Privacy Policy

This Privacy Policy sets forth the practices of Naia Haulani (“Naia Haulani,” “I,” “me,” or “my”) concerning the collection, use, disclosure, retention, and protection of personal information through NaiaHaulani.com, its discovery-call and Harmony in Hormones waitlist forms, the linked email signup for the free journal, Your Cycle, Your Story, Instagram interactions used to request that resource through LinkDM, and client information provided during online or in-person coaching, telephone conversations, and intake documents. Naia Haulani is responsible for the personal information handled for these purposes. The handling of health-related information is also described in the separate Consumer Health Data Privacy Policy.

1. Information Collected

When you submit a form or contact me, I collect the information you provide, such as your name, email address, optional message, the resource or program you request, and your communication preferences or consent. I also receive information you send in follow-up correspondence.

The website and service providers may process technical information needed to deliver and protect their services, such as IP address, browser or device information, pages requested, submission time, and spam-prevention information. MailerLite may record email delivery, unsubscribe activity, opens, and link clicks using tracking technologies, depending on the settings used for a particular message. This information helps administer email delivery and understand engagement. Image-based open tracking may be limited through the remote-image settings in your email application; those settings do not necessarily prevent link-click tracking. You may unsubscribe or contact Naia Haulani regarding email privacy preferences.

When you request a resource through an Instagram comment or message connected to LinkDM automation, the information processed may include your Instagram account identifier, username, comment or message content, the post or Reel you interacted with, and related delivery or link-interaction records. This information is used to recognize your request and send the requested signup link. A keyword comment or resource request does not authorize unrelated promotional messages.

2. Sensitive Health Information

Website forms are intended for general inquiries, resource requests, and program updates. Do not submit medical records, diagnoses, detailed symptoms, medication details, insurance information, payment details, or other sensitive personal information through these forms. Optional messages should be limited to a general description of your inquiry.

If you voluntarily include health information, it becomes part of your submission and may pass through the services described below. Deletion may be requested using the contact information provided in this policy. These forms and Instagram automated messages are not intended as a confidential medical intake system. Do not include medical records or sensitive health details in public comments or automated direct-message conversations. A direct message is not a confidential clinical communication. Your interest in a hormone-related program or menstrual-health resource may itself reveal health-related information even when you do not describe symptoms. This information is used to fulfill your request, not to diagnose you or create an advertising profile. Information you write in your downloaded journal is not sent to me merely because you download or complete it.

Client health information requires separate handling from public website inquiries. The client-information provisions below apply to health histories and intake documents provided for coaching; any additional notice, consent, or authorization required by applicable law must be provided separately before the relevant processing.

3. Use of Personal Information

• To respond to questions and coordinate a discovery call you request.
• To deliver the journal or other resource you request, including sending its signup link through an Instagram automated response.
• To send Harmony in Hormones availability and program updates when you join its waitlist.
• To send other wellness emails only when you separately choose to receive them.
• To maintain the website, prevent spam or misuse, manage consent and unsubscribe requests, and meet applicable legal obligations.

Requesting a discovery call does not by itself subscribe you to general marketing emails. Joining the program waitlist authorizes updates about that program; broader newsletter emails require the relevant signup choice. The current journal signup requests delivery of the journal; it does not by itself authorize a general wellness newsletter subscription.

4. Service Providers and Disclosures

I use service providers to operate the website and communications:

Waitlist details pass from Netlify through Zapier to MailerLite; submissions and related technical records may also remain in those services and in email notifications. The Harmony waitlist collects name, email address, and the program-update consent response; it does not include a free-text health-information field. Optional discovery messages remain part of the discovery submission and any associated notifications. Discovery requests are collected through Netlify and used for direct follow-up. The journal signup is hosted by MailerLite. Where Instagram resource automation is enabled, LinkDM sends a link to that signup form; email collection and journal delivery then occur through MailerLite. An Instagram comment or DM alone does not add you to the email list. Your email address is collected through the linked form, rather than being required in the automated Instagram conversation. These providers process information to support these functions under their applicable terms and privacy policies. Their notices describe their own practices; they do not replace this policy or authorize unrelated uses of your submission. Relevant notices are available from Netlify, MailerLite, and Zapier, LinkDM, and Instagram/Meta.

