Privacy Policy

Last Updated: March 1, 2025

TLDR: This summary is provided for convenience; please review the full Privacy Policy for detailed information. I collect and use your personal information to provide services, improve user experience, and for marketing. I protect your data with security measures and do not sell your data to third parties. You have rights to access, correct, and delete your data. I comply with privacy laws like GDPR and CCPA, and any updates to this policy will be posted here. Contact me at heythere@itscourtneyhart.com with any questions.

Personal Information I Collect

I collect personal information from my users in various ways, including when you:

  • Subscribe to any of my newsletters (Name, Email)

  • Register for services or events (Name, Email, Phone Number, Payment Information)

  • Make purchases (Payment Information through my payment processors like Stripe)

  • I may also automatically collect certain information when you visit my website, such as IP addresses and cookies, to enhance your user experience. I use third-party services like Squarespace, Stripe, and MailChimp, ConvertKit, Podia, and Substack which may also collect this information.

How I Use Your Information

I use your personal information to:

  • Provide services

  • Improve user experience

  • Conduct marketing activities

  • Analyze site traffic

  • I ensure that your data is handled securely and only used for the purposes specified.

Data Security

I implement a variety of security measures, including encryption and secure server access, to maintain the safety of your personal information. Payment data is handled in compliance with PCI-DSS standards. I also regularly monitor for potential vulnerabilities to protect your information.

Website Security

I take reasonable steps to protect the website from security breaches and attacks, including using secure hosting services, SSL certificates, and regular security audits.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyze site traffic. For more details, please refer to my Cookie Policy.

Third-Party Sharing

I use third-party services (e.g., Stripe, ConvertKit, and Squarespace) to process payments and manage my website and newsletter. These providers may transfer data internationally and use mechanisms like Standard Contractual Clauses (SCCs) to comply with GDPR and other data protection laws. I do not sell your data to third parties.

Third-Party Websites and Social Media

Our website may contain links to third-party websites, including social media platforms. I am not responsible for the privacy practices or content of these third parties. Please review their privacy policies before interacting with these platforms.

Data Collected from Minors

Our services are not targeted at minors, and I do not knowingly collect personal information from individuals under 18. If minors are involved in certain services, such as family classes or mindfulness lessons, their data may be collected with parental consent through a waiver or registration form. Parents can request the deletion of their child’s data by contacting us.

Retention Period

I retain personal data as follows:

  • Newsletter Subscribers: Data is retained until the user unsubscribes.

  • Customer Information: Data is retained as long as necessary to fulfill the purposes outlined in this policy (e.g., billing, tax obligations).

  • Project Data: Data is retained only for the duration of the project or until requested otherwise by the client.

User Rights

Depending on your location, you may have specific rights under privacy laws, such as the right to:

  • Access Your Data: Request a copy of the personal information I hold about you.

  • Correct Your Data: Request corrections to any inaccurate personal information.

  • Delete Your Data: Request the deletion of your personal information.

  • Opt-Out of Marketing: Opt-out of receiving marketing communications.

You can exercise these rights by contacting me at heythere@itscourtneyhart.com.

Do Not Track Signals

I currently do not respond to Do Not Track (DNT) signals due to the lack of a uniform technology standard for recognizing and implementing these signals. If a standard for online tracking is adopted that I must follow, I will inform you in an updated version of this policy.

Specific Rights for U.S. Residents

Residents of certain states, like California, may have specific rights regarding their personal information, including:

  • The right to know what personal information is collected.

  • The right to request the deletion of personal information.

  • The right to opt-out of the sale of personal information.

For more details, visit the relevant state privacy websites or contact us.

Legal Basis for Processing Personal Information (for GDPR)

I process your personal information based on legitimate interests, consent, or other legal bases as required by GDPR for my users in the European Union. If data is transferred internationally, I ensure compliance through mechanisms like Standard Contractual Clauses (SCCs).

International Data Transfers

If I transfer your data internationally, I ensure that adequate protections are in place to comply with privacy laws. This includes using services that comply with GDPR standards for users within the European Union and other applicable data protection laws.

Legal Compliance

I comply with all applicable laws and regulations governing my business operations, including but not limited to data protection laws, consumer protection laws, and any other relevant legal requirements.

Dispute Resolution

Mediation: In the event of any dispute, controversy, or claim arising out of or relating to this Privacy policy, the parties agree to first attempt to resolve the issue through mediation. The mediation will be conducted by a mediator mutually agreed upon by both parties. Each party will bear its own costs of mediation, and the costs of the mediator will be shared equally.

Arbitration: If the dispute cannot be resolved through mediation within 30 days, the parties agree to submit the dispute to binding arbitration. The arbitration will be conducted in accordance with the rules of Judicial Arbitration and Mediation Services (JAMS) and will take place in Baltimore, Maryland. The arbitrator’s decision shall be final and binding on both parties. Each party will bear its own costs of arbitration, and the costs of the arbitrator will be shared equally.

Jurisdiction and Venue: Any legal action or proceeding relating to this Privacy policy shall be brought exclusively in the courts of Baltimore, Maryland. The parties consent to the jurisdiction of such courts and waive any objection to the convenience of this forum.

Changes to This Policy

I may update this Disclaimer policy from time to time to reflect changes in technology, law, or my business operations. When I make updates, I will revise the “Last Updated” date at the top of this page. I encourage you to review this policy regularly to stay informed about how I protect your information.

Contact Information

For any questions about this Disclaimer policy, please contact Courtney Hart at heythere@itscourtneyhart.com.