Privacy Policy

Last updated October 16, 2026

This Privacy Policy explains how Aureum Consulting LLC, doing business as Aureum Coaching ("Aureum," "we," "us"), collects, uses, shares and protects personal information when you use our website, the Aureum client app, and our coaching services. Aureum is the business responsible for your information (the "controller").

1. Information we collect

Information you give us

• Inquiry form: name, email, phone (optional), preferred language, goal, program interest and your message.
• Texts, calls and email: your phone number or email address and what you send us.
• Intake and waiver: contact details, date of birth or age confirmation, emergency contact, goals, training history, and health screening answers (for example, conditions, injuries, pregnancy or medications).
• Client app and check-in logs (health information): information you choose to log, such as weight, waist, meals, water, sleep, steps, energy, mood, workouts, progress photos and notes.
• Payments: your name, billing details and purchase history. Card details are entered with our payment processor; we do not store full card numbers.

Information collected automatically

• Analytics (only if you accept): Google Analytics 4 collects pages viewed, approximate location, device and browser type, and events such as form submits and "Text GOLD" taps. See our Cookie Notice.
• Hosting logs: our hosting provider records technical data such as IP address and browser type to deliver and secure the site.
• Preferences: your browser stores your sound and cookie choices on your device.

2. How we use information

• To answer inquiries and book your free consult.
• To provide coaching: write your plan, review logs, hold calls and track progress.
• To screen for safety and know when to refer you to a doctor or licensed provider.
• To process payments, payment plans and subscriptions, and keep business and tax records.
• To understand how the website is used and improve it (only with your consent for analytics).
• To meet legal duties and protect our rights.

We do not use your health information for advertising, and we do not sell it.

3. Who we share information with

We share information only with service providers that help us run Aureum, and only as needed:

Provider type	Purpose
Payment processor (Square and/or Stripe)	Taking payments, payment plans and subscriptions
Website hosting and forms (Netlify)	Hosting this site and receiving inquiry forms
Client app database (Supabase)	Storing client app accounts and logs
Analytics (Google Analytics)	Website statistics, only if you accept
Email, phone and texting providers	Communicating with you

We may also share information if the law requires it, to protect someone's safety, or as part of a sale or transfer of the business. With your permission, we can share relevant information with a licensed provider you choose to be referred to. We never share testimonials or photos without your written permission.

4. "Do Not Sell or Share My Personal Information"

5. How long we keep information

• Inquiries from people who do not become clients: up to 12 months.
• Client records (intake, waiver, plans, logs, payment records): for the length of your program plus up to 4 years, for tax, legal and safety reasons. You can ask us to delete app logs sooner, unless we must keep them by law.
• Analytics data: kept by Google for up to 14 months.

6. Security

We use reasonable safeguards, including encrypted (HTTPS) connections, password-protected accounts, access limited to Aureum, and reputable providers that encrypt data. No method is completely secure, so please use a strong password and tell us right away if you think your account is at risk. If a breach affects your information, we will notify you as required by law.

7. Children

The Services are for adults 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

8. Your choices

• Change your cookie choice any time with the "Cookie settings" link in the footer.
• Stop texts by replying STOP, or ask us to stop email.
• Ask to see, correct or delete your information (see below).

9. California privacy rights (CCPA/CPRA)

If you live in California, you have the right to:

• Know and access the categories and specific pieces of personal information we collect, the sources, the purposes, and who we share it with.
• Delete personal information, with some legal exceptions.
• Correct inaccurate personal information.
• Opt out of sale or sharing. We do not sell or share personal information.
• Limit use of sensitive personal information. We use health information only to provide the Services you asked for.
• Non-discrimination: we will not treat you differently for using your rights.

Categories collected in the past 12 months: identifiers (name, email, phone); customer records; commercial information (purchases); internet activity (analytics, with consent); approximate location; audio or electronic information (photos you send); and sensitive personal information (health information you provide). Sources: you, your device, and our providers. Purposes and recipients are listed in sections 2 and 3. Retention is in section 5.

To make a request, email orozco.orlando096@gmail.com or call 956-670-6760. We will verify your identity by matching information we already have, and respond within 45 days. You may use an authorized agent with your signed permission.

10. EU and UK privacy rights (GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

• Contract: to provide coaching you buy and to take payment.
• Explicit consent: to process health information you give us, and for analytics cookies. You can withdraw consent at any time.
• Legitimate interests: to answer inquiries, keep the site secure and run our business.
• Legal obligation: to keep tax and business records.

You have the right to access, correct, delete, restrict or object to processing, and to data portability, and to withdraw consent. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office). Aureum is based in the United States, so your information is processed in the U.S.; our providers use safeguards such as standard contractual clauses where required. Contact for privacy requests: Orlando Orozco, orozco.orlando096@gmail.com.

11. Changes

We may update this policy. The "Last updated" date shows the latest version. If we make a material change, we will post it here and, for clients, tell you directly.

12. Contact