Privacy Policy

Privacy Policy for TheCatherineWhitmore.com

Effective Date: April 17, 2025
Last Updated: April 17, 2025

Thank you for visiting TheCatherineWhitmore.com (the “Site”). This Privacy Policy explains how Catherine Hannah Whitmore (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our website and related services (including our SMS/text messaging features). By using the Site or engaging with us (for example, by submitting a contact form or signing up for text messages), you consent to the practices described in this Privacy Policy.

We are committed to safeguarding your privacy and ensuring that you understand our data practices. Please read this policy carefully. If you do not agree with it, please do not use our Site or services. If you have any questions, feel free to contact us using the information at the end of this policy.

Information We Collect

We collect personal and technical information in order to provide our services (such as intimacy coaching, workshops, and consultations) and to improve your experience on our Site. The types of information we collect include:

Information You Provide to Us: When you interact with our Site or services, you may provide personal information. For example, if you fill out our contact form or booking inquiry, we collect your name, email address, phone number, and the contents of your message or inquiry. If you communicate with us via email, phone, or other means, we will collect any information you choose to share. This may include details related to your questions, event information (if inquiring about public speaking or workshops), or personal details relevant to coaching services. Please avoid submitting highly sensitive information (like financial details or health records) through our forms or texts.
SMS/Text Message Information: If you provide your phone number and opt to receive SMS/text communications from us (for example, by signing up for text updates or requesting information via text), we will collect your phone number and any information you send via text. This may also include your mobile carrier and the date/time of messages. (See the “SMS/Texting Communications (Textedly)” section below for more details on how we handle text message data.)
Automatically Collected Data: When you visit our Site, we (or our service providers) may collect certain information automatically through cookies and other tracking technologies. This can include your IP address, browser type, device information, pages visited, date/time of visits, and other usage statistics. This data helps us understand how users navigate the Site, diagnose technical issues, and improve site performance and content. (See “Cookies and Tracking Technologies” below for more information.)
Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience (such as keeping you logged in to any account features, if applicable) and to gather analytics about our web traffic. These technologies may collect the automatic data mentioned above. You can control cookies through your browser settings and other tools. (See the “Cookies and Tracking Technologies” section for details on our cookie use and your choices.)
Information from Third Parties: In general, we collect personal information directly from you. We do not ordinarily obtain personal data from third-party sources about you, except in cases where you engage with our third-party services. For example, if you connect with us via a social media platform or via our digital business card service (Linq), we might receive your social media username or contact information through those services. Additionally, our SMS service provider may automatically derive general location information (such as city or area code) from your phone number for routing messages. Any such third-party provided data will also be protected under this Privacy Policy.
No Payment Information via Site: We do not collect financial or payment information through our website. If you purchase services (such as a workshop or private session), payment arrangements are handled through separate, secure channels (for example, in person or through a designated booking platform) and not via this Site. As such, no credit card or banking details are collected through the Site.
Children’s Information: Our services are intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If you are under 18, please do not use the Site or submit any information. If we learn that we have collected personal data from a child under 13 (or under 16 in certain jurisdictions) without verifiable parental consent, we will promptly delete that information. (See “Children’s Privacy” below for more.)

