Retained as required by applicable law, which may be longer than the above periods

When retention periods expire, we securely delete or anonymize your personal information.

HOW WE PROTECT YOUR INFORMATION

We maintain a comprehensive security program that includes technical, organizational, and administrative measures designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

Encryption of data in transit using SSL/TLS protocols
Secure, access-controlled storage of personal data
Limited access to personal data on a need-to-know basis
Regular review and updates to our security practices
Incident response procedures for notifying affected individuals of data breaches as required by law

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

EMAIL COMMUNICATIONS AND MARKETING

We may send you marketing and promotional emails about our services, courses, and compliance education content. You may opt out of marketing emails at any time by:

Clicking the unsubscribe link in any marketing email
Emailing us at hello@diannemorininc.com with "Unsubscribe" in the subject line

Please note that even after opting out of marketing emails, you will continue to receive transactional emails related to your account, orders, and subscriptions (such as receipts, access confirmations, and billing notices). These transactional emails are necessary for your account and cannot be opted out of while your account or subscription is active.

We comply with the CAN-SPAM Act. All marketing emails include our physical address, an honest subject line, and a functional unsubscribe mechanism. We honor opt-out requests within 10 business days.

PAYMENT PROCESSING

We use third-party payment processors to handle all financial transactions. We do not store or have access to your full credit or debit card number. Our payment processors are PCI-DSS compliant. By making a purchase, you agree to the payment processor's terms and privacy policy. We retain only the last four digits of your card and transaction confirmation data for your records.

U.S. STATE PRIVACY RIGHTS

Depending on your state of residence, you may have the following rights regarding your personal information. To exercise any of these rights, contact hello@diannemorininc.com. We will verify your identity before processing your request and respond within the timeframes required by applicable law.

California

CCPA as amended by CPRA (California Privacy Rights Act)

Your Rights

Access (up to twice per year), correction, deletion, portability, opt-out of sale/sharing of personal data, and opt-out of sensitive data processing. You have the right not to be discriminated against for exercising these rights.

Virginia

Virginia Consumer Data Protection Act (VCDPA) — Va. Code § 59.1-571 et seq.

Your Rights

Access, correction, deletion, portability, opt-out of targeted advertising and data sales. You have the right to appeal a denial of any of these rights.

Colorado

Colorado Privacy Act (CPA)

Your Rights

Access, correction, deletion, portability, opt-out of targeted advertising, profiling, and sale of personal data.

Connecticut

Connecticut Data Privacy Act (CTDPA)

Your Rights

Access, correction, deletion, portability, opt-out of targeted advertising and data sales. Right to appeal.

Texas

Texas Data Privacy and Security Act (TDPSA) — effective July 1, 2024

Your Rights

Access, correction, deletion, portability, opt-out of targeted advertising, profiling, and sale of sensitive data.

Florida

Florida Digital Bill of Rights (FDBR)

Your Rights

Access, correction, deletion, portability, and opt-out of targeted advertising for consumers of controllers meeting applicable revenue/data thresholds.

Residents of other states with applicable privacy laws may also contact us at hello@diannemorininc.com to exercise available rights. We will respond in compliance with applicable state law.

EU/EEA AND UK RESIDENTS — GDPR AND UK GDPR

The EU General Data Protection Regulation (GDPR, effective May 25, 2018) and the UK General Data Protection Regulation (UK GDPR, applicable since January 1, 2021 following the UK's departure from the EU) apply to the processing of personal data of individuals located in the EU/EEA and the United Kingdom, respectively.

Lawful Bases for Processing

We process your personal data on the following lawful bases: performance of a contract (providing services you have purchased), legitimate interests (fraud prevention, security, analytics, and direct marketing), legal obligation (compliance with applicable law), and consent (where specifically required, such as for marketing communications and non-essential cookies).

Your GDPR Rights

Right to transparency — to be informed about how your data is used (this Policy)
Right of access — to receive a copy of the personal data we hold about you
Right to rectification — to correct inaccurate or incomplete personal data
Right to erasure ("right to be forgotten") — to request deletion of your personal data
Right to data portability — to receive your data in a structured, machine-readable format
Right to restrict processing — to limit how we use your data in certain circumstances
Right to object — to object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making — we do not engage in solely automated decision-making with legal or significant effects

To exercise any of these rights, contact hello@diannemorininc.com. We will respond within 30 days (extendable by two additional months for complex requests). If you are not satisfied with our response, you have the right to complain to your local data protection authority.

Cross-Border Data Transfers

If we transfer your personal data from the EU/EEA or UK to a country not deemed adequate by the European Commission, we do so using appropriate safeguards such as Standard Contractual Clauses (SCCs) or, for UK transfers, International Data Transfer Agreements (IDTAs).

CHILDREN'S PRIVACY

Our Websites and Services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under the age of 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has submitted information to our Websites, please contact us at hello@diannemorininc.com.

AUTHORIZED AGENT REQUESTS

You may authorize an agent to make a privacy rights request on your behalf. Authorized agents must provide documentation demonstrating their authorization (such as a signed permission letter or power of attorney). Dianne Morin Inc. reserves the right to verify your identity directly before acting on an agent's request. Authorized agents may only use your personal information to fulfill your privacy request.

AI TOOLS AND AUTOMATED PROCESSING

Dianne Morin Inc. may use AI-assisted tools to help develop course content, draft communications, or analyze business data. We do not use automated decision-making with legal or similarly significant effects on individuals. Any AI-assisted content is reviewed and approved by a human professional before use. We do not use your personal data to train third-party AI models without your explicit consent.

THIRD-PARTY PLATFORMS AND SOCIAL MEDIA

Our Websites may contain links to third-party websites or platforms, including social media (Instagram, LinkedIn, YouTube, X/Twitter, Facebook), course delivery platforms (BetterMe), and payment processors. Dianne Morin Inc. is not responsible for the privacy practices of any third-party site or platform. We encourage you to review the privacy policies of any third-party services you use in connection with our Websites.

We maintain a business presence on social media platforms. Any information you submit through those platforms is subject to their own privacy policies and is not covered by this Policy.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will post the updated Policy on our Website and update the "Last Updated" date at the top of this document. For significant changes, we may also notify you by email. Your continued use of our Websites after any update constitutes your acceptance of the revised Policy.

The English language version of this Privacy Policy is the controlling version regardless of any translation.

CONTACTING US

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

Dianne Morin Inc. — Attention: Privacy

14715 Seattle Slew Place, Orlando, FL 32826

Email: hello@diannemorininc.com

Compliance Inquiries: dianne@diannemorininc.com

We will acknowledge your request within 5 business days and respond fully within the timeframe required by applicable law (typically 30–45 days).