Privacy Policy

1. Scope and coaching context

Heatherwell Coaching provides life coaching — a forward-focused, goal-oriented professional relationship. Our services are not medical care, psychotherapy, counseling, or mental health treatment.

• We are not a covered entity or business associate under HIPAA, and coaching communications are generally not protected health information (PHI) unless you voluntarily share health details.
• Do not use this website or coaching for emergencies. If you are in crisis, call 911 (U.S.) or your local emergency number, or contact the 988 Suicide & Crisis Lifeline (U.S.).
• By using our site or services, you confirm you are at least 18 years old (or the age of majority in your jurisdiction).

2. Information we collect

Information you provide

We may collect information you submit directly, including:

• Contact forms: name, email address, message content, and optional fields (e.g., form source/page).
• Newsletter signup: name and email address when you subscribe via our MailerLite-powered forms.
• Booking: name, email, and scheduling details collected through TidyCal when you schedule a discovery call or other appointment.
• Coaching relationship: information you choose to share during sessions, emails, or related communications (goals, challenges, boundaries, etc.).

Information collected automatically

When you visit our website, we and our service providers may automatically collect:

• Usage and device data: IP address, browser type, operating system, referring URLs, pages viewed, and approximate location derived from IP.
• Cookies and similar technologies: see Section 6 (Cookies and analytics).

3. How we use your information

We use information to:

• Respond to inquiries and contact form submissions.
• Deliver coaching services, scheduling, and client communications.
• Send newsletters and marketing emails you have opted into (you may unsubscribe anytime).
• Operate, maintain, and improve our website and user experience.
• Monitor site security, prevent fraud, and enforce our Terms of Service.
• Comply with legal obligations and resolve disputes.

4. Legal bases (where applicable)

Depending on your location, we process personal information based on: your consent (e.g., newsletter signup); performance of a contract or steps prior to entering a coaching agreement; our legitimate interests in operating and improving our business (balanced against your rights); and compliance with law.

5. How we share information

We do not sell your personal information. We may share information with trusted service providers who process data on our behalf, including:

• Hosting and infrastructure: Vercel (website hosting and related technical services).
• Email: Resend (delivery of contact form notifications and related transactional email).
• Newsletter: MailerLite (email list management and campaign delivery).
• Scheduling: TidyCal (appointment booking and calendar management).
• Analytics: Google Analytics (website usage measurement via Google tag / gtag).

These providers are authorized to use your information only as needed to perform services for us and are subject to their own privacy policies. We may also disclose information if required by law, court order, or governmental request, or to protect rights, safety, and property of Heatherwell Coaching, clients, or others.

6. Cookies and analytics

Our website uses Google Analytics 4 (measurement ID G-YJRWFC8MBM) to understand how visitors use the site. Google may set cookies or use similar technologies and process data according to Google's Privacy Policy.

You can limit analytics collection via browser settings, ad-blocking tools, or Google's opt-out tools. Disabling cookies may affect certain site features.

7. Data retention

We retain personal information only as long as necessary for the purposes described in this policy, including active coaching relationships, legal and accounting requirements, and reasonable backup periods. Contact and marketing data are retained until you request deletion or unsubscribe, subject to legal holds.

8. Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission over the Internet or electronic storage is 100% secure. Please avoid sending highly sensitive information (e.g., full medical records, Social Security numbers) through unsecured channels.

9. Your rights and choices

Depending on where you live, you may have rights to:

• Access, correct, or delete personal information we hold about you.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based.
• Opt out of marketing emails via unsubscribe links in each message.
• For California residents: know categories of data collected, request deletion, and learn whether we "sell" or "share" personal information (we do not sell personal information as defined under the CCPA/CPRA).

To exercise rights, contact us using the information in Section 12. We may need to verify your identity before responding. You may also lodge a complaint with a supervisory authority in your jurisdiction.

10. Children's privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it promptly.

11. International visitors

Our business is based in the United States. If you access the site from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries where our providers operate, which may have different data protection laws than your country.

12. Contact us

For privacy questions, requests, or concerns:

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be posted on this page. Continued use of the website after changes constitutes acceptance of the updated policy.