How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Personalize Services: We use your information to respond to your inquiries, schedule sessions or consultations, and provide the services or information you request. For example, if you contact us to set up a coaching session or ask a question, we will use your contact details and message information to communicate with you and fulfill your request. Any personal details you share about your situation may be used to tailor our advice or services to your needs.
Communication: We use your email or phone number to communicate with you. This includes sending responses to inquiries, confirmations, reminders, updates on schedules, or follow-ups to ensure you received the information you needed. If you have opted in to our mailing list or SMS list, we will send you the communications you subscribed to (e.g. a newsletter, event announcements, or text updates).
SMS/Text Messaging: If you opt into our text messaging program, we will send you text messages such as updates, marketing messages, appointment reminders, or responses to your texts. We use a third-party service (Textedly) to manage these communications. (Detailed in the SMS/Texting section below.) We may also use text messaging to have two-way conversations if you reach out via SMS, enabling us to answer questions or coordinate services via text.
Marketing and Updates (Opt-In Only): With your consent, we may use your contact information to send you occasional promotional materials, such as newsletters about intimacy coaching tips, upcoming workshops or events, or services we offer. You have the choice to opt out of these marketing communications at any time (by using the unsubscribe link in emails or replying “STOP” to texts, as applicable).
Site Improvement and Analytics: We use automatically collected data (like site usage and cookies data) to maintain and improve our website. This helps us troubleshoot technical issues, analyze trends in how users navigate the Site, and optimize content and layout. For instance, understanding which pages are most visited or where users spend the most time can guide us in refining our offerings. We may use third-party analytics tools (such as Google Analytics or similar) that employ cookies or scripts to collect and analyze this information on our behalf.
Security and Fraud Prevention: Information (including IP addresses and logs) may be used to protect our Site, services, and users from fraud, abuse, or security threats. We monitor for suspicious activity and may use personal data to verify user identity for security purposes or to investigate potential violations of our Terms.
Legal Compliance: We may process and retain your information as needed to comply with legal obligations, such as record-keeping requirements, or to respond to lawful requests by public authorities. For example, if required by law enforcement or a court order, we may use (and later disclose) certain data as mandated.
Other Purposes (with Notice/Consent): If we intend to use your information for any purpose not listed above, we will provide you with specific notice and obtain your consent when required. We will use and share your personal data only in ways that are compatible with the purposes described above or as otherwise described at the point of collection.

We do not use your personal information to make any automated decisions about you (no automated profiling). All personalization of service is done manually by understanding your needs. We also do not sell or rent your personal information for monetary gain.

SMS/Texting Communications (Textedly)

We offer an SMS/Text messaging service to communicate with users who prefer text updates or communications. This section explains how we handle your data in relation to text messaging and our use of the Textedly platform:

Opting In: You may opt in to receive text messages from us by providing your mobile phone number through our Site (for example, on a contact form requesting text communication) or by otherwise expressly requesting text updates. By providing your number and opting in, you consent to receive SMS/MMS messages from us. These messages may include appointment reminders, answers to questions you ask via text, announcements about upcoming workshops or events, or marketing/promotional content (if you have agreed to receive marketing texts).
Use of Textedly: We use Textedly, a third-party SMS messaging platform, to send and receive text messages. When you opt in, your phone number and any text communications with us are processed and stored through Textedly’s systems. Textedly acts as a service provider on our behalf to facilitate two-way texting, mass text alerts, and subscriber management. We share your phone number and message content with Textedly only for the purpose of delivering our text communications to you. Textedly may also automatically collect certain non-personal details such as your cellular provider and general location (e.g. city or area code) based on your number, as part of its service functionality.
Data Handling and Privacy: We treat information collected via text message with the same care as other personal information. Message Content: Any information you send us via SMS (for example, questions about intimacy topics or scheduling requests) will be used to respond to you and provide the requested service. These messages may be stored in our records (via Textedly’s platform) so we can reference past communications when serving you. We will not share or publish the content of your text messages except as needed to fulfill your requests or as required by law. Keep in mind that text messaging is not a fully secure or encrypted communication method; we advise against including highly sensitive personal or financial information in any texts.
Message Frequency: The frequency of text messages will vary based on your interactions with us. If you signed up for a recurring update service (for example, weekly tips or announcements), you will receive messages at the disclosed interval. If you are texting us for a one-time inquiry, we will send replies as needed. We strive to limit messages to a reasonable frequency. We will not spam your phone – we only send texts that are relevant to your relationship with us.
Your Choices (Opt-Out): Receiving text messages is completely voluntary. If at any time you wish to stop receiving SMS communications from us, you can opt out. To opt out of marketing or update texts, simply reply “STOP” to any message we send. Upon receiving a STOP request, we will acknowledge your opt-out and you will no longer receive text messages (aside from a final message confirming your opt-out, if applicable). You may also opt out or withdraw consent by contacting us directly (see “Contact Information” below) and requesting removal of your phone number from our text list. Note that if you opt out of marketing texts, we may still send you non-promotional texts that you specifically request or that are necessary for a service (for example, a confirmation or reminder you asked for) unless you also opt out of those.
Messaging Rates: We do not charge any fees for our text messaging service, but standard message and data rates may apply from your mobile carrier. You are responsible for any fees charged by your carrier for sending or receiving messages. The exact charges depend on your phone plan (please check with your provider if you are unsure). There may also be limits or charges on MMS (multimedia) messages if we send images or links.
Two-Way Communication: Our text service may allow two-way texting. This means you can text us questions or responses, and we can reply. Textedly’s platform enables us to manage these conversations. Be aware that if you text us outside of any automated campaigns, a real person (Catherine Whitmore or authorized staff) will see and respond to your message via the Textedly interface.
Third-Party Sharing via Text: We will not share your phone number with third parties for their own marketing. However, as noted, your number and messages are handled through Textedly (which is a third-party service provider under contract with us). Textedly is obligated to protect your data and only use it to provide services to us, but they do have their own privacy policy and security measures. We recommend reviewing Textedly’s Privacy Policy on their website for information on how they safeguard data in their system. Aside from Textedly, we do not disclose your text contact info or message content to others, unless needed to comply with law or protect our rights.

