Consumer Health Data Privacy Policy

Version 2026-10-28 · Last updated: October 28, 2026

This policy explains how Connection Canyon LLC, 6650 Rivers Ave., Suite 100, Charleston, SC 29406 (“we”, “us”), handles “consumer health data” as defined by the Washington My Health My Data Act, Nevada law and similar state laws. We apply it to everyone, wherever you live. Our general Privacy Policy covers all other information.

We offer parent coaching, not health care. Still, when you tell us about your child’s behavior, sensory needs, development or a diagnosis – or about your own wellbeing – this can be health-related information. We treat it with special care.

1. What health-related information we collect

Information you choose to share with Nancy in a free call, a paid session or the Zoom chat of a Write & Chat Session, for example about your child’s behavior, sensory needs, routines, development, a diagnosis, therapies, or your own stress and wellbeing.
Information you write in the contact form, in emails to us, or in posts in the members’ community.
What you show Nancy of your home during a Home Setup Session (not recorded), and the written suggestions she creates for you.
Short private notes Nancy may keep to prepare for your next session.
The fact that you signed up for a free resource, booked a session or bought a video about a particular topic (for example, an autism evaluation or sensory needs), because this could suggest something about your child’s needs.

Our sign-up, booking and payment forms don’t ask about your child’s health. We never collect precise location data and don’t use geofencing.

2. Where it comes from

Only from you: what you tell us, write to us, or show us. We don’t buy health data and don’t get it from other companies.

3. Why we use it

to send you the free resource you asked for,
to prepare and hold your call or session, answer your questions, and support you as a parent,
to create the written suggestions after a Home Setup Session,
to provide the video library and the members’ community you signed up for,
to keep the community safe and to meet our legal duties.

We use health-related information only to provide what you asked for. We don’t use it for advertising, we don’t build profiles from it, and we never sell it.

4. Who we share it with

We don’t share health-related information with other companies for their own purposes. We only use service providers (“processors”) that store or transmit it for us and may use it only on our behalf:

Kit (Kit, Inc.): our email list. It stores your email address and which free resource you asked for.
Zoom (Zoom Communications, Inc.): video calls and the chat of Write & Chat Sessions.
Cloudflare (Cloudflare, Inc.): hosting of our websites and storage of files such as Home Setup PDFs.
Supabase (Supabase, Inc.): our database with bookings, purchases, accounts and community posts.
Google Workspace (Google LLC): our email inbox, and Resend (Resend, Inc.): delivery of contact-form messages and emails.
Apple iCloud (Apple Inc.): Nancy’s work calendar, which shows the booked session type and your name.
Stripe (Stripe, Inc.): payments. Stripe sees which session or video you pay for, but no other health-related information.
The person who maintains our websites for us, under a duty of confidentiality, only as far as needed to keep the websites running.

We have no affiliates. We would share health-related information with anyone else only with your separate consent, or where the law requires it – for example, a report of suspected child abuse or neglect, a serious risk to someone’s safety, or a lawful court order (see our Session Terms, section 9).

5. Your consent

When you book a paid session, we ask for your consent in a separate checkbox, apart from the Session Terms, before the session takes place. When you sign up for a free resource, have a free call, send an email, use the contact form or post in the community, we use what you choose to share only because it is necessary to answer you or to provide what you asked for, and for nothing else.

You can withdraw your consent at any time by emailing us. After that, we won’t collect or use new health-related information about you, and we delete what we have, except what the law requires us to keep (see section 6).

6. How long we keep it

Nancy’s notes and your Home Setup PDF are kept only as long as you work with us or keep your account, and are deleted when you ask. Community posts stay until you delete them. Emails stay in our inbox as long as we need them to answer you. Your email address stays on our email list until you unsubscribe.

Some records we must keep even after a deletion request: invoices and booking records (which show the type of session or video you bought, but no notes about your child) as long as tax and accounting laws require, and the record of your consent for at least six years after your last session. Copies in backups and in our email provider’s delivery records are deleted automatically when they are overwritten, usually within 30 days.

7. Your rights

You have the right to:

Know and access: ask whether we collect, share or sell your consumer health data, get a copy of it, and get a list of all third parties and processors we shared it with, with their contact details.
Delete: have it deleted, including by our processors and from our archives and backups (see section 6 for what we must keep).
Withdraw consent: at any time, for the future.

To use these rights, email nancyschilling@connectioncanyon.com with the subject “Health data request”. We may ask you to confirm your identity, for example by replying from the email address you signed up with. We answer within 45 days. If we need more time, we tell you why and answer within another 45 days at the latest. Requests are free of charge (up to twice a year). We won’t treat you differently for using your rights.

8. If you disagree with our answer

If we turn down your request, you can appeal by replying to our answer with the subject “Appeal”. Nancy reviews the appeal personally and answers in writing within 45 days, with the reasons for her decision. If we deny your appeal, you can contact your state attorney general – for example, Washington residents at atg.wa.gov (opens in a new tab), Nevada residents at ag.nv.gov (opens in a new tab), and Connecticut residents at portal.ct.gov/ag (opens in a new tab).

9. Security

Only Nancy and the person who maintains our websites for us can access this information, and only as far as needed. We protect it with sign-in codes, encrypted connections, and access limits. We never see or store your card details.

10. Changes and contact

If we change this policy, we update the date above. We won’t use health-related information for a new purpose without your consent. Questions? Email nancyschilling@connectioncanyon.com.