Privacy Policy.

Updated July 13, 2026

This Privacy Policy explains how The Nour Group, Inc. (“the Nour Group,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit davidnour.com (the “Site”), contact us, or subscribe to our updates. It also describes the choices and rights you have over your information.

The Nour Group is based in the State of Georgia, United States, and works with clients and audiences around the world. This policy is designed to provide the notices required by applicable Georgia and United States law and, where they apply to our processing, the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and comparable privacy laws. Where an applicable law gives you stronger rights, that law controls.

Who Controls Your Data

The Nour Group, Inc. is the controller of the personal information described here. If you have a question or want to exercise a privacy right, use our contact form or email info@nourgroup.com. For formal data protection requests, please use the subject “Privacy Request” so it reaches the right person.

Information We Collect

We collect only what we need to run the Site and respond to you.

• Information you give us. When you submit an inquiry or booking form, we collect your name, business email, company or organization, optional telephone number, and the details you share about your event, engagement, or question. When you subscribe to insights, we collect your email address. We do not ask for special-category or sensitive personal information.
• Information collected automatically. Our hosting provider processes technical data needed to deliver and secure the Site, which may include an IP address, browser and device information, and request logs. Only after you consent, our analytics providers may also collect general location inferred from an IP address, pages viewed, referring pages, and interactions with the Site.

How We Use Your Information

• Respond to your inquiry and coordinate a possible speaking, advisory, or coaching engagement.
• Send the insights or updates you subscribed to, until you unsubscribe.
• Operate, secure, maintain, and improve the Site.
• Comply with legal obligations and enforce our terms.

We do not use your information for automated decisions that produce legal or similarly significant effects, and we do not sell your personal information.

Legal Bases for EU and UK Visitors

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract or pre-contract steps: to respond to and manage an inquiry or engagement.
• Consent: for email updates and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests: to secure, maintain, and prevent misuse of the Site, balanced against your rights.
• Legal obligation: where we must retain or disclose information to comply with the law.

Cookies and Similar Technologies

We use strictly necessary cookies and local storage to run the Site. With your consent, we also use Google Analytics 4 and Microsoft Clarity to measure how the Site is used and to improve it. We ask through a cookie banner before setting any non-essential cookies, and no analytics run until you accept. You can change or withdraw your choice at any time using the “Cookie Preferences” link in the footer. When you withdraw analytics consent, we signal that withdrawal to Google and Microsoft and remove the analytics cookies available to the Site; you may also clear cookies and local storage in your browser.

How We Share Information

We do not sell personal information or share it for cross-context behavioral advertising. We disclose information only to providers that help us operate the Site and respond to you, and only for those purposes. These include:

• Vercel, our hosting and content-delivery provider.
• GoHighLevel, our customer relationship and email platform, which stores inquiries or subscriptions so our team can respond.
• Google Analytics 4 and Microsoft Clarity, used only after consent for our internal Site analytics, not advertising.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer. Providers are permitted to use personal information only as needed to perform services for us, subject to their contracts and law.

International Data Transfers

We are based in the United States, and our providers may process information in the United States and other countries. When we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland and a safeguard is required, we use an available lawful mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK Addendum or International Data Transfer Agreement, or another valid safeguard provided by the relevant service provider.

How Long We Keep Information

We generally keep inquiry information for up to 24 months after our last substantive interaction, unless an engagement begins or a longer period is required for legal, accounting, dispute, or security purposes. We keep subscriber information until you unsubscribe, then retain only the minimum suppression record needed to honor that request. We configure Google Analytics user-level and event data retention for no more than 14 months; Microsoft Clarity retains recordings for 30 days and aggregated interaction data for up to 13 months under its published service terms. Hosting and security logs are kept only as long as reasonably needed to operate and protect the Site. At the end of the applicable period, information is deleted or de-identified.

How We Protect Information

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Privacy Rights

Depending on where you live and whether a law applies, you may have some or all of the following rights.

EU, UK, and similar jurisdictions. You may request access, correction, deletion, or portability; object to or restrict certain processing; and withdraw consent. You may also complain to your local data protection authority, including the Information Commissioner’s Office in the UK.

Georgia, California, and other US states with privacy laws. You may have the right to know or access personal information, correct it, delete it, obtain a portable copy, or opt out of sale, targeted advertising, or certain profiling. Some states also provide an appeal right and protection from discrimination. We do not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information for purposes that require a right to limit.

To exercise a right, use our contact form or email info@nourgroup.com with the subject “Privacy Request.” We will verify your request and respond within the time the applicable law allows. This is generally one month under EU or UK law or 45 days under many US state laws, with an extension where permitted. We do not charge except where the law allows. An authorized agent may act for you where permitted, subject to verification.

Children’s Privacy

The Site is intended for business professionals and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided information, contact us and we will investigate and delete it where appropriate.

Third-Party Links

The Site links to third-party sites, such as booking bureaus, publishers, and social platforms. Their privacy practices are their own, and we encourage you to review their policies.

Changes to This Policy

We may update this policy to reflect changes in our practices or the law. When we do, we will revise the date above and, where appropriate, provide a more prominent notice.

Contact Us

For a privacy question or request, use our contact form or email info@nourgroup.com.