By opting into our SMS communications, you acknowledge that your information will be transmitted to and stored by Textedly on our behalf. We take care to ensure that Textedly, as our vendor, employs appropriate security and privacy practices. If you have questions about our text message program or wish to revoke your consent for texting, please contact us using the information provided in the “Contact Information” section below.

Sharing and Disclosure of Information

We value your privacy and handle your personal information with care. We do not sell your personal data to third parties. We only share your information in limited circumstances, as described below:

Service Providers: We may share your information with trusted third-party service providers who perform functions on our behalf. This includes companies and individuals that help us operate the Site or deliver our services — for example:
Website Hosting and Maintenance: Our website is hosted on a third-party platform (such as Duda) which may process IP addresses and other technical data to serve the site to you. These providers may have access to logs and data necessary to run the site.
Email and Communication Tools: If we use an email service (e.g., an email newsletter platform) or contact form plugin, those providers will handle your contact information to send out communications.
Text Messaging Provider: As noted, we share phone numbers and text content with Textedly to power our SMS communications.
Analytics Providers: We may use analytics services (like Google Analytics) that collect usage data (via cookies, as described in the Cookies section) to help us understand Site traffic. These providers process data on our behalf for analytics purposes.
These service providers are only given the information necessary to perform their specific services. We require that they protect your personal information and use it solely for the purposes of providing services to us and not for their own marketing (in accordance with this Privacy Policy and applicable law).
Business Partners or Affiliates: At present, we do not have affiliated companies or joint marketing partners with whom we share personal data. If this changes (for instance, if we partner with an organization to co-host a workshop and need to share attendee contact info), we will only do so with your knowledge and, if required, your consent. Any such partner would be contractually bound to use the information only for the collaborative effort and not for unrelated purposes.
Legal Requirements and Safety: We may disclose personal information if we, in good faith, believe that such action is necessary to:
Comply with a legal obligation, law, or court order (for example, responding to a subpoena or lawful request by government authorities).
Enforce our terms of service or other agreements, or investigate potential violations thereof.
Detect, prevent, or address fraud, security, or technical issues.
Protect the rights, property, or safety of our users, clients, or others. This could include exchanging information with other companies or organizations for fraud protection and credit risk reduction (though we currently do not engage in formal data sharing for these purposes).
Your Consent or Direction: We may share your information with third parties if you ask us to or explicitly consent to such sharing. For example, if you are interested in a service that involves a third party (such as a legal brothel visit or an event hosted by another company) and you ask us to coordinate on your behalf, we might share necessary details with that third party with your permission. Another example: if a media outlet or project requests a testimonial and you agree to participate, we would share information only as you direct. In all such cases, we will clarify what information you agree to share and with whom.
Business Transfers: In the unlikely event that we undergo a business transition, such as a merger, acquisition, sale of assets, or restructuring, your personal information might be part of the assets transferred to or evaluated by a third party. If that happens, we will ensure that the new owner or successor will continue to honor your privacy rights as set out in this Policy, or we will notify you and give you an opportunity to opt out of the transfer of your personal data.
Aggregate or De-Identified Data: We may also share information that has been aggregated or anonymized in such a way that it cannot reasonably be used to identify you. For example, we might share general statistics about how many people visited the Site in a month, or what percentage of users inquire about workshops versus private sessions. This information contains no personal identifiers and is used for industry analysis, marketing, or other business purposes.

