Heart Center LA — Privacy Policy

Effective Date: June 22, 2026

Last Updated: June 22, 2026

Heart Center LA ("Heart Center LA," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at heartcenter.la (the "Website"), attend our events, use our services, or interact with us.

By using our Website or services, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Website or services.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us, including:

• Account and Booking Information: Name, email address, phone number, and payment information when you book a healing class, register for a Conscious Connections event, or schedule a private session.
• Contact Form Submissions: Name, email address, phone number, inquiry type, and message content when you submit a contact form on our Website.
• Podcast Letter Submissions: The content of letters or questions you submit to the Heart Center Connection podcast, along with any identifying information you include.
• Event Registration: Name, email address, age range, and other information collected through third-party ticketing platforms (e.g., Eventbrite, Lu.ma) when you register for Conscious Connections events.
• Institutional Inquiry Information: Organization name, contact person, email, phone number, and details about your facilitation needs.
• Health Information: Information you voluntarily share about your physical or emotional health in connection with healing classes, private sessions, or acupuncture intake forms. This information is collected only as necessary to provide safe and effective services.
• Testimonials and Feedback: Written or video testimonials, reviews, and feedback you provide with your consent.

1.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain information, including:

• Device and Browser Information: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage Data: Pages visited, time spent on pages, referring URLs, click patterns, and navigation paths.
• Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to enhance your experience, analyze Website traffic, and support our marketing efforts. See Section 6 (Cookies and Tracking Technologies) for more information.

1.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Payment Processors: Transaction confirmation and billing information from Stripe (via GoHighLevel).
• Ticketing Platforms: Registration and attendance information from Eventbrite, Lu.ma, or similar platforms.
• Social Media Platforms: If you interact with our content on Facebook, Instagram, LinkedIn, YouTube, or TikTok, those platforms may provide us with analytics and engagement data.
• GoHighLevel (CRM): Contact, booking, and communication data stored within our customer relationship management platform.

2. How We Use Your Information

We use your personal information for the following purposes:

• Providing Services: To process class bookings, event registrations, private session appointments, and institutional facilitation engagements.
• Communication: To send you booking confirmations, reminders, follow-up emails, and responses to your inquiries.
• Marketing and Promotions: To send you information about upcoming classes, events, podcast episodes, and special offers. You can opt out of marketing communications at any time (see Section 7).
• Podcast Production: To use submitted letters and questions in Heart Center Connection podcast episodes, as described in our Terms and Conditions.
• Testimonials: To publish your testimonials on our Website, social media, and marketing materials, with your consent.
• Website Improvement: To analyze Website usage, improve user experience, troubleshoot issues, and optimize content.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Safety and Security: To protect the safety, rights, and property of Heart Center LA, our users, and the public.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share your information with third-party service providers who assist us in operating our business, including:

• GoHighLevel: Our website platform, CRM, booking calendar, email sequences, and forms.
• Stripe: Payment processing for class bookings and services.
• Google Workspace: Internal communications and document management.
• Eventbrite / Lu.ma: Event ticketing and registration.
• Podcast Hosting Platform: Podcast episode distribution and analytics.
• Social Media Platforms: Content distribution and advertising (Facebook, Instagram, LinkedIn, YouTube, TikTok).

These service providers are contractually obligated to use your information only as necessary to provide their services to us and to maintain appropriate security measures.

3.2 With Your Consent

We may share your information with third parties when you give us explicit consent, such as when you agree to have your testimonial published or your letter read on the podcast.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, including:

• Court orders, subpoenas, or other legal process.
• Requests from law enforcement or government agencies.
• To protect the rights, property, or safety of Heart Center LA, our users, or the public.
• To investigate potential violations of our Terms and Conditions.

