Close Menu

    Privacy Policy

    Last Updated: June 16, 2026

    1. Introduction

    Nicole Williams Collective (“NWC,” “we,” “us,” or “our”) is committed to protecting your privacy and the confidentiality of your personal and business information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage with our services, or communicate with us.

    By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our site and services.

    This policy applies to all visitors, prospective clients, active clients, subscribers, event registrants, and anyone else who interacts with NWC through our website, platforms, or direct communications.

    2. Who We Are

    Nicole Williams Collective is a management consulting and marketing communications firm based in Lawrenceville, Georgia. We provide Fractional COO, Fractional CMO, AI Implementation, Coaching Consulting, Training & Facilitation, AI & EQ Intelligence, A La Carte Project-Based Services, and Notary Public Services to leaders and business owners nationwide.

    Because we operate as a trusted operational and strategic partner to our clients (including Fractional COO and CMO engagements where we work inside your business) we take the handling of your information, credentials, and business data with the highest level of seriousness and care.

    3. Information We Collect

    a. Information You Provide Directly

    • Contact Information: Name, email address, phone number, business name, and title — provided through contact forms, intake forms, or direct email.
    • Service Inquiries & Applications: Details about your business, goals, challenges, and operating environment submitted through discovery calls, coaching applications, or proposal requests.
    • Payment Information: Billing details processed through our third-party payment processors (Stripe, QuickBooks). We do not store full payment card numbers on our servers.
    • Client Credentials & Access:  During active client engagements (particularly Fractional COO, Fractional CMO, and project-based services) you may share platform logins, account credentials, or administrative access with NWC to facilitate work on your behalf. See Section 11 for how we handle and protect this information.
    • Communications: Messages, emails, notes, and feedback you send to us directly.
    • Event & Training Registrations, information provided when registering for workshops, the AI Accelerator, facilitation sessions, or speaking events.

    b. Information Collected Automatically

    • Usage Data: Pages visited, time spent on pages, referring URLs, browser type, device type, and IP address — collected via cookies and analytics tools.
    • Cookies & Tracking Technologies: We use cookies and similar technologies to improve site functionality and understand user behavior. You may control cookie settings through your browser.

    c. Information from Third Parties

    • Referrals: Information shared about you by colleagues, clients, or partners who refer you to NWC.
    • Social Media: If you interact with our content on LinkedIn, Instagram, or other platforms, we may receive basic profile information per those platforms’ privacy policies.

    4. How We Use Your Information

    We use the information we collect to:

    • Respond to inquiries and deliver our consulting, coaching, facilitation, and project-based services
    • Process payments and manage client accounts, contracts, and deliverables
    • Send onboarding materials, proposals, and service-related communications
    • Access and manage client platforms and accounts authorized for our use during active engagements
    • Send newsletters, resources, or marketing communications (with your consent; you may opt out at any time)
    • Improve our website, service offerings, and client experience
    • Fulfill legal obligations and enforce our agreements
    • Protect against fraud, unauthorized activity, and data breaches

    We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Ever.

    5. Legal Bases for Processing (Where Applicable)

    Where required by applicable law (including GDPR for European users), we process your personal data on the following legal bases:

    • Performance of a contract: To deliver services you have engaged us to provide.
    • Legitimate interests: To operate and improve our business, communicate with prospective clients, protect our rights and the rights of our clients, and secure our systems.
    • Consent: For email/text marketing and newsletters; you may withdraw consent at any time.
    • Legal obligation: To comply with applicable laws, regulations, and court orders.

    6. How We Share Your Information

    We do not sell your personal information. We may share it in the following limited circumstances:

    • Service Providers: Third-party vendors who assist us in operating our business (e.g., email platforms, scheduling tools, payment processors, accounting software, password management). These parties are contractually required to protect your data and may only use it to perform services on our behalf.
    • Legal Requirements: If required to do so by law, court order, subpoena, or governmental authority.
    • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before any such transfer takes effect.
    • Insurance and Risk Management: We may share information with our insurance carriers (Errors & Omissions, Data & Cyber) solely to the extent required to process a claim or fulfill coverage obligations.
    • With Your Consent: When you have given explicit permission to share your information with a named third party.

    Current third-party tools we may use include, but are not limited to: Google Workspace, Stripe, QuickBooks, SuiteDash, Constant Contact or similar email platforms, Zoom, Notion, and Keeper Security (password management). Each vendor’s own privacy policy governs their handling of any data shared with them.

    7. Data Retention

    We retain your personal information for as long as necessary to: fulfill the purposes outlined in this policy; maintain accurate business and financial records; comply with legal, tax, and accounting obligations; resolve disputes and enforce our agreements; and support potential insurance claims.