Aside from the situations described above, we will not disclose your personal information to third parties. If in the future we need to share information for a new purpose, we will update this Privacy Policy and notify you as required, and obtain your consent when necessary.

Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your experience and collect information about how our Site is used:

What Are Cookies: Cookies are small text files that are placed on your computer or device when you visit a website. They allow the website to recognize your device and store certain information about your preferences or past actions. Similar technologies include web beacons (tiny graphic images that monitor page views) and local storage objects.
How We Use Cookies: We use cookies for several reasons:
Essential Cookies: These are necessary for the Site to function properly. For example, if our Site has any login-protected areas or forms, essential cookies might keep you logged in or remember your form inputs as you navigate.
Preference Cookies: These cookies remember your choices (such as language preference, if applicable) to provide a more personalized experience.
Analytics Cookies: We use analytics or performance cookies to collect information about how visitors use our Site. This helps us understand which pages are popular, how users move through the Site, and if they encounter errors. For instance, we may use Google Analytics which sets cookies to collect usage data (e.g., page views and traffic sources). This information is aggregated and not personally identifying; it is used to improve the Site’s functioning.
Advertising/Marketing Cookies: Currently, we do not host third-party ads on our Site, and we do not use advertising cookies for third-party marketing. We also do not engage in behavioral advertising. If this ever changes, we will update this policy and seek any necessary consents. (At most, we might use cookies to track the success of our own event announcements or to remember if you’ve already seen a notification on the site so as not to show it again.)
Third-Party Cookies and Tools: Aside from Google Analytics (or similar tools) for analytics, our Site may incorporate content or scripts from third parties that also set cookies. For example:
If we embed a YouTube video, YouTube might set cookies to track video views.
Our social media sharing buttons or links (Facebook, Twitter, Instagram, etc.) might set cookies if you interact with them or if you are logged into those services. These cookies are set by the third-party domains and are subject to those third parties’ privacy policies. We do not control these cookies.
Our site builder platform (Duda) may use its own cookies to enable site functionality and performance.
Your Choices: You have the right to decide whether to accept or reject cookies (aside from strictly necessary cookies which are required for basic operation of the Site). Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. You can also delete cookies that have already been set. Note: If you disable cookies, some parts of our Site may not function properly. For example, forms might not remember your details, or certain features might not be available.
Analytics Opt-Out: If we use Google Analytics, you can opt out of Google Analytics tracking by using a browser add-on provided by Google (Google Analytics Opt-out Browser Add-on) or by adjusting your cookie settings to refuse analytics cookies.
Do Not Track Signals: Some browsers offer a “Do Not Track” (DNT) feature that lets you tell websites you do not want to be tracked across different sites. Currently, there is no uniform standard for how DNT signals are interpreted, and our Site does not respond to DNT signals. However, we treat all users’ data in accordance with this Privacy Policy and continue to monitor industry developments around DNT.
Tracking for Emails/Text: If you join an email newsletter in the future (or currently, if applicable), those emails may contain tracking technologies (like clear GIFs) that tell us if you opened the email or clicked on links, to help us gauge interest in our content. Similarly, if we send URL links via text, we might use a link shortener that tracks click-through for those links. This information is used to improve our communications and is not used to profile individual recipients beyond their engagement with our messages.