I do not sell your personal information or share it with third parties for their own advertising. Information may also be disclosed when required by law or reasonably necessary to address fraud, security incidents, or threats to legal rights or safety.

5. Cookies, Tracking Technologies, and External Services

Hosting, security, and linked signup services may use cookies or similar technologies to provide their functions and, on linked services, measure usage. Where applicable law requires prior consent for optional tracking, that consent must be obtained before the technology is used. This policy does not itself constitute that consent. Your browser settings can block or delete cookies, although doing so may affect some services. External fonts and linked signup platforms may receive technical request information even if cookies are blocked. The current website does not use advertising pixels or targeted-advertising tools. Personal information is not sold or shared for cross-context behavioral advertising, and sensitive information is not used to infer characteristics for advertising. The website does not use personal information for these purposes. Global Privacy Control signals therefore do not change the current processing described in this policy; any applicable obligation to honor an opt-out preference signal remains unaffected.

The website uses externally hosted Google Fonts, so your browser may connect to Google to request font files and send technical information such as your IP address. Instagram and Meta separately process activity on their platforms under their own privacy notices. When you follow a link to a separately hosted signup page or another website, that service’s privacy notice also applies to its handling of information.

Browser Do Not Track Signals

The website does not currently change its operation in response to a browser’s Do Not Track (DNT) signal. DNT is distinct from Global Privacy Control. The website does not use advertising technologies to track identified visitors across unrelated websites. Third-party platforms and linked services may collect information under their own notices and browser or account settings; a DNT signal sent to this website does not control their separate services.

6. Email Preferences

You may choose not to activate the resource automation by not submitting its keyword or other configured request. To stop further automated resource conversations or request deletion of automation records, contact the privacy email below; Instagram also provides account blocking and messaging controls. These choices are separate from email unsubscribe preferences.

You may unsubscribe from marketing and program-update emails using the unsubscribe link in those emails or by contacting me. Unsubscribing does not prevent a direct reply to an inquiry you initiate. A minimal record of your unsubscribe preference may be kept to help prevent unwanted future messages.

7. Data Retention and Security

Information is retained for as long as reasonably needed for the purpose for which it was collected, including responding to inquiries, managing an active waitlist or subscription, maintaining communication preferences, resolving disputes, and meeting legal obligations. Retention depends on the type of record and the service holding it. When information is no longer needed, it is deleted or de-identified, subject to applicable retention requirements and service-provider backup cycles. Unsubscribing stops future marketing messages but is not automatically a request to delete all prior submissions; deletion may be requested separately. Where a health-data law requires broader or faster deletion, those requirements apply.

Reasonable administrative and technical safeguards are used to protect information, including limiting access to persons and service providers who require it for the stated purposes. Any legally required security-incident notifications will be provided in accordance with applicable law. No online transmission or storage system can be guaranteed completely secure.

8. Privacy Rights and Requests

You may request information about your submitted personal information, request correction or deletion, or update your communication preferences by contacting Naia Haulani. Depending on where you live and which laws apply, you may have additional rights to access, obtain a copy of, correct, delete, or restrict certain uses of your information, withdraw consent, or appeal a decision about a request.

Requests should be submitted to the contact email below, preferably from the email address associated with the original submission. Identity verification will be limited to information reasonably necessary to process the request. Requests will be answered within applicable legal time limits. Authorized agents may submit requests where applicable law permits; proof of authorization and appropriate verification may be required. Certain information may be retained, where legally permitted, to comply with legal obligations or maintain unsubscribe preferences. Health-data deletion requests are handled under the additional protections described in the Consumer Health Data Privacy Policy. A denied request may be appealed by replying to the decision or emailing with the subject line “Privacy appeal.” You may also contact your state attorney general or other applicable privacy regulator. Exercising applicable privacy rights will not result in unlawful discrimination.

