Privacy Policy

1. Introduction

Dr. Marcus Boudreaux ("we," "us," or "our") operates drmarcusb.com and the Just Add Value Leadership System platform (collectively, the "Services"). This Privacy Policy describes how we collect, use, share, and protect your personal information, and explains your rights and choices with respect to that information.

By accessing or using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

2. Information We Collect

A. Information You Provide Directly

• Name, email address, and phone number
• Mailing address and business/organization details
• Payment information (processed via Stripe — we do not store full card numbers)
• Responses to leadership assessments, coaching questionnaires, and intake forms
• Messages you send us via contact forms, email, or SMS

B. Information Collected Automatically

• Device & Usage Data: IP address, browser type and version, operating system, referring URL, pages viewed, and time spent on pages
• Cookies & Tracking Technologies: We use cookies, web beacons, and similar technologies to remember preferences, analyze traffic, and improve the Services (see Section 6)
• Analytics Data: We use Google Analytics and similar tools to understand how visitors interact with our website. This data is aggregated and de-identified where possible.

C. Information from Third Parties

• Social platforms (e.g., LinkedIn, Facebook) when you connect or interact with us through those platforms
• CRM and scheduling tools (e.g., GoHighLevel, Zoho CRM, Calendly) that facilitate appointment booking or lead capture

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and service requests
• Provide leadership training, coaching, and consulting services
• Deliver and administer leadership assessments and report results
• Send appointment confirmations, reminders, and follow-up communications
• Process payments and manage billing (via Stripe)
• Send promotional or marketing communications — only with your explicit prior consent
• Improve, personalize, and optimize our website and services
• Comply with legal obligations and enforce our Terms of Service
• Detect, prevent, and address fraud or security issues

4. SMS / Text Messaging Communications

By providing your mobile phone number and checking the opt-in box on any form, you expressly consent to receive SMS/text messages from Dr. Marcus Boudreaux related to:

• Appointment confirmations and scheduling reminders
• Follow-up communications related to services you requested
• Promotional or marketing messages (only when you separately opt in)

5. Email Communications

We may send transactional emails (appointment confirmations, receipts, assessment results) and, with your consent, marketing emails. All marketing emails include a clear unsubscribe link. You may opt out at any time by clicking "Unsubscribe" in any email or by contacting us at info@drmarcusb.com.

6. Cookies & Tracking Technologies

We use the following types of cookies and tracking technologies:

• Essential Cookies: Required for basic site functionality (e.g., session management). Cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics). These may be disabled via your browser settings or Google's opt-out tools.
• Preference Cookies: Remember your settings and preferences to improve your experience.
• Marketing Cookies: Used to deliver relevant advertisements on third-party platforms (e.g., Facebook Pixel, LinkedIn Insight Tag). We only deploy these where permitted and with appropriate disclosures.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our site. For EU/EEA visitors, we obtain consent before placing non-essential cookies.

7. Data Sharing & Third-Party Services

We do not sell your personal information. We may share your information only in the following limited circumstances:

• Service Providers: Trusted vendors who help us operate our business (e.g., Stripe for payments, Google Analytics for analytics, GoHighLevel/Zoho for CRM, Calendly/scheduling tools, email delivery platforms). These providers are contractually obligated to protect your data and may only use it to provide their services to us.
• Social & API Platforms: When you interact with our services through LinkedIn, Facebook, Instagram, or other platforms, those platforms' own privacy policies apply to information collected on their side. We use platform APIs solely to post content and analyze engagement — not to profile individual users.
• Legal Requirements: We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Dr. Marcus Boudreaux, our clients, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

8. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include TLS/SSL encryption for data in transit, access controls, and use of reputable, security-audited service providers. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. In general:

• Client records: Retained for up to 7 years after the last service interaction (for legal and tax compliance)
• Marketing contact data: Retained until you opt out or request deletion
• Website analytics data: Retained in aggregated/anonymized form indefinitely; identifiable data retained for up to 26 months
• SMS opt-in consent records: Retained for a minimum of 4 years from the date of opt-in to comply with TCPA and carrier requirements

10. Children's Privacy (COPPA)

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have inadvertently collected information from a child under 13, please contact us immediately at info@drmarcusb.com and we will take prompt steps to delete that information.

11. Your Privacy Rights

All Users

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention obligations)
• Opt out of marketing emails and SMS at any time

California Residents (CCPA/CPRA)

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

EU / EEA Residents (GDPR)

• Right of Access (Art. 15): Obtain a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate data
• Right to Erasure (Art. 17): Request deletion ("right to be forgotten")
• Right to Restriction (Art. 18): Restrict how we process your data
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing
• Right to Lodge a Complaint: File a complaint with your local supervisory authority (Data Protection Authority)

12. International Data Transfers

Our Services are operated in the United States. If you access our Services from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. By using our Services, you consent to such transfer. We take appropriate safeguards to ensure your data receives an adequate level of protection wherever it is processed, including use of Standard Contractual Clauses where required under GDPR.

13. Do Not Sell or Share My Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We do not share your personal information with third parties for cross-context behavioral advertising purposes. Your mobile phone number and SMS opt-in data will never be sold or shared with any third party for marketing purposes.

14. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or partner services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access through our site.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of our Services after any update constitutes your acceptance of the revised policy.