By using our Site, you consent to the use of cookies and similar technologies as described. We will request any necessary consents (for example, if required by law for certain cookies) when you first visit the Site. You can always adjust your cookie preferences as described above.

Third-Party Links and Services

Our Site and communications may contain links to third-party websites and integrate certain third-party services. This Privacy Policy applies only to our own Site and data practices, not to any external sites or services that we do not control. We want to make sure you are aware of how those links and integrations work:

External Websites: If you follow a link to any website not operated by us (for example, clicking on an external blog link or a reference), you will be directed to a third-party site. Notable third-party links on our Site include:
BunnyRanch.com: We provide a link to the official BunnyRanch website for booking legal courtesan services (“Book a Legal Luxury Courtesan”). That site is operated by a third-party company. If you click that link or contact the BunnyRanch (such as via the email address provided for brothel inquiries), any information you provide to BunnyRanch will be governed by BunnyRanch’s own privacy policies and terms. We are not responsible for how BunnyRanch handles your data.
Digital Business Card (Linq): Our “Find Me on the Internet” or “My Business Card” links may direct you to a digital business card profile hosted by Linq (linqapp.com) or similar service. Information you submit or share through that service (for example, if you fill out a contact request or share your contact info through the digital card) is subject to Linq’s privacy practices. We may receive any details you provide via that channel, and we will treat them according to this Privacy Policy, but Linq’s handling on their site is outside our control.
Social Media Sites: Our Site features icons or links to Catherine Whitmore’s social media profiles (such as Facebook, Twitter/X, Instagram, LinkedIn, Reddit, YouTube, TikTok, etc.). If you click on these, you will be taken to those external sites. Any interaction you have on those platforms (like following our page or sending us a message via social media) is governed by the privacy policy of the platform in question. We encourage you to review the privacy settings and policies of any social media services you use.
Embedded Third-Party Content: We currently do not heavily embed third-party content beyond images and text. However, if in the future our Site includes embedded content (like videos, maps, or widgets from third parties), be aware that such embedded content can behave as if you visited the third-party site directly. For example, if we embed a YouTube video, YouTube may collect data about your view (even if you do not click on the video) via their own cookies or trackers. We will endeavor to minimize unnecessary third-party embeds, but when they are present, the third party may collect data subject to their own policies.
Third-Party Services/Integrations: In addition to external links, we use some third-party services in our operations (as described in the Sharing section). Services like our website platform, analytics providers, or Textedly (for SMS) are integral to how we deliver content to you. While these operate under our direction and for our purposes, they have their own privacy and data security commitments. We have agreements with such providers to safeguard your data. Nevertheless, if you wish to know more about their practices, you can visit their privacy policies (for example, see Textedly’s or Duda’s privacy statements on their websites).

We want to emphasize that once you leave our Site or submit information to a third-party service directly, we are not in control of that data. We recommend you exercise caution and review the privacy policy of every website or service you interact with. We are not responsible for the privacy practices or content of third-party sites. However, if you believe a third-party site linked on our page is doing something harmful or misleading with personal data, please let us know and we will consider removing or revising the link as appropriate.

Data Security

We take the security of your personal information seriously. We implement reasonable security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data.