9. International Processing and Age Restrictions

Naia Haulani operates from Texas, United States, and offers online coaching and in-person services in Texas. Service availability outside Texas is subject to applicable legal and professional requirements; website access does not establish eligibility for coaching in a particular jurisdiction. Service providers may process or store information in the United States or other countries, where privacy laws may differ from those where you live.

This website and its signup services are intended for adults aged 18 and older. I do not knowingly collect personal information from children under 13. Suspected submissions of children’s personal information should be reported to the contact email below for review and appropriate action.

10. Policy Updates and Contact Information

This policy describes website inquiries and signups and the client-information channels described below. It does not describe clinical care, payment processing, or an unimplemented client portal. This policy may be updated as the website or services change. The last-updated date above identifies the current version. Where required, additional notice or consent will be provided before material changes apply. Visiting this website or reading this policy does not itself provide consent to marketing or to processing health information beyond what applicable law permits.

For privacy questions or requests, contact:
Naia Haulani | Women’s Wellness
Email: Naia@naiahaulani.com
Website: NaiaHaulani.com

11. Client Health Histories and Coaching Information

Clients may provide health histories, wellness goals, symptoms, medication or treatment information, and other information relevant to coaching through conversations, telephone calls, or completed intake PDFs supplied by email. This may result in email correspondence, attachments, and coaching notes containing health information. These records are collected directly from the client and used to understand the client’s goals, prepare for and provide agreed coaching, communicate about that service, and maintain necessary records. Only information relevant to the agreed service should be provided.

Client health histories and intake documents are distinct from newsletter and waitlist records. They are not used for advertising, testimonials, or unrelated marketing without any separate permission required by law. A website signup does not authorize access to health records or establish consent to processing detailed client health information. This policy does not authorize call recording, transcription, or submission of client records to an AI service; any proposed use of those functions requires separate notice and any legally required consent before it occurs.

Client records may be handled through email and attachment-storage services, telephone services, and devices or storage systems used for client work. Those channels must be assessed for the applicable privacy and security requirements before use. Website signup tools—including Netlify forms, Zapier marketing workflows, MailerLite email lists, and LinkDM—are not designated channels for submitting client intake records.

12. Electronic Communications and Disclosures

Email messages and attachments can be misdirected, intercepted, or accessed through a compromised account or device. An ordinary email attachment is not necessarily encrypted or appropriate for sensitive records. Clients should use the intake method and instructions communicated before completing an intake. Contact the privacy email to discuss an alternative before sending sensitive records.

Where Texas Health and Safety Code Chapter 181 applies, health information created or received for client work may be subject to electronic disclosure in service delivery or necessary record handling. Electronic disclosure will be subject to any notice and authorization requirements, or lawful exceptions, applicable to that disclosure. This notice is not an authorization to disclose health information. Agreeing to email communication does not waive statutory privacy rights or replace required safeguards.

13. Texas and Other Applicable Privacy Rights

This business is based in Texas. Where the Texas Data Privacy and Security Act applies, residents may exercise applicable rights to access, correction, deletion, portability, and opt-out, and may appeal a denied request. Statutory applicability depends on the business, information, and any applicable exemptions; this policy does not represent that every statutory provision applies to every record. Requests may be submitted to Naia@naiahaulani.com. For requests governed by that Act, the response period is generally 45 days, with a permitted extension where applicable; appeal decisions are provided within 60 days. Applicable medical-record requirements or other laws may impose different deadlines or retention obligations.

Texas privacy complaints may be directed to the Texas Attorney General. Washington-specific health-data rights and complaint procedures are identified in the separate Consumer Health Data Privacy Policy and apply where Washington law covers the individual and relevant activities. Other mandatory protections may apply based on the individual’s location and the nature of the service.

Before services are offered in a country requiring additional privacy disclosures, legal grounds for health-data processing, transfer safeguards, or a local representative, the applicable arrangements and supplemental notices must be established. This policy does not state that making the Website accessible internationally, or accepting its Terms, supplies any required consent or international-transfer authorization.