Privacy Policy

Privacy Policy of LiveFree with T1D

Effective Date: 10/21/2026

Introduction and Organizational Info

We, at Mark Heyman Psychologist, Inc., are dedicated to serving our customers and contacts to the best of our abilities. Part of our commitment involves the responsible management of personal information collected through our website www.livefreewitht1d.com, and any related interactions. Our primary goals in processing this information include:

  • Enhancing the user experience on our platform by understanding customer needs and preferences.
  • Providing timely support and responding to inquiries or service requests.
  • Improving our products and services to meet the evolving demands of our users.
  • Conducting necessary business operations, such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations and guidelines to ensure that the data we handle is protected against unauthorized access, disclosure, alteration, and destruction.

We do not have a designated Data Protection Officer (DPO) but remain fully committed to addressing your privacy concerns. Should you have any questions or require further information about how we manage personal information, please contact us at [email protected] or +1 858-465-4235.

Scope and Application

This policy applies to the personal information of website visitors, registered users, and customers of LiveFree with T1D. Whether you are browsing our website www.livefreewitht1d.com, using our services as a registered user, or engaging with us as a customer, this policy explains how we handle your personal information and the rights you have regarding it.

Nature of Our Services

This policy applies to LiveFree with T1D coaching, education, and community services. These services are not healthcare, psychotherapy, or medical treatment, and participating in them does not create a provider–patient or therapist–client relationship. Information you share with us through these services is generally not subject to the Health Insurance Portability and Accountability Act (HIPAA). We still treat any health-related information you share as sensitive personal information and handle it only as described in this policy.

Mark Heyman Psychologist, Inc. also provides clinical psychology services separately. Those services, and the health information of clinical patients, are governed by our separate Notice of Privacy Practices, not by this policy.

Data Collection and Processing

We gather personal data through various interactions, including but not limited to, when you use our services, such as coaching, educational programs, workshops, and our online community, or when you directly provide information to us.

The following list details the types of personal information we may process:

  • First and last name
  • Email address and phone number
  • Billing address and payment information (processed by our payment providers)
  • Purchase history
  • Communications with us, including emails, messages, and form responses
  • Recordings, transcripts, and summaries of coaching calls
  • Posts, comments, and messages you share in our online community
  • Browsing history and interactions with our website
  • IP-based approximate location
  • Device ID
  • Health-related information you choose to share, such as details about your diabetes management, during coaching or through our forms

We only process information that is needed to deliver our services, comply with legal obligations, or improve your experience.

We use the personal information we collect for the following purposes:

  • Delivering coaching, education, and community services
  • Analytics and performance tracking
  • Customizing and adapting user experience
  • Processing transactions
  • Marketing and advertising
  • Customer support
  • Displaying videos
  • Compliance with legal obligations

We use your personal information only for the purposes for which it was collected and in ways you have authorized.

Recording of Coaching Calls

We may record and transcribe coaching calls using third-party tools to support your coaching and maintain accurate notes. We notify all participants before recording begins. If you prefer that a session not be recorded, tell your coach before or at the start of the call.

Data Storage and Protection

Data Storage

Personal information is stored on secure servers located in the United States. For services that require international data transfer, we ensure that such transfers comply with all applicable laws and maintain data protection standards equivalent to those in our primary location.

Data Hosting Partners

We partner with reputable data hosting providers that use industry-standard security measures. These partners are selected based on their adherence to data protection standards.

Data Retention

We keep personal information only as long as needed to provide our services, maintain business records, resolve disputes, and meet legal obligations. When information is no longer needed, we delete it or de-identify it. You can ask us to delete your information at any time as described in the rights sections below.

Data Sharing and Disclosure

We are committed to safeguarding your personal information. Below we outline how we share it.

Sharing Personal Information

Third-party service providers: We share personal information with third-party service providers who perform services on our behalf, such as payment processing, website hosting, communications, and analytics. These providers are contractually required to keep your information confidential and to use it only to provide services to us.

Advertising partners: We use advertising cookies and pixels from Meta and Google to measure our ads and show relevant ads to visitors of our website. These partners may use the information they collect under their own privacy policies. We do not share health information with advertising partners. You can opt out of this sharing as described in Section F below.

Third-Party Service Providers

GoHighLevel (Provider: HighLevel, Inc.)

  • Purposes: Website hosting; Customer relationship management; Forms and scheduling; Email and SMS communications; Processing transactions
  • Data collected: First and last name; Email address and/or phone number; Form responses, including health-related information you choose to share; Appointment details; Communication history; IP address; Device ID
  • Privacy policy: https://www.gohighlevel.com/privacy-policy

Kit (Provider: Kit, formerly ConvertKit)

  • Purposes: Email communications; Marketing
  • Data collected: First name; Email address; Email engagement (opens and clicks); Subscription preferences
  • Privacy policy: https://kit.com/privacy

Zoom (Provider: Zoom Communications, Inc.)

Fathom (Provider: Fathom Video, Inc.)

