01Who this policy covers
Espindola & Associates Management Group (“EAMG,” “we,” “us”) is a business management consulting firm serving organizations across the business, nonprofit, and healthcare sectors. This policy explains what personal information we collect, why we collect it, and what you can do about it.
It applies to espindolaassociatesmg.com and to the programs and brands we operate, including The Aligned Executive Coach™, The House of Grace Wellness™, The Grounding Circle™, and The GR!T with Grace Espindola.
It does not cover information we handle on behalf of a client organization under a separate services agreement. In those engagements the client organization decides how the information is used, and their own privacy policy governs. See section 7.
02Information you give us
We collect information when you choose to send it — there is no requirement to give us anything to read this site.
- Contact and inquiry forms. Name, email address, organization, role, and whatever you write in the message field.
- Session registration. When you reserve a seat for The Grounding Circle or another session, we collect your name, email address, and any access needs or questions you share.
- Downloads and mailing list. Your name and email address when you request a resource or subscribe to updates.
- Coaching and consulting intake. If you engage us directly, we collect the professional background, goals, and organizational context needed to do the work.
- Correspondence. Email, phone, and message threads, kept as a record of the engagement.
Please do not send sensitive personal information — medical records, Social Security numbers, financial account numbers, or client-identifiable case details — through a website form or ordinary email. If we need information like that, we will tell you how to send it safely.
03Information collected automatically
Our hosting provider and analytics tools record standard technical data when you visit: IP address, browser and device type, operating system, referring page, the pages you view, and the date and time. This is used for security, troubleshooting, and understanding which pages are useful.
Cookies
We use a small number of cookies and similar technologies:
- Essential — keep the site working, remember form state, and protect against spam submissions.
- Analytics — count visits and see how pages perform in aggregate.
You can block or delete cookies in your browser settings. Essential cookies cannot be turned off without breaking parts of the site. We honor Global Privacy Control and similar browser opt-out signals where they apply.
04How we use your information
- Respond to inquiries and provide proposals, consulting, and coaching services.
- Register you for sessions and send the details, reminders, and follow-up materials.
- Send resources, updates, and program announcements you asked to receive.
- Administer and improve the site, and keep it secure.
- Keep business records and meet legal, tax, and contractual obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use it to train machine learning models.
05Email you receive from us
Transactional email — a reply to your question, a session confirmation, an invoice — comes as part of the service you asked for.
Marketing email comes only if you opted in. Every marketing message has an unsubscribe link, and unsubscribing takes effect promptly. You will still receive transactional messages tied to an active engagement. You can also unsubscribe by emailing info@espindolaassociatesmg.com with “Unsubscribe” in the subject line.
06Who we share information with
We share personal information only in these situations:
- Service providers. Companies that run our infrastructure on our behalf — website hosting, email and calendar, customer relationship management, email delivery, video conferencing, payment processing, and accounting. They may use the information only to provide those services to us.
- Co-facilitators and associates. Where a session or engagement is delivered with a named associate, they receive what they need to deliver it.
- With your direction. When you ask us to share something, or when you are sponsored by an employer and we have told you what will be reported back.
- Legal requirements. When required by law, subpoena, or to protect the rights and safety of people involved.
- Business transfer. If the firm is reorganized or acquired, records may transfer as part of that transaction, subject to this policy.
07Confidentiality, coaching, and healthcare clients
What you tell us in a coaching or consulting relationship is treated as confidential and is discussed outside the engagement only with your permission, or where disclosure is required by law — including where there is a serious risk of harm to you or another person.
Coaching is not therapy
Coaching and facilitated conversation are not psychotherapy or medical treatment, and they do not carry the legal privilege that applies to licensed clinicians. See our Disclaimer.
Group sessions
In group settings such as The Grounding Circle, we ask every participant to keep what is shared in the room confidential. We cannot guarantee what other participants do. Share at the level you are comfortable sharing in a room of peers.
Healthcare organizations
EAMG is not generally a HIPAA covered entity. When an engagement with a healthcare client requires us to handle protected health information, we do so as a business associate under a signed Business Associate Agreement, and that agreement controls how the information is used, safeguarded, and returned or destroyed.
08How long we keep it
We keep personal information only as long as it serves the purpose it was collected for:
- Inquiries that do not become engagements — up to two years, then deleted.
- Mailing list records — until you unsubscribe, plus a suppression record so we do not email you again by mistake.
- Session registrations — up to three years for program history and follow-up.
- Client engagement and financial records — at least seven years, or longer where a contract, insurer, or law requires it.
09How we protect it
The site is served over HTTPS. Access to client records is limited to the people who need it, accounts are protected with strong authentication, and devices are encrypted. Vendors are selected in part on their security practices.
No system is perfectly secure. If a breach affects your personal information, we will notify you and any required regulator within the timeframes the law sets.
10Your choices and rights
You may ask us at any time to:
- Tell you what personal information we hold about you and where it came from.
- Give you a copy of it, or send it to another provider in a portable format.
- Correct anything inaccurate.
- Delete it, subject to records we are required to keep.
- Stop sending marketing email.
California residents
Under the California Consumer Privacy Act as amended, California residents have the rights to know, delete, correct, and to opt out of the sale or sharing of personal information, and to be free from discrimination for exercising them. We do not sell or share personal information, and we do not process it for targeted advertising. You may use an authorized agent; we will ask for proof of their authority.
Outside the United States
Our services are directed to organizations in the United States and our systems are located here. If you contact us from a country with its own data protection law, we will honor equivalent access, correction, and deletion requests where they apply.
Making a request
Email info@espindolaassociatesmg.com with the request and enough detail for us to find your records. We will verify who you are before we act, and respond within 45 days. If we need longer, we will tell you why.
11Children
This site and our services are intended for adults working in a professional capacity. We do not knowingly collect personal information from anyone under 16. If you believe a minor has given us information, email us and we will delete it.
12Other sites and embedded content
Our pages link to and sometimes embed third-party services — podcast players, video, event registration, social platforms. Those services collect data under their own policies, which we do not control. Read their policies before you use them.
13Changes to this policy
We update this policy when our practices or the law change. The effective date at the top always reflects the current version. If a change materially affects how we use information you already gave us, we will tell you by email or with a notice on the site before it takes effect.
14Contact us
Questions, requests, or concerns about privacy:
Espindola & Associates Management Group624 E Street, Marysville, CA 95901info@espindolaassociatesmg.com
If you are not satisfied with our response, California residents may contact the California Privacy Protection Agency or the California Attorney General’s office.