Security Measures: Our website platform and hosting providers employ industry-standard technical and organizational measures to safeguard data. This includes the use of encryption (HTTPS/TLS) to protect data transmission on our Site — for example, when you submit a contact form, the information is encrypted in transit between your browser and our server. Our databases and records are protected by access controls, and we limit access to personal information to those who have a legitimate business need to process it (for instance, Catherine Whitmore and any authorized personnel or service providers).
Text and Email Security: Communications via email or text are not always encrypted end-to-end, so please be mindful of the content you share. We protect our email accounts and Textedly dashboard with strong passwords and, where available, multi-factor authentication to prevent unauthorized access. If we receive sensitive information from you, we handle it with confidentiality and secure storage to the best of our ability.
Payment Security: As noted, we do not collect payment info through the Site. Any payment transactions for services would be handled through secure, PCI-compliant processors or in-person methods. If in the future we enable online payments, we will use reputable payment gateways that implement encryption and tokenization to secure payment details, and we will update this Policy accordingly.
No Guarantee: Despite our efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. Cyber threats evolve rapidly, and while we regularly update our practices, there is always some risk. You can help protect your data by using unique, strong passwords when interacting with our Site (if any login) and by using caution when sending information via email or text.
Data Breach Procedures: In the unfortunate event of a data breach or security incident that compromises your personal data, we will act promptly to identify the cause and take remedial action. If a breach poses a significant risk to your rights and freedoms (for example, a risk of identity theft or harm), we will notify you and any applicable regulatory bodies as required by law.
Data Retention: We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For example, if you contact us with an inquiry, we may retain the correspondence for some time in case you follow up or to reference in improving our services. If you become a client, we may retain your information throughout the duration of our professional relationship and for a reasonable period thereafter (e.g., for our records and to comply with legal obligations). When personal information is no longer needed, we will securely dispose of or anonymize it. Phone numbers provided for SMS updates will be retained on our Textedly list until you opt out or until we no longer use the Textedly service, at which point data will be deleted or anonymized from that system.

By using our Site and services, you acknowledge that you understand these security measures and limitations. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of an account or your personal information has been compromised), please immediately contact us so that we can investigate and resolve the issue.

Your Data Protection Rights

We respect your privacy rights and provide you with reasonable access and control over your personal information. Depending on your location and applicable laws, you may have certain data protection rights. This section outlines those rights and how you can exercise them:

General Rights for All Users

Access and Correction: You have the right to request access to the personal information we hold about you and to ask that we correct or update any inaccuracies. For example, if you believe we have an incorrect email address or phone number for you, you can ask us to fix it.
Deletion (Right to Be Forgotten): You can request that we delete personal information that we have collected from you. Keep in mind there may be situations where we are required to retain data (for example, records of transactions for legal compliance) or where we have a legitimate interest to keep data (and applicable law allows us to do so). If we cannot delete all of your data, we will explain the reason.
Withdraw Consent: If you have given us consent to use your information for a specific purpose (such as receiving marketing emails or texts), you have the right to withdraw that consent at any time. For instance, you can unsubscribe from newsletters or opt out of texts as described in this Policy. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and it will not affect processing of your data under other lawful bases (e.g., retaining transaction records for legal compliance).
Objection and Restriction: You have the right to object to or request that we limit (restrict) the processing of your personal information in certain circumstances. For example, you can request that we stop using your data for direct marketing or that we refrain from processing information you believe is inaccurate or obtained unlawfully. You can also object if you feel our processing is not based on a legitimate interest or other proper basis.
Data Portability: To the extent required by applicable law, you may request a copy of the personal data you provided to us in a structured, commonly used, machine-readable format so that you can transmit it to another service provider (data portability). This typically would apply to data we process by automated means on the basis of your consent or a contract with you.
Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. For example, if you choose to exercise rights under CCPA (see below), we will not deny you services, charge you different prices, or provide a different level of quality because of your choices (except as permitted by law, such as offering a different price if you voluntarily participate in a data-for-discount program, which we do not currently have).