  • Purposes: Recording, transcribing, and summarizing coaching calls
  • Data collected: Name; Audio and video recordings of calls; Call transcripts and summaries, which may include health-related information discussed during sessions
  • Privacy policy: https://fathom.video/privacy

Skool (Provider: Skool)

  • Purposes: Online community and course delivery
  • Data collected: Name; Email address; Profile information; Posts, comments, and messages you share in the community; Course progress
  • Privacy policy: https://www.skool.com/legal

Google Workspace (Provider: Google LLC)

  • Purposes: Business email; Document and file storage; Scheduling
  • Data collected: Name; Email address; Communications with us; Documents you share with us
  • Privacy policy: https://policies.google.com/privacy

Stripe (Provider: Stripe, Inc.)

  • Purposes: Processing transactions; Fraud prevention; Compliance with legal obligations
  • Data collected: First and last name; Email address; Billing address; Payment information (e.g., credit card number); Purchase history; IP address; Device ID
  • Privacy policy: https://stripe.com/privacy

PayPal (Provider: PayPal, Inc.)

  • Purposes: Processing transactions; Fraud prevention; Compliance with legal obligations
  • Data collected: First and last name; Email address; Billing address; Payment information; Purchase history; IP address; Device ID
  • Privacy policy: https://www.paypal.com/us/legalhub/privacy-full

Microsoft Clarity (Provider: Microsoft Corporation)

  • Purposes: Analytics and performance tracking; Customizing and adapting user experience
  • Data collected: Device ID; IP-based approximate location; Browser information and language; Interaction logs (e.g., clicks, scrolling, time spent on pages); Session recordings with form inputs masked
  • Privacy policy: https://privacy.microsoft.com/privacystatement

Hotjar (Provider: Hotjar Ltd.)

  • Purposes: Analytics and performance tracking; Customizing and adapting user experience
  • Data collected: Device ID; IP-based approximate location; Browser information and language; Interaction logs (e.g., clicks, scrolling, time spent on pages); Session recordings with form inputs masked
  • Privacy policy: https://www.hotjar.com/legal/policies/privacy/

Google Analytics (Provider: Google Ireland Limited)

  • Purposes: Marketing and advertising; Analytics and performance tracking
  • Data collected: Device ID; IP-based approximate location; Operating system and version; Browser information and language; Browsing history; Interaction logs (e.g., clicks, time spent on pages); Purchase history
  • Privacy policy: https://business.safety.google/privacy/?hl=en

Google Ads (Provider: Google Ireland Limited)

  • Purposes: Customizing and adapting user experience; Analytics and performance tracking; Marketing and advertising
  • Data collected: Email address and/or phone number; Device ID; IP address; Browser fingerprint; IP-based approximate location; Interaction logs (e.g., clicks, time spent on pages)
  • Privacy policy: https://business.safety.google/privacy/?hl=en

Meta (Provider: Meta Platforms Ireland Ltd.)

  • Purposes: Customizing and adapting user experience; Analytics and performance tracking; Marketing and advertising
  • Data collected: Email address and/or phone number; Device ID; IP address; Browser information and language; Operating system and version; Browser fingerprint; IP-based approximate location; Interaction logs (e.g., clicks, time spent on pages); Browsing history
  • Privacy policy: https://www.facebook.com/privacy/explanation

YouTube (Provider: Google Ireland Limited)

  • Purposes: Displaying videos
  • Data collected: Device ID; IP address; Operating system and version; Browser information and language; Interaction logs (e.g., clicks, time spent on pages)
  • Privacy policy: https://business.safety.google/privacy/?hl=en

Vimeo (Provider: Vimeo.com, Inc.)

  • Purposes: Displaying videos
  • Data collected: Device ID; IP address; Operating system and version; Browser information and language; IP-based approximate location; Interaction logs (e.g., clicks, time spent on pages)
  • Privacy policy: https://vimeo.com/privacy

Data Processing Agreements

When we share your data with third-party service providers, we do so under Data Processing Agreements (DPAs) or equivalent contractual terms that require them to protect your information in accordance with GDPR and other applicable data protection laws.

Transparency and Control

We will inform you of any significant changes to our sharing practices, and where applicable, you will have the option to consent to such changes. For any questions about how we share personal information, contact us at [email protected] or +1 858-465-4235.

User Rights and Choices

We respect your rights regarding your personal information under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Your Rights

  • Right of access (Art. 15 GDPR): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.
  • Right to rectification (Art. 16 GDPR): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.
  • Right to erasure ("right to be forgotten") (Art. 17 GDPR): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal information under certain conditions.
  • Right to data portability (Art. 20 GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
  • Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.
  • Right to withdraw consent (Art. 7(3) GDPR): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] or +1 858-465-4235. We will respond within the timeframes required by applicable law. We may need to verify your identity before completing your request.

Cookies and Tracking Technologies

We use cookies and other tracking technologies on our website www.livefreewitht1d.com to operate the site, improve your experience, and understand how the site is used.

Understanding Cookies and Tracking Technologies

Cookies are small data files placed on your device that enable us to remember your preferences and collect information about your website usage. Tracking technologies, such as web beacons and pixel tags, help us understand how you interact with our site and which pages you visit.

