Hormonal Hales — Privacy Policy
Covers hormonalhales.com, waitlist and sales pages, the Cycle Mastery course, and coaching services.
1. Who I am
2541104 Alberta Inc., an Alberta corporation operating as Hormonal Hales — that’s me, Haley Campbell, working from British Columbia, Canada. Contact: hales@hormonalhales.com. The person responsible for privacy at Hormonal Hales, and your contact for any privacy question, request, or complaint, is Haley Campbell, reachable at hales@hormonalhales.com.
2. What I collect
Account & contact: name, email, and what you submit in forms (quiz answers, survey responses, intake forms).
Payment: processed by Stripe and Thinkific. I never see or store full card numbers.
Communications: emails you send me, replies, DMs, and email engagement (opens/clicks) via my email provider.
Health & cycle data (only if you choose to share it): cycle charts, biomarker observations (temperature, cervical mucus, LH results), symptoms, and health history you submit through intake forms, chart-review submissions, shared charting apps, voice messages, email, or on calls. This is the most sensitive data I handle and it gets its own section (6).
Website analytics: my website and registration pages use analytics and advertising tools (Google Analytics, and the Meta pixel when I run ads) to measure visits and ad performance. They never receive anything you submit in a health or chart form.
3. How I use it
To deliver what you signed up for (course access, emails, chart reviews, calls), to answer you when you write to me, to improve the program, and to send marketing you can unsubscribe from at any time (every email has an unsubscribe link). I do not sell your data. I do not share it with anyone except the service providers below, acting on my instructions.
4. Where it lives (service providers)
Thinkific (course platform) · Stripe (payments) · Kit (email) · ManyChat (Instagram messaging) · Google Workspace (email, files, forms) · Notion (program administration) · Read Your Body (charting app; chart images you export and submit to me) · Tally (chart-review submission form, which syncs to Google Sheets) · Voxer (Supported voice-message line) · Zoom/Google Meet (calls, which may be recorded with notice). Each has its own privacy policy and safeguards. If a guest expert or contractor helps deliver the program, they access personal or health information only as needed for that work, under confidentiality obligations and on my instructions. I remain your privacy contact.
Some of these providers are based in, or process data in, the United States or other countries outside Canada. By using my services, you acknowledge that your information may be processed outside your home country or province — including in the United States — where it may be subject to access by that country’s courts, law enforcement, or national security authorities under applicable local law.
5. How long I keep it
Course/account data: account data is kept while the account exists and for one (1) year after it is closed or deletion is requested; health and cycle data is deleted or de-identified six (6) months after the client’s support window ends, or sooner on request.
6. Consumer health data (including Washington My Health My Data Act)
“Consumer health data” means the cycle and health information described in Section 2 — data that identifies your health status, including fertility and menstrual data. Because this is the most sensitive data I handle, it has its own dedicated policy: see the Consumer Health Data Privacy Policy, which covers what I collect, how I use and share it, how long I keep it, and your rights over it — including under Washington’s My Health My Data Act, Nevada’s Consumer Health Data Privacy Act, and Connecticut’s Data Privacy Act. I apply those protections to every client, regardless of where you live.
Quebec residents: if any clients are in Quebec, additional rules apply under Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25 — in addition to the protections described in the Consumer Health Data Privacy Policy, I obtain your opt-in consent before collecting sensitive information like health data (already satisfied by the checkbox consent), notify the Commission d’accès à l’information and affected individuals of any confidentiality incident that creates a risk of serious injury, honour your right to data portability (providing your data back to you in a structured, commonly-used format on request), and complete a privacy impact assessment before any new cross-border data transfer arrangement (relevant here since Thinkific, Stripe, Kit, and the others are US-based).
7. Your general rights
Access, correction, deletion, and complaint (to the Office of the Privacy Commissioner of Canada, or your state authority). PIPEDA (Canada’s federal privacy law) applies to my handling of personal information for clients across Canada, alongside provincial private-sector privacy laws that may also apply depending on where you live. For clients in the United States, I apply the consumer-health-data protections in Section 6 to everyone, not only residents of states with a health-data-specific law.
8. Children
My services are for adults. I don’t knowingly collect data from anyone under 18.
9. Changes
Updates will be posted to this page with a new effective date. Material changes to how I handle health data will be flagged by email.
Effective date: September 16, 2026