Back to home

Privacy notice

Last updated: October 15, 2026

This Privacy Notice for Bright Room LLC ("Bright Room," "we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

  • Visit our website at https://brightroomcoaching.com or any website of ours that links to this Privacy Notice.
  • Use our Services. Bright Room provides coaching for adults with ADHD, held by video call. Coaching is not therapy, counseling, or healthcare. Bright Room does not provide diagnosis, treatment, or crisis support.
  • Contact us, book a call or session, subscribe to our newsletter, or engage with us in other related ways.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at anna@brightroomcoaching.com.

Summary of key points

This summary gives the key points of our Privacy Notice. You can find more detail on each topic in the sections listed in the table of contents below.

What personal information do we process? Your name, your email address, and whatever you choose to tell us in messages, bookings, and coaching sessions. Learn more about the information we collect.

Do we process any sensitive personal information? Possibly. Because our coaching is for adults with ADHD, you may choose to share health information with us, such as a diagnosis or how ADHD affects your daily life. We use it only to reply to you and to provide the coaching you ask for. We never sell it or use it for advertising. Learn more about health information.

Do we collect any information from third parties? Only limited information from the services we use to run Bright Room, such as our booking tool, when you use them.

How do we process your information? To reply to you, schedule and provide coaching, send invoices and keep financial records, send our newsletter if you subscribe, keep our Services secure, and comply with the law. Learn more about how we process your information.

Do we sell your personal information? No. We do not sell personal information or share it for targeted advertising. Our website does not use cookies, analytics, or advertising trackers.

How do we keep your information safe? We have reasonable organizational and technical measures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Learn more about how we keep your information safe.

What are your rights? Depending on where you live, you may have the right to access, correct, or delete your personal information, among other rights. Learn more about your privacy rights.

How do you exercise your rights? Email us at anna@brightroomcoaching.com. We will consider and act upon any request in accordance with applicable data protection laws.

Table of contents

  1. What information do we collect?
  2. How do we process your information?
  3. What legal bases do we rely on to process your personal information?
  4. When and with whom do we share your personal information?
  5. Is your information transferred internationally?
  6. How long do we keep your information?
  7. How do we keep your information safe?
  8. Do we collect information from minors?
  9. What are your privacy rights?
  10. Controls for Do-Not-Track features and online tracking
  11. Do United States residents have specific privacy rights?
  12. Do we make updates to this notice?
  13. How can you contact us about this notice?

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you contact us, book a call or session, subscribe to our newsletter, or work with us as a client.

Personal information provided by you. The personal information we collect depends on how you interact with us. It may include:

  • names
  • email addresses
  • message content (what you choose to write in the contact form or in emails to us)
  • booking details, such as the date and time of a call or session
  • if you become a client: what you share in sessions, notes from sessions, and records of invoices and payments

Payments are handled by the payment service named on your invoice, which processes your payment details under its own privacy policy. We keep a record of what was invoiced and paid.

All personal information that you provide to us should be true, complete, and accurate. If the information you have submitted to us changes, please contact us so we can update our records where appropriate.

Health information you choose to share

In short: You may share health information with us. We use it only to reply to you and to provide the coaching you ask for.

We don't ask for a diagnosis, and you don't need one to work with us. But because Bright Room works with adults with ADHD, you may choose to tell us about a diagnosis, medication, your mental or physical health, or how ADHD affects your daily life. Some laws treat this as sensitive personal information or "consumer health data."

We use this information only to respond to your message and to provide the coaching you have asked for. We do not sell it, use it for advertising, or share it with anyone except the service providers we need to deliver our Services (listed in section 4), or as described under "Confidentiality" in that section. You can ask us to access, correct, or delete it at any time.

Bright Room is not a healthcare provider. Coaching records are not medical records and are not covered by HIPAA, the federal health privacy law that applies to doctors, therapists, and health plans. We treat them as confidential.

Information from third parties

In short: We may receive limited information from the services we use to run Bright Room.

When you book a call or session, our booking tool sends us your name, email address, and the time you chose. When you subscribe to our newsletter, our newsletter platform shares your email address with us. We use this information only for the purposes described in this Privacy Notice.

Information automatically collected

In short: When you visit our website, our hosting provider and font provider receive technical information such as your IP address. We do not use cookies or analytics.

Our website is hosted by Netlify. Like any web host, Netlify automatically processes technical information when you visit, such as your IP address, browser type, the pages you request, and the time of your visit. This is needed to deliver the website and keep it secure. We do not use it to identify you.

The fonts on our website load from Google Fonts. When your browser loads them, Google receives your IP address and basic browser information. Google's privacy policy applies to that information.

Our website does not set cookies and does not use analytics, advertising, or session-recording tools. If that changes, we will update this Privacy Notice first.

2. How do we process your information?

In short: We process your information to reply to you, provide and administer our Services, keep them secure, and comply with law. We may also process your information for other purposes only with your prior explicit consent.

We process your personal information for the following reasons, depending on how you interact with us:

  • To respond to inquiries. We use your name, email address, and message to reply to you.
  • To schedule calls and sessions. We use your booking details to confirm appointments and send reminders.
  • To provide coaching. We use what you share with us, and notes from sessions, to provide the coaching you have asked for.
  • To invoice and keep financial records. We use your name, email address, and payment records to send invoices and keep the records that tax and accounting rules require.
  • To send our newsletter. If you subscribe, we send you our newsletter. You can unsubscribe at any time.
  • To send administrative information to you. We may send you details about our Services, changes to our terms and policies, and other similar information.
  • To protect our Services. We may process your information to keep our Services safe and secure, including filtering spam and preventing fraud.
  • To comply with the law. We may process your information where we need to meet a legal obligation.

In short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

  • Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
  • Explicit consent for health information. We process health information you share with us only with your explicit consent, which you can withdraw at any time.
  • Performance of a contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request, prior to entering into a contract with you.
  • Legitimate interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information to reply to messages, keep our records in