    For active clients, we retain engagement records, communications, and related data for a minimum of five (5) years following the end of the engagement. For prospective clients and general contacts, we retain inquiry information for up to two (2) years unless you request earlier deletion.

    Client credentials and access information are removed from our secure vault within thirty (30) days of engagement termination, unless retention is required for a pending dispute or legal obligation.

    When information is no longer needed, we securely delete or anonymize it using industry-standard deletion practices.

    8. Your Rights & Choices

    Depending on your location, you may have the right to:

    • Access: Request a copy of the personal information we hold about you.
    • Correct: Request correction of inaccurate or incomplete information.
    • Delete: Request deletion of your personal data (“right to be forgotten”), subject to legal and contractual obligations.
    • Opt Out: Unsubscribe from marketing communications at any time by clicking “unsubscribe” in any email or contacting us directly.
    • Data Portability: Receive a copy of your data in a structured, machine-readable format.
    • Object or Restrict: Object to or restrict certain processing of your personal data.
    • Revoke Credential Access: Request the revocation and deletion of any credentials or platform access you have shared with NWC at any time.

    To exercise any of these rights, contact us at: hello@nicolewilliamspr.com. We will respond within 30 days.

    9. Cookies

    Our website uses cookies to enhance your browsing experience. Cookies are small data files stored on your device. You can set your browser to refuse cookies; however, some features of our website may not function properly as a result.

    Types of cookies we may use:

    • Essential cookies: Necessary for the website to function.
    • Analytics cookies: Help us understand how visitors use our site (e.g., Google Analytics).
    • Marketing cookies: Used to deliver relevant content and track engagement.

    You may opt out of Google Analytics tracking using the Google Analytics Opt-Out Browser Add-on or by adjusting your browser settings.

    10. Email Communications

    If you subscribe to our newsletters (including Success Redefined) or opt in to receive resources and updates, we will use your email address to send those communications. Every marketing email includes an unsubscribe link. You may also opt out by emailing us directly.

    Transactional emails related to active client engagements (contracts, invoices, deliverables, onboarding materials) are not subject to opt-out while a service relationship is active.

    11. Security & Data Protection

    We take the protection of your personal and business information seriously. NWC implements a layered security approach combining technical safeguards, operational controls, and institutional insurance coverage to protect the data you entrust to us.

    a. Technical Safeguards

    • Encrypted Credential Storage (Keeper Security): All client credentials platform logins, and sensitive access information shared with NWC are stored exclusively in Keeper Security – a zero-knowledge, end-to-end encrypted password management vault. Keeper Security uses 256-bit AES encryption at rest and in transit. No credentials are stored in plain text, in email, in shared documents, or on unprotected devices. Access to the vault is restricted to authorized NWC personnel on a need-to-know basis, protected by multi-factor authentication (MFA).
    • Access Controls: Access to client data, credentials, and systems is granted on a least-privilege basis. Team members and contractors are only granted the minimum level of access required to perform their specific tasks.
    • Multi-Factor Authentication (MFA): MFA is required for NWC team access to client platforms, internal systems, and the Keeper Security vault.
    • Encrypted Communications: Client engagements involving sensitive business data are conducted through encrypted channels where practicable.
    • Secure File Storage: Client documents, deliverables, and records are stored in encrypted cloud environments (Google Workspace with enterprise security settings) with restricted access.

    b. Operational Controls

    • Client credentials are stored only in Keeper Security, never in email drafts, shared spreadsheets, chat messages, or unsecured notes
    • Access to client accounts and platforms is used solely to perform authorized work within the scope of the signed engagement
    • Team members and contractors undergo access reviews at the start and close of each engagement
    • Credentials are revoked and deleted from NWC systems within thirty (30) days of engagement termination
    • NWC maintains an internal data handling policy reviewed annually

    c. Insurance Coverage

    In addition to our technical and operational safeguards, NWC carries the following professional insurance coverage as part of our commitment to protecting both our clients and our business:

    • Errors & Omissions (E&O) Insurance: Covers claims arising from professional services, advice, or work product delivered by NWC that results in financial harm to a client due to alleged errors, omissions, or failure to perform.
    • Data & Cyber Liability Insurance: Covers costs associated with data breaches, cyber incidents, unauthorized access to client data, and associated legal, notification, and recovery expenses. This coverage applies to incidents involving data entrusted to NWC by clients and protects both NWC and affected parties.