GDPR – EU/EEA/UK Residents

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with similar data protection laws (like the GDPR), you have the following additional rights:

Legal Bases for Processing: We rely on certain legal grounds to process your personal data under GDPR:
Contract: We process personal data to perform our contracts with you or to take steps at your request prior to entering into a contract. For example, when you contact us to schedule a session, we must use your information to arrange and provide that service.
Consent: We rely on your consent for optional processing, such as sending marketing communications via email or text. You can withdraw consent at any time.
Legitimate Interests: We process certain data for our legitimate business interests, such as improving our Site’s performance, securing our services, and sending you information about our services that may interest you. We ensure that our legitimate interests do not override your fundamental rights and freedoms – for instance, we only send marketing materials where you would reasonably expect it and always with an opt-out option.
Legal Obligation: In some cases, we must process and retain data to comply with a legal obligation (e.g., accounting records, or responding to legal process).
Explicit Consent for Sensitive Data: If you provide any sensitive personal information (such as details about your health or sex life in the context of seeking our services), we will treat your submission as you giving explicit consent to use that information solely for the purpose of providing you with assistance or services. You may withdraw this consent at any time, and we will delete such sensitive data upon request (unless retention is required by law).
Right to Lodge a Complaint: EU/UK individuals have the right to lodge a complaint with a Data Protection Authority (DPA) or Supervisory Authority in their country if they believe we have infringed their data protection rights. We encourage you to contact us first so we can address your concerns directly, but you are free to reach out to your local authority. (For example, UK residents can contact the ICO; in the EU, you can find your DPA’s contact information on the European Data Protection Board’s website.)

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you are protected by the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). In addition to the general rights above (many of which overlap with CCPA rights), you have the following rights under California law:

Right to Know: You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you in the past 12 months, as well as information about our data practices. This includes the categories of sources of the information, the business or commercial purpose for collecting it, and the categories of third parties with whom we share personal information. We outline in this Privacy Policy the general practices (see sections above on information collected, how we use it, and sharing). If you want more detail or a personalized report of your data, you can request this by contacting us.
Right to Delete: You have the right to request that we delete personal information we have collected from you (with some exceptions as permitted by law). Upon verifying a deletion request, we will remove your personal information from our records (and direct our service providers to do the same), unless retaining the information is necessary for a permitted purpose. Permitted purposes include, for example: completing the transaction for which the data was collected, detecting security incidents, complying with legal obligations, or other uses compatible with the context in which you provided the information.
Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you. We will take into account the nature of the information and the purposes of processing, and work with you to ensure the data we maintain is accurate and up to date.
Right to Opt-Out of Sale/Sharing: The CCPA gives consumers the right to opt out of the “sale or sharing” of their personal information. However, we do not sell personal information to third parties for monetary value, and we do not share personal information for cross-context behavioral advertising purposes. We do not rent or disclose your data to third parties for their own direct marketing. Because we do not engage in data sales or sharing as defined by CCPA, we do not provide a “Do Not Sell or Share My Info” link at this time. If this practice changes, we will update our website and policy to provide opt-out mechanisms.
Sensitive Personal Information: Under CPRA, you have the right to limit the use of sensitive personal information if a business uses it for purposes other than those allowed. We do not use sensitive personal information (e.g., information about health, sex life, or precise geolocation) for purposes beyond what is necessary to provide our services to you (which is an expected purpose when you voluntarily provide such data) or as otherwise permitted by law. We do not use or disclose sensitive information to infer characteristics about consumers. If you have any concerns about sensitive data usage, please contact us.
Authorized Agent: California residents may designate an authorized agent to make a request under CCPA on their behalf. If you choose to do so, we will take steps to verify that the person is properly authorized to act for you, which may include requiring a signed permission and verifying your identity directly.
Verification: When you make a request under CCPA (Right to Know, Delete, or Correct), we are required to verify your identity to a reasonable degree of certainty. This is to protect your information from unauthorized access or deletion by someone impersonating you. We may ask you to provide certain information to match against our records (such as confirming your email address, phone number, or last interaction with us). We will use the information you provide only for verification purposes.
Non-Discrimination: As noted, we will not discriminate against you for exercising any of your CCPA rights. You will receive the same quality of service and pricing from us regardless of your choices about your data.

