Privacy Policy

Who We Are

Full Spectrum Human LLC ("we," "us," "our") is a health coaching practice and software company based in Oklahoma City, Oklahoma. We operate fsh-coach.com and the Metabolic Symptom Troubleshooter™ (MST) web application. This policy describes how we collect, use, store, and protect your personal information when you use our website and services.

For the purposes of data protection law, Full Spectrum Human LLC is the data controller — meaning we determine the purposes and means of processing your personal data. You can reach us at rance@fsh-coach.com.

Information We Collect

Information you provide directly:

Contact form: First name, last name, email address, and your message. Processed by Formspree.

Encouragement form: Your name and email address, the recipient's name and phone number, your message, and your anonymity preference. Processed by Formspree. The recipient's information is used solely for the one-time delivery of your encouragement message and is not stored by Full Spectrum Human for marketing or any other purpose. By submitting this form, you confirm that the recipient would welcome the message.

Discovery call booking: First name, last name, email address, preferred contact method (Zoom or phone), phone number (if you select a phone call), how you heard about us, your health goals and current struggles, and your selected time slot. This information is processed by our custom booking system running on Cloudflare Workers, which uses Google Calendar (scheduling), Zoom (video call links), and Resend (confirmation and reminder emails). Your booking details — including your name, email, and phone number — are stored in Cloudflare's key-value store for the period needed to administer your booking (reminders, rescheduling, and cancellation) and are written into the Google Calendar event. Separately, non-personally-identifiable booking analytics (time slot, timezone, contact method, referral source, and booking status) are stored in Supabase for aggregate reporting.

MST registration: Full name, email address, and password. Your password is hashed by Supabase Auth and is never stored in plain text. When you subscribe, your payment card details are entered directly into Stripe's embedded payment form — card numbers, expiration dates, and security codes are processed entirely by Stripe and never touch our servers.

MST usage: Session data you enter while using the tool (client initials or identifiers, symptom selections, clinical context flags, lab flags, supplement and medication entries) is stored in Supabase and cached locally in your browser. Up to 500 sessions are stored per account.

Health coaching (private clients): Intake forms, session notes, and scheduling data are managed through Healthie, our practice management platform.

Information collected automatically:

We use Cloudflare Web Analytics to collect anonymous, aggregated page-level metrics (page views, visit counts, performance data). Cloudflare Web Analytics does not use cookies, does not collect personally identifiable information, and does not track individual users across sessions. No IP addresses are stored.

Our website includes an embedded YouTube video on the About page. The video uses a click-to-load facade — YouTube's tracking scripts and cookies are not loaded until you explicitly click the play button. Once loaded, YouTube's own privacy policy applies.

Information we do not collect:

We do not use advertising cookies, retargeting pixels, or third-party analytics tools that track individual behavior. We do not sell, rent, or share your personal information with third parties for marketing purposes.

How We Use Your Information

We use the information you provide to:

• Respond to your inquiries (contact form)
• Deliver encouragement messages on your behalf (encouragement form)
• Schedule and confirm discovery calls (booking system)
• Schedule and conduct coaching sessions (Healthie)
• Process payments and manage subscriptions (Stripe)
• Provide access to the MST tool, store your session data, and deliver features like intake forms and session reports (Supabase)
• Send transactional emails related to your account, bookings, or subscription (Resend)

We do not use your information for purposes other than those described above.

Lawful Basis for Processing

Under data protection laws (including the EU General Data Protection Regulation and UK GDPR), we process your personal data on the following legal bases:

• Performance of a contract: When you subscribe to the MST or engage coaching services, we process your data to deliver the service you signed up for.
• Legitimate interest: We process contact form submissions and booking requests to respond to your inquiries and schedule calls. We process anonymous analytics to understand how our website is used and improve it.
• Consent: When you submit the encouragement form, you consent to us processing the recipient's information for the sole purpose of delivering your message. If we introduce email marketing in the future, we will obtain explicit opt-in consent.

