What We Hold Collective
This is a drafted starting point, not legal advice. Please have an attorney — ideally one familiar with California healthcare/business law — review this before it’s treated as final, particularly the health-information section below and the text-messaging section given our SMS course offering.

Privacy Policy

Effective date: [insert date of publication]

Her Black Wellness By Ciara, Inc. (“we,” “us,” “our”), doing business as What We Hold Collective (“WWHC”), operates this website (the “Site”). This Privacy Policy explains what information we collect, how we use it, and your choices.

By using the Site, you agree to the practices described here. If you do not agree, please do not use the Site.

1. Information We Collect

Information you give us directly:

  • Your name and email address when you sign up for our email list, take the Fourth Trimester Readiness Quiz, download a free resource, or join a waitlist
  • Your mobile phone number and your consent to receive text messages, if you opt in to a text-message program such as the 14-Day Supported Postpartum Text Course
  • Payment information when you make a purchase — we do not collect or store your card details. Payments are processed by Stripe, and your payment information is handled directly by Stripe under its own privacy policy and security standards
  • Any information you voluntarily share with us through the readiness quiz or during a booked session, including health-related information you choose to disclose

Information collected automatically:

  • Basic technical information such as browser type, device type, and pages visited, which may be collected through analytics tools if and when we use them (see Section 5)

2. How We Use Your Information

We use the information we collect to:

  • Deliver the digital products, resources, or services you purchase
  • Send you the emails you sign up for, including our newsletter and any lead magnet you request
  • Communicate with you about your purchase or scheduled session
  • Improve the Site and our offerings
  • Meet legal and accounting obligations

We do not sell your personal information.

3. Sharing Your Information

We share information only with the service providers who help us run this business, and only as needed for them to provide their service:

  • Stripe — payment processing
  • Kit (formerly ConvertKit) — email list management and newsletter delivery
  • SlickText — text message delivery for our SMS programs
  • Vercel — website hosting

We may also disclose information if required by law, or to protect the safety of a client or the public.

No mobile information, including text-messaging originator opt-in data or consent, is shared with any third party or affiliate for marketing or promotional purposes. All other categories exclude text-messaging originator opt-in data and consent — this information is shared only with the service providers named above, and only as needed to deliver the text-message program you opted into.

4. Text Messaging Data

If you opt in to a text-message program (such as the 14-Day Supported Postpartum Text Course), we collect your mobile phone number and your consent in order to send you the messages that program describes. See our SMS Program Terms for message frequency, cost, and how to opt out. You can opt out at any time by replying STOP.

5. Cookies and Analytics

This site does not currently use analytics or tracking cookies beyond what’s required for the site to function.

[If analytics or a tracking pixel is ever added, this section needs to name the specific tool and what it tracks, and a cookie consent banner may be required depending on visitor location.]

6. Health-Related Information

Some of our offers, particularly the readiness quiz and any live or 1:1 session, may involve you sharing information about your health, pregnancy, or postpartum recovery. This information is used only to provide the education and navigation service you’ve requested. It is not stored as part of a medical record, and this Site and its intake process are not a substitute for the privacy protections of a HIPAA-covered medical provider.

[Flag for attorney: whether this service model triggers HIPAA or California-specific health-privacy obligations is a legal determination this policy can’t resolve on its own.]

7. Data Retention

We retain your information for as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your information at any time (see Section 9).

8. Children’s Privacy

This Site is not directed to children under 18, and we do not knowingly collect information from children.

9. Your Rights and Choices

  • You can unsubscribe from our emails at any time using the link in any email
  • You can opt out of text messages at any time by replying STOP
  • You can request access to, correction of, or deletion of your personal information by contacting us at ciara@herblackwellness.com
  • Depending on where you live, you may have additional rights under laws like the CCPA (California) or GDPR (EU/UK) — contact us and we’ll do our best to accommodate applicable requests

10. Security

We take reasonable measures to protect your information, but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a new effective date.

12. Contact Us

Questions about this policy can be sent to ciara@herblackwellness.com.