Privacy Policy

Effective Date: April 20, 2026 Last Updated: April 20, 2026

This Privacy Policy applies to the following websites owned and operated by Denise DiGrigoli and/or D3 DiGrigoli ("Company," "we," "us," or "our"):

• www.DeniseDiGrigoli.com — Strategic Advisory, Speaking & Engagements, MAV's Coffee Clarity™
• www.D3DiGrigoli.com — Experiential Design for Exhibits & Events

We are committed to protecting your privacy and handling your personal information with transparency, integrity, and care. This Policy explains what information we collect, how we use it, and your rights under applicable law — including the Connecticut Data Privacy Act (CTDPA), Conn. Gen. Stat. § 42-515 et seq., and applicable U.S. federal privacy laws.

Please read this Policy carefully. By using our websites, you acknowledge that you have read and understood this Privacy Policy.

We collect only the information necessary to respond to your inquiries and provide our services. We collect information in two ways:

When you submit a contact form, inquiry, or request on either website, you may provide:

• Full name
• Email address
• Phone number
• Company name or affiliation (if provided)
• The content of your message or inquiry

We do not collect payment information through our websites. All service billing is handled separately through written agreements.

When you visit our websites, certain technical data may be collected automatically through cookies and analytics tools, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring URLs (how you found our site)
• General geographic location (city/region level only)

This data is aggregated and used solely to understand how visitors use our websites and to improve the user experience. It is not used to identify individual visitors.

We use the information we collect for the following purposes:

• To respond to your inquiries, questions, and service requests
• To communicate with you about our services, speaking engagements, podcast collaborations, or events
• To improve our websites and user experience
• To comply with applicable legal obligations
• To protect the security and integrity of our websites

We do not use your personal information for automated decision-making or profiling.

We do not sell, rent, lease, share, or trade your personal information to any third party for monetary or other valuable consideration.

This applies to both websites. We are not in the business of monetizing user data, and we never have been.

This commitment is consistent with the Connecticut Data Privacy Act (CTDPA), which grants Connecticut residents the right to opt out of the sale of personal data. Because we do not sell data, no opt-out mechanism is required — but we state this explicitly for your peace of mind.

We do not share your personal information except in the following limited circumstances:

• Service Providers: We may share information with trusted third-party technology providers who help us operate our websites (e.g., our website hosting platform, GoDaddy; analytics tools). These providers are contractually prohibited from using your data for any purpose other than providing services to us.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the unlikely event of a business sale, merger, or acquisition, your information may be transferred as part of that transaction. You will be notified if your data becomes subject to a materially different privacy policy.

We do not share your information with advertisers, data brokers, or marketing networks.

Our websites use cookies — small text files stored on your device — to analyze traffic and improve your experience. We use:

• Essential cookies — necessary for basic website functionality
• Analytics cookies — used to understand how visitors interact with our sites (e.g., pages visited, time on site). This data is aggregated and anonymized.

We do not use advertising cookies, tracking pixels, or third-party behavioral advertising tools.

Your Choices: When you first visit our websites, you will see a cookie notice. You may decline non-essential (analytics) cookies at that time. You may also manage or delete cookies through your browser settings at any time. Note that declining cookies may affect certain website functionality.

Our contact forms are protected by Google reCAPTCHA. By using these forms, you agree to Google's Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms). Google may collect and process information about your use of the reCAPTCHA service.

Our websites contain links to and integrations with third-party platforms, including Apple Podcasts, Spotify, iHeart Radio, SoundCloud, YouTube, Podbean, and others where MAV's Coffee Clarity™ is distributed.

We are not responsible for the privacy practices of any third-party websites or platforms. We encourage you to review the privacy policies of any third-party site you visit. Links do not constitute endorsements.

We retain personal information you submit through our contact forms only as long as necessary to respond to your inquiry and maintain records of our communications. We do not maintain ongoing marketing databases or mailing lists without your explicit consent.

Automatically collected analytics data is retained in aggregated, anonymized form and does not identify individual users.

We take reasonable and appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our websites are hosted on GoDaddy's secure platform, which employs industry-standard security protocols.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Our websites are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. This is consistent with the federal Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

If we become aware that we have inadvertently collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has submitted information through our websites, please contact us immediately.

If you are a Connecticut resident, the Connecticut Data Privacy Act (CTDPA), Conn. Gen. Stat. § 42-515 et seq., grants you the following rights with respect to your personal data:

• Right to Access: You have the right to confirm whether we process your personal data and to access that data.
• Right to Correction: You have the right to correct inaccuracies in your personal data.
• Right to Deletion: You have the right to request deletion of personal data you have provided to us.
• Right to Data Portability: You have the right to obtain a copy of your personal data in a portable and readily usable format.
• Right to Opt Out: You have the right to opt out of the processing of your personal data for purposes of (a) targeted advertising, (b) the sale of personal data, or (c) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in any of these activities.
• Right to Appeal: If we decline to take action on your request, you have the right to appeal our decision.

To exercise any of these rights, please contact us using the information in Section 15 below. We will respond to verified requests within 45 days, as required by the CTDPA, and may extend this period by an additional 45 days when reasonably necessary with prior notice.

We will not discriminate against you for exercising any of your privacy rights.

In addition to Connecticut law, the following U.S. federal laws inform our privacy practices:

The Federal Trade Commission has authority over unfair or deceptive acts relating to privacy. We are committed to transparency and will never make deceptive claims about how we handle your data.

If we send commercial email communications, we comply with the CAN-SPAM Act by clearly identifying ourselves, not using deceptive subject lines, and providing a clear mechanism to opt out of future communications. We will honor opt-out requests promptly.

As noted in Section 10, we do not knowingly collect information from children under 13.

We do not intercept or unlawfully access electronic communications.

Some browsers offer a "Do Not Track" (DNT) feature. Our websites do not currently alter their data collection practices in response to DNT signals, as there is no universally accepted standard for how to interpret them. We will continue to monitor developments in this area.

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of our websites after any changes constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Denise DiGrigoli | D3 DiGrigoli📧 Via the contact forms at:

• www.DeniseDiGrigoli.com/general-contact-form
• www.D3DiGrigoli.com

Studios located in Fairfield County, CT & the Berkshires, Western MA

We are committed to resolving any privacy concerns promptly and respectfully.

© 2026 Denise DiGrigoli & D3 DiGrigoli. All Rights Reserved.