Third-Party Services

We use the following third-party services to operate our website and business. Each service processes data according to its own privacy policy:

• Formspree — processes contact and encouragement form submissions. Formspree Privacy Policy
• Healthie — powers our coaching platform (scheduling, intake forms, messaging for private clients). Healthie Privacy Policy
• Stripe — processes MST subscription payments. Payment card details are entered directly into Stripe's embedded form and never touch our servers. Stripe Privacy Policy
• Supabase — hosts MST application data, user accounts, session storage, and anonymous booking analytics. Supabase Privacy Policy
• Cloudflare — provides website hosting (Cloudflare Pages), edge computing (Workers), short-term booking storage (Workers KV), and anonymous analytics. Cloudflare Privacy Policy
• Google Calendar API — manages discovery call scheduling (availability checks and event creation). Google Privacy Policy
• Zoom — provides video call links for discovery calls and coaching sessions. Zoom Privacy Policy
• Resend — sends transactional emails (booking confirmations, reminders, cancellations). Resend Privacy Policy
• YouTube (Google) — embedded video content, loaded only on user interaction. Google Privacy Policy
• Discord — hosts the optional MST Community server. If you join, your Discord account information is processed by Discord. Discord Privacy Policy

Cookies

Our website does not set first-party cookies. Cloudflare Web Analytics operates without cookies. Third-party services (Stripe's embedded payment form, YouTube after click-to-play) may set their own cookies when you interact with them directly. You can manage cookie preferences through your browser settings.

Data Retention

Contact and encouragement form submissions: Retained by Formspree according to their retention policy. We do not independently store copies of form submissions.

Discovery call bookings: Your booking details (name, email, phone, and call preferences) are stored in Cloudflare's key-value store and automatically expire 45 days after the booking, or are deleted immediately when you cancel. Calendar events are retained in Google Calendar. Confirmation and reminder emails are retained by Resend. Non-personally-identifiable booking analytics in Supabase are retained indefinitely for aggregate reporting.

MST accounts and session data: Your account and session data are retained in Supabase for as long as your account is active. If you cancel your subscription, your account and data remain accessible to you (in read-only mode) unless you request deletion.

Payment records: Retained by Stripe in accordance with their retention policy and applicable financial record-keeping requirements.

Coaching records: Retained by Healthie in accordance with their retention policy and applicable professional record-keeping standards.

You may request deletion of your personal data at any time by contacting us at rance@fsh-coach.com. We will process deletion requests within 30 days.

Your Rights

Regardless of where you are located, you have the right to request access to the personal information we hold about you, request correction of inaccurate information, request deletion of your personal information, and opt out of any future communications.

Additional rights for users in the EU/EEA and United Kingdom: Under the General Data Protection Regulation (GDPR) and UK GDPR, you also have the right to restriction of processing, data portability (receiving your data in a structured, commonly used format), the right to object to processing based on legitimate interest, and the right to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local Data Protection Authority if you believe your data has been processed unlawfully.

Additional rights for users in California: Under the California Consumer Privacy Act (CCPA), you have additional rights including the right to know what personal data is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

Additional rights for users in Canada: Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access your personal information held by an organization, challenge its accuracy, and withdraw consent for its collection, use, or disclosure.

To exercise any of these rights, contact us at rance@fsh-coach.com. We will respond to all data rights requests within 30 days.

International Data Transfers

Full Spectrum Human LLC is based in the United States. If you access our website or services from outside the United States, your personal data will be transferred to and processed in the United States, where our servers and third-party service providers are located.

For users in the EU/EEA and United Kingdom, we rely on the following legal mechanisms to ensure your data is adequately protected during international transfers: the EU-U.S. Data Privacy Framework (for providers that are certified, including Stripe, Cloudflare, and Google), and Standard Contractual Clauses approved by the European Commission (for other providers). If you have questions about the specific safeguards applied to your data, contact us at rance@fsh-coach.com.

Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS/TLS across all services), hashed passwords (via Supabase Auth), rate limiting on authentication endpoints, and access controls on administrative functions.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law. For users in the EU/EEA and United Kingdom, we will notify the relevant Data Protection Authority within 72 hours of becoming aware of a qualifying breach, and will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Children's Privacy

Our website and services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children. The Metabolic Symptom Troubleshooter is designed for use by certified health coaches and practitioners who are at least 18 years of age. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. If we make material changes that affect how your personal data is processed, we will make reasonable efforts to notify you (for example, by email or through a notice on our website). Your continued use of our website or services after any changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, how your data is handled, or wish to exercise any of your data rights, contact us at rance@fsh-coach.com.

Full Spectrum Human LLC · Oklahoma City, OK