Exercising Your Rights

To exercise any of your applicable privacy rights or make a request: Please contact us using the information in the “Contact Information” section below. Provide sufficient information that allows us to verify you (if required) and clearly describe your request. You may need to provide your contact details (such as email or phone number) and perhaps a proof of identity for certain requests (we will guide you through the process).

We will respond to your request within the timeframes required by law. For example, under GDPR we will typically respond within one month (with possible extension by two further months if necessary, with explanation), and under CCPA we aim to respond within 45 days (with a possible extension of an additional 45 days if necessary). There is generally no fee for making a request, though repetitive or excessive requests may incur a fee as permitted by law.

Please note that some rights may not be absolute. There may be legal exceptions (we will inform you if any apply). However, we are committed to honoring your rights to the fullest extent possible and will work with you to address any concerns.

Children’s Privacy

Our Site and services are intended for adults and mature audiences. We do not direct any content specifically at children under 18, and we do not knowingly collect personal information from individuals under the age of 18.

No Services for Minors: The topics we deal with (intimacy, relationships, legal sex work) are adult in nature. If you are under 18 years old, you are not permitted to use our Site, sign up for services, or provide any personal information to us. We request that minors do not contact us or submit personal data. Parents or guardians should supervise the online activities of minors to ensure their personal information is not shared without consent.
COPPA Compliance: In alignment with the U.S. Children’s Online Privacy Protection Act (COPPA), if we become aware that we have inadvertently collected personal information from a child under 13 years of age without parental consent, we will take immediate steps to delete that information from our servers and records.
Teenagers 13-17: While COPPA covers children under 13, we also generally do not wish to collect data from anyone under 18. If you are between 13 and 17 years old, please do not use our Site without parental permission, and note that even with permission, our services are designed for adults. If we receive information from someone in this age range, we may ask for verification of parental consent or simply delete the data to err on the side of caution.
Recommendations for Parents: If you have a reason to believe that a minor has provided personal information to us, please contact us immediately so we can investigate and address the issue. We are happy to work with parents and guardians to ensure children’s privacy is protected.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will:

Post the updated Privacy Policy on this page with a new “Last Updated” date. The latest version will always be available at TheCatherineWhitmore.com (or a directly linked “Privacy Policy” page on our Site).
In the case of significant changes (especially any that materially affect how we use your personal information), we will provide a more prominent notice. This may include a notification on our homepage or a direct communication to you if you have provided contact information (such as via email or text message, if appropriate).
If required by law, we will also obtain your consent for major changes that affect your rights. For example, if we ever plan to use personal data for a new purpose not originally collected for, we may need to get your opt-in consent before doing so.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Site or our services after any changes to this Policy constitutes your acceptance of the updated terms.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to contact us. We are here to help and will respond as promptly as possible.

Contact Person: Catherine Hannah Whitmore (Privacy Officer)
Email: privacy@thecatherinewhitmore.com
Phone: [Phone Number] (if you prefer to call or text for privacy inquiries)
Mailing Address: [Attn: Privacy – Catherine Whitmore, Address, City, State, Zip, USA] (if you wish to send a written request)

You may also reach out via the contact form on our Site, or reply “HELP” to any of our text messages for assistance with opting out or questions about the text service.

Please use the subject line “Privacy Inquiry” in your communications when possible, so we can route your request to the appropriate personnel.

We value your privacy and will do our best to address any issues. If you contact us to exercise your data protection rights, we will guide you through the verification process (if applicable) and fulfill your request in accordance with applicable laws.

Thank you for trusting TheCatherineWhitmore.com. We are committed to protecting your personal information and upholding your privacy rights as you explore intimacy coaching, education, and related services with us.