How We Use These Technologies

  • Essential cookies: Necessary for the website's functionality, such as authentication and security. They do not require consent.
  • Performance and analytics cookies: These collect information about how visitors use our website, which pages are visited most frequently, and if error messages are received from web pages. These cookies help us improve our website.
  • Functional cookies: Enable the website to provide enhanced functionality and personalization, like remembering your preferences.
  • Advertising and targeting cookies: Used to deliver advertisements more relevant to you and your interests, limit how often you see an ad, and measure the effectiveness of advertising campaigns.

Your Choices and Consent

Upon your first visit, our website will present you with a cookie consent banner, where you can:

  • Accept all cookies: Consent to the use of all cookies and tracking technologies.
  • Reject non-essential cookies: Only essential cookies will be used to provide you with necessary website functions.
  • Customize your preferences: Choose which categories of cookies you wish to allow.

You can change your cookie preferences or opt out of advertising cookies at any time by clicking "Do Not Sell or Share My Personal Information" in our website footer. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of advertising cookies.

International Data Transfers

We may transfer your personal information to locations outside of your country of residence, including to countries with different data protection laws. Any such transfers are made in compliance with applicable data protection regulations, including the GDPR.

Compliance with United States Privacy Laws

For residents of the United States of America the following provisions apply:

A. Individual Rights

The California Consumer Privacy Act provides residents of California specific rights regarding their personal information, in addition to those described above.

B. Right to Know

You may request that we disclose what personal information we have collected, used, shared, or sold about you, and why. Specifically, you may request the disclosure of:

  • The categories of personal information collected
  • Specific pieces of personal information collected
  • The categories of sources from which we collected personal information
  • The purposes for which personal information is used
  • The categories of third parties with whom personal information is shared
  • The categories of information that are sold or disclosed to third parties

C. Right to Delete

You may request that we delete personal information we have collected about you.

D. Right to Correct

You may ask us to correct inaccurate information that we have about you.

E. Right to Limit

You can request that we use your sensitive personal information, including health-related information, only for limited purposes, such as providing you with the services you requested.

F. Right to Opt-Out of Sale or Sharing

We do not sell personal information for money. We use advertising cookies and pixels from Meta and Google, which may be considered "sharing" of personal information for cross-context behavioral advertising under California law. We do not share health information for advertising purposes. You can opt out of this sharing by clicking "Do Not Sell or Share My Personal Information" on our website, by adjusting your cookie preferences, or by enabling Global Privacy Control in your browser, which we honor.

G. Right to Non-Discrimination

You have the right to be protected from discrimination for exercising your rights.

H. Submitting Requests

You may submit your request by email to [email protected] or by phone at +1 858-465-4235. We will compare the information you submit with our records to verify your request, then respond as required by law.

I. Sensitive Data

We only process sensitive personal data, including health-related information, with your consent and only for the purposes disclosed at the time of collection. You may withdraw your consent at any time by emailing [email protected].

J. Consumer Health Data (Washington, Nevada, and Connecticut Residents)

If you live in Washington, Nevada, or Connecticut, health-related information you share with us may be "consumer health data" under your state's law. We collect it only to provide the services you request, we do not sell it, and we do not share it for advertising. You may request access to or deletion of your consumer health data, and you may withdraw your consent, by contacting [email protected].

K. Appeals

To appeal a decision we make regarding your request, contact us within 60 days of receiving our response:

In your appeal, include your original request, the date of our response, and a brief explanation of why you believe our decision was incorrect.

Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

Direct Marketing and Communications

We may use your personal information to send you marketing communications about our products, services, and other information we believe may interest you, in compliance with applicable laws.

Obtaining Consent for Direct Marketing

  • Opt-in consent: We will obtain your opt-in consent before sending you marketing communications where required by law.
  • Unsubscribe option: Every marketing communication we send includes instructions for unsubscribing. You can opt out at any time, and we will promptly honor your request.

Types of Direct Marketing Communications

We may send marketing communications through:

  • Email
  • SMS
  • Telephone calls
  • Retargeting ads

Partner Communications

From time to time, we may send you emails featuring information or offers from partner organizations, including companies in the diabetes field. We send these emails ourselves. We do not give your contact information, engagement data, or health information to these partners. If you choose to contact a partner directly, their own privacy policy applies.

Managing Your Preferences

You can manage your communication preferences by using the unsubscribe link in our marketing emails or by replying STOP to our text messages.

Policy Updates and Changes

We may update this privacy policy from time to time to reflect changes in legal requirements, industry standards, or our business operations.

Notification of Changes

  • Notification process: If we make significant changes that affect your rights or how we handle your personal information, we will notify you by email, a website notice, or another appropriate channel, and update the effective date at the top of this policy.
  • Reviewing changes: We encourage you to review this policy periodically.

Opt-In Consent for Material Changes

Where applicable law requires your consent for a material change, we will ask for it before the change takes effect.

Contact Us

If you have any questions about this privacy policy, contact us at [email protected] or +1 858-465-4235.