3.4 Business Transfers

If Heart Center LA undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. Health Information

We understand the sensitive nature of health-related information. We handle health information with heightened care:

• Voluntary Disclosure: Any health information you share with us during classes, private sessions, or acupuncture intake is provided voluntarily.
• Purpose Limitation: Health information is used solely to provide you with safe, effective, and personalized healing services.
• Access Restriction: Access to your health information is limited to the practitioners directly involved in your care (Dr. Winnie Chan Wang and/or Dr. Jay Dubois, PhD) and authorized administrative staff as necessary.
• No Marketing Use: We do not use your health information for marketing purposes.
• Acupuncture Records: Health records related to acupuncture services provided by Dr. Winnie Chan Wang are maintained in accordance with California laws governing acupuncture and healthcare records.

Note: Heart Center LA is not a HIPAA-covered entity. However, we are committed to protecting your health information with appropriate safeguards and in compliance with applicable California privacy laws.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Booking and Transaction Records: Retained for a minimum of seven (7) years for tax and accounting purposes.
• Contact Form Submissions: Retained for two (2) years after the last interaction, unless you request earlier deletion.
• Podcast Submissions: Retained indefinitely as part of the podcast archive, as authorized by you at the time of submission.
• Marketing Data: Retained until you opt out of marketing communications or request deletion.
• Health and Acupuncture Records: Retained in accordance with California law (generally a minimum of seven years for healthcare records, or longer for minors).

6. Cookies and Tracking Technologies

6.1 What We Use

Our Website uses the following types of cookies and tracking technologies:

6.2 Your Choices

You can manage your cookie preferences through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually.
• Block third-party cookies.
• Block cookies from specific sites.
• Block all cookies.
• Delete all cookies when you close your browser.

Please note that blocking or deleting cookies may affect the functionality of our Website, including the ability to book classes or submit forms.

6.3 Do Not Track

Our Website does not currently respond to "Do Not Track" browser signals. However, you can opt out of certain tracking as described above.

7. Your Rights and Choices

7.1 California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell your personal information. If we ever change this practice, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

7.2 How to Exercise Your Rights

To exercise any of the rights described above, please contact us:

• Email: [email protected]
• Phone: (213) 856-1293
• Mail: Heart Center LA, 2801 E. Foothill Blvd., Pasadena, CA 91107

We will respond to verifiable requests within 45 days as required by California law. We may need to verify your identity before processing your request.

7.3 Marketing Opt-Out

You may opt out of receiving marketing emails from Heart Center LA at any time by:

• Clicking the "unsubscribe" link in any marketing email.
• Contacting us at [email protected] with the subject line "Unsubscribe."

Please note that even if you opt out of marketing emails, we may still send you transactional communications (e.g., booking confirmations, class reminders, policy updates).

8. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS) on our Website.
• Secure storage of payment information through PCI-compliant payment processors (Stripe).
• Access controls limiting who within our organization can view your personal data.
• Regular review of our data collection, storage, and processing practices.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. Children's Privacy

Our Website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child under 18, please contact us at [email protected].

10. Third-Party Links

Our Website contains links to third-party websites and services, including social media platforms, ticketing services, podcast hosting platforms, and payment processors. This Privacy Policy applies only to our Website and services. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Photo and Video at Events

By attending Heart Center LA classes, events, workshops, or sessions, you acknowledge that:

• Photography and videography may take place for promotional, educational, and archival purposes.
• Images and recordings may be used on our Website, social media channels, podcast, and marketing materials.
• If you do not wish to be photographed or recorded, please inform the facilitator at the start of the event.
• Testimonial photos and videos will only be published with your explicit consent.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this Privacy Policy.
• For material changes, we may notify you via email or by posting a prominent notice on our Website.
• Your continued use of our Website or services after any changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Heart Center LA

2801 E. Foothill Blvd.

Pasadena, CA 91107

Email: [email protected]

Phone: (213) 856-1293

Website: heartcenter.la

This Privacy Policy is provided for informational purposes and does not constitute legal advice. Heart Center LA recommends consulting with a qualified attorney to ensure compliance with all applicable privacy laws and regulations.