Privacy Policy

Kristin Rivas, LLC
Effective Date: February 8, 2026
Last Updated: February 8, 2026

Introduction

At Kristin Rivas, LLC (“we,” “us,” or “our”), accessible from kristinrivas.com, your privacy is a priority. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

This Privacy Policy applies to information collected through our website (kristinrivas.com), our scheduling and intake systems, and communications related to our services. It does not apply to information collected offline except where specifically stated.

If you have questions about this Privacy Policy, contact us at:

Consent

By using our website, scheduling a consultation, submitting intake forms, or purchasing services, you consent to this Privacy Policy and agree to its terms. Where required by law, we will obtain your explicit consent before collecting or processing specific categories of personal information.

Information We Collect

Information You Provide Directly

When you interact with our website and services, we may collect:

• Contact information: Name, email address, phone number, and mailing address
• Intake form responses: Information about your goals, history, current medications, and other details you provide through our intake process via IntakeQ
• Scheduling information: Appointment dates, times, preferences, and communication preferences
• Payment information: Billing details processed securely through our payment providers (we do not store full credit card numbers on our servers)
• Session-related information: Notes, recordings (with your consent), and follow-up communications
• Account information: If you register for an account on our platform or access course materials

Information Collected Automatically

When you visit our website, we automatically collect:

• Log data: IP address, browser type, Internet Service Provider (ISP), referring/exit pages, date and time stamps, and clickstream data
• Device information: Operating system, device type, and screen resolution
• Analytics data: Pages visited, time spent on pages, and navigation patterns (collected via Google Analytics and/or Vercel Analytics)

Information From Third Parties

We may receive information about you from third-party platforms you interact with in connection with our services, including GoHighLevel (CRM and marketing), IntakeQ (scheduling and intake), and Skool (course content and community).

How We Use Your Information

We use the information we collect to:

• Provide, deliver, and improve our hypnotherapy and coaching services
• Schedule and manage appointments
• Process payments and send transaction confirmations
• Communicate with you about your services, appointments, and follow-up care
• Send session recordings and support materials you have requested
• Personalize your experience and tailor recommendations
• Send marketing and promotional communications (only with your consent; you may opt out at any time)
• Analyze website usage to improve our site and services
• Comply with legal obligations
• Detect and prevent fraud

Health-Related Information

Our services involve hypnotherapy and coaching, which may require us to collect sensitive information about your mental and physical health through intake forms and during sessions. This information is treated with the highest level of confidentiality.

• Health-related information is collected only with your explicit consent and only as necessary to provide services
• Session recordings are created only with your permission and shared only with you
• We do not sell, rent, or share your health-related information with third parties for marketing purposes under any circumstances
• Access to health-related information is limited to Kristin Rivas and authorized support staff directly involved in your care

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Support marketing and advertising efforts

Types of cookies we use:

• Essential cookies: Required for basic site functionality
• Analytics cookies: Help us understand how visitors use our site (e.g., Google Analytics)
• Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness

You can control cookies through your browser settings. Disabling cookies may affect your experience on our website.

Third-Party Services

We use the following third-party services to operate our business. Each has its own privacy policy governing how they handle your data:

We do not control these third-party services and are not responsible for their privacy practices. We encourage you to review their policies.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: With third-party vendors who assist in operating our business (listed above), bound by contractual obligations to protect your data
• Legal requirements: When required by law, regulation, legal process, or governmental request
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case you will be notified
• With your consent: When you have given explicit permission for a specific purpose
• Safety: To protect the rights, safety, or property of Kristin Rivas, LLC, our clients, or the public

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Client records and session information: Retained for a minimum of 7 years after the last date of service, consistent with professional record-keeping standards
• Payment records: Retained as required by tax and financial regulations
• Marketing data: Retained until you unsubscribe or request deletion
• Website analytics: Aggregated data retained indefinitely; personally identifiable data purged per platform retention policies

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Secure storage of sensitive information
• Access controls limiting who can view your data
• Regular review of our security practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights

All Users

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Deletion — Request deletion of your personal data, subject to legal retention requirements
• Opt out of marketing — Unsubscribe from promotional emails at any time using the link in any marketing email or by contacting us directly

California Residents (CCPA)

Under the California Consumer Privacy Act, California residents have the additional right to:

• Request disclosure of the categories and specific pieces of personal data collected
• Request deletion of personal data
• Request that we do not sell personal data (we do not sell personal data)
• Not be discriminated against for exercising these rights

European Residents (GDPR)

If you are located in the European Economic Area, you have the additional right to:

• Restrict processing — Request that we limit how we process your data under certain conditions
• Object to processing — Object to our processing of your data under certain conditions
• Data portability — Request that we transfer your data to another organization or directly to you in a structured, commonly used format

Exercising Your Rights

To exercise any of these rights, contact us at contact@kristinrivas.com or call (206) 552-8374. We will respond to your request within 30 days.

Children's Privacy

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately at contact@kristinrivas.com and we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or through a notice on our website.

We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

This Privacy Policy was last reviewed on February 8, 2026.

See also our Terms of Service.