    The existence of insurance coverage does not limit or replace our commitment to preventing incidents through the technical and operational safeguards described above. Both layers of protection (prevention and response) are in place.

    d. Breach Notification

    In the event of a data security incident or breach that involves your personal information or client data, NWC will:

    • Notify affected individuals or clients as required by applicable law (typically within 72 hours of becoming aware of a breach under applicable state and federal requirements)
    • Cooperate with our Data & Cyber insurance carrier to manage the incident response, including forensic investigation and notification services where required
    • Take immediate steps to contain the breach and prevent further unauthorized access
    • Document the incident and the response for regulatory and insurance purposes

    No method of electronic transmission or storage is 100% secure. While we implement the safeguards described above, we cannot guarantee absolute security of your information. We can guarantee that we take every reasonable precaution.

    12. Client Credential & Access Handling Policy

    Because NWC often operates as an embedded operational or marketing leader within client businesses (particularly in Fractional COO and Fractional CMO engagements) clients may share platform credentials, administrative account access, or sensitive business logins with NWC to facilitate work.

    The following policies govern how NWC handles any credentials or access shared by clients:

    • Vault-Only Storage: All credentials are stored exclusively in Keeper Security. No credentials are retained in email, chat, notes, spreadsheets, or any other medium.
    • Purpose Limitation: Credentials and access are used solely to perform authorized work as defined in the signed client services agreement. NWC does not use client credentials for any purpose outside the scope of the engagement.
    • No Unauthorized Disclosure: Client credentials are never shared with third parties, subcontractors, or other clients except as explicitly authorized in writing by the client.
    • Post-Engagement Deletion: All client credentials and access records are deleted from NWC’s systems within thirty (30) days of engagement termination.
    • Incident Reporting: If NWC becomes aware of any unauthorized access to a client platform or account, whether originating from NWC’s systems or otherwise, NWC will notify the client immediately and cooperate in remediation.

    Clients are encouraged to use unique, engagement-specific credentials or limited-permission accounts where possible, and to revoke NWC’s access directly upon engagement termination as an additional control.

    13. Children’s Privacy

    Our website and services are intended for adults and business professionals. We do not knowingly collect personal information from children under the age of 13 (or under 16 where required by applicable law). If we become aware that we have collected such information, we will promptly delete it. If you believe we have inadvertently collected information from a minor, please contact us immediately.

    14. Third-Party Links & Platforms

    Our website may contain links to third-party websites, tools, or resources. We are not responsible for the privacy practices, security measures, or content of those sites. We encourage you to review the privacy policies of any third-party site you visit before submitting personal information.

    This includes, but is not limited to, our social media platforms (LinkedIn, Instagram, Facebook, X/Twitter), payment processors (Stripe, QuickBooks/Intuit), scheduling tools, and client portal software. Each of these operates under its own independent privacy policy.

    15. California Privacy Rights (CCPA/CPRA)

    If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

    • Know what personal information we collect, use, disclose, or share, and for what purpose
    • Access and receive a copy of your personal information
    • Request correction of inaccurate personal information
    • Request deletion of your personal information, subject to certain exceptions
    • Opt out of the sale or sharing of your personal information – NWC does not sell or share personal information for cross-context behavioral advertising
    • Limit the use of sensitive personal information – NWC uses sensitive information only to provide the services you requested
    • Non-discrimination for exercising your CCPA/CPRA rights

    To submit a California privacy request, contact us at: hello@nicolewilliamspr.com. We will respond within 45 days as required by law.

    16. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or insurance obligations. When we do, we will revise the “Last Updated” date at the top of this page.

    If changes are material (particularly those affecting how we handle client credentials, data security, or insurance coverage) we will provide notice via email to active clients and/or a prominent notice on the Site. Your continued use of our website and services after changes are posted constitutes your acceptance of the revised policy.

    We recommend reviewing this policy periodically to stay informed of how we protect your information.

    17. Limitation of Liability for Data Incidents

    To the fullest extent permitted by applicable law, NWC’s liability for any data security incident or breach shall be limited to the greater of: (a) the amount paid by you to NWC in the three (3) months immediately preceding the incident, or (b) coverage available under NWC’s applicable Data & Cyber Liability insurance policy.

    This limitation applies regardless of the form of the claim (contract, tort, statute, or otherwise), and even if NWC has been advised of the possibility of such damages.

    Nothing in this section limits NWC’s obligation to provide required breach notifications or to cooperate with regulatory investigations as required by law.

    18. Contact Us

    If you have questions, concerns, requests, or wish to exercise your rights under this Privacy Policy, please contact us:

    Nicole Williams Collective

    • Lawrenceville, Georgia
    • hello@nicolewilliamspr.com
    • www.nicolewilliamspr.com