Privacy Policy
Effective November 2, 2026 · Last updated November 2, 2026
This policy explains how Reprogramind LLC (“Reprogramind,” “we,” “us”) collects, uses and shares personal information through reprogramind.com and when you book or attend coaching sessions with Lara Kassir. Health-related information is also covered by our separate Consumer Health Data Privacy Policy, which forms part of this policy.
1. About HIPAA
Reprogramind is a private-pay coaching practice. We don’t bill health insurance or conduct the electronic insurance transactions that make a provider subject to HIPAA, so we are not a HIPAA-covered entity and don’t claim HIPAA compliance. That doesn’t mean your information is unprotected — this policy describes what we actually do.
2. Information we collect
Information you give us
- Contact details: name, email address, phone number, and billing address.
- Booking details: session dates, package purchased, and the state or country where you’ll be located for each session. We ask for your location because the rules that apply to our services can depend on it.
- Coaching information: the goals you share, consultation and intake answers, and notes from sessions. Some of this may relate to your well-being; see the Consumer Health Data Privacy Policy.
- Payment information: processed directly by our payment processor, Stripe. We don’t receive or store your full card number.
- Messages you send us by email, text or web form.
Information collected automatically
- Device and browser type, IP address, approximate location derived from your IP address, pages viewed, referring site, and time on site.
- Cookies and similar technologies — essential ones always, and analytics and advertising ones only if you agree (see section 5).
We don’t knowingly collect information from anyone under 18. Our services are for adults only.
3. How we use information
- To schedule, provide and follow up on coaching sessions.
- To process payments, refunds and package balances.
- To send appointment reminders and service messages.
- To send marketing emails or texts — only if you opt in, and you can opt out at any time.
- To run and improve the website and measure our advertising, using only non-health information and only with your consent.
- To keep records, meet legal obligations, prevent fraud and enforce our Terms.
4. Who we share information with
We share personal information only with service providers who help us run the practice, under contracts that limit how they may use it:
| Provider | Purpose | What they receive |
|---|---|---|
| Stripe | Payment processing | Name, email, billing details, payment amount |
| [Zoom / Doxy.me] | Online video sessions | Name, email, session time |
| Calendly | Consultation scheduling | Name, email, booking time, answers to booking questions |
| [Scheduling platform] | Booking and client records | Contact details, bookings, intake answers, session notes |
| [Email / SMS provider] | Reminders and marketing messages | Name, email, phone, your message preferences |
| Google Analytics | Website analytics (with consent) | Browsing activity, device data, IP-derived location |
| Meta Platforms (Facebook/Instagram) | Ad measurement (with consent) | Browsing events such as “page viewed” or “consultation requested.” Never your goals, intake answers or anything about your health. |
We may also disclose information if required by law, subpoena or court order; to protect someone at serious and imminent risk of harm; to report suspected abuse of a child or vulnerable adult; to defend legal claims; or as part of a sale or transfer of the business, subject to this policy.
We do not sell personal information, and we don’t share it for cross-context behavioral advertising except the limited, consent-based ad measurement described above.
5. Cookies, analytics and advertising
Other companies may collect information about your online activity across different websites through tools on our site — specifically Google Analytics and the Meta Pixel. These tools do not load until you choose “Accept” in our cookie banner. If you choose “Necessary only,” they never load. You can change your choice at any time through Cookie Preferences.
To limit what reaches advertising platforms, we remove topic-specific details from page addresses before any event is sent, send only generic events (for example, “consultation requested”), and don’t use automatic form-field matching.
Do Not Track. There’s no common standard for responding to browser “Do Not Track” signals, so our site doesn’t respond to them. We do honor Global Privacy Control signals by treating them as a choice of “Necessary only.”
6. Confidentiality of sessions
What you share in sessions is kept confidential and isn’t disclosed without your written permission, except in the situations listed in section 4. Because Lara isn’t a licensed therapist, conversations with her generally don’t have the legal privilege that applies to a licensed psychotherapist or physician. Sessions are not recorded unless we both agree in writing before the session begins.
7. How long we keep information
- Client records and session notes: [7] years after your last session, then securely deleted.
- Payment records: as long as tax and accounting law requires.
- Marketing contact details: until you unsubscribe.
- Website analytics: [14] months.
When records are no longer needed, we destroy them so they can’t be read or reconstructed, as Florida law requires (§ 501.171(8), Fla. Stat.).
8. Security and data breaches
We take reasonable measures to protect your information, including encrypted connections, access controls and reputable service providers. No system is completely secure, and we can’t guarantee absolute security. If a breach affects your personal information, we’ll notify you as Florida law requires — no later than 30 days after we determine a breach occurred (§ 501.171, Fla. Stat.) — and as required by the law of the state or country where you live.
9. Your choices and rights
Wherever you live, you may ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct inaccurate information;
- delete your information, except records we’re required to keep;
- stop sending you marketing (use the unsubscribe link, reply STOP to a text, or email us);
- withdraw any consent you’ve given.
E-mail info@reprogramind.com with the subject “Privacy Request.” We may need to verify your identity and will respond within 30 days (45 days for consumer health data requests). If we decline a request, we’ll explain why and how to appeal.
10. Clients in the European Union and United Kingdom
If you’re in the EU, the European Economic Area or the UK, the GDPR (or UK GDPR) applies, and these additional terms apply to you.
- Controller: Reprogramind LLC, Miami, Florida, USA · info@reprogramind.com.
- Representative: [EU REPRESENTATIVE NAME AND ADDRESS] (EU) and [UK REPRESENTATIVE NAME AND ADDRESS] (UK). [Counsel to confirm whether a representative is required.]
- Legal bases: performance of our contract with you (booking and providing sessions); your explicit consent for any information concerning your health (Article 9(2)(a)); your consent for marketing, analytics and advertising cookies; and our legitimate interests in running and securing the practice; and legal obligations.
- International transfers: your information is processed in the United States. Where required, we rely on the EU–U.S. Data Privacy Framework (for providers certified under it), the European Commission’s Standard Contractual Clauses, or the UK International Data Transfer Addendum.
- Your rights: access, rectification, erasure, restriction, data portability, objection to processing (including any direct marketing), and withdrawal of consent at any time without affecting earlier processing. We don’t make decisions about you based solely on automated processing.
- Complaints: you may complain to the data protection authority where you live or work (in the UK, the Information Commissioner’s Office). We’d appreciate the chance to resolve your concern first.
11. Changes to this policy
We’ll post any changes here with a new effective date. If a change is material, we’ll email clients at least 14 days before it takes effect.
12. Contact
Reprogramind LLC · Miami, FL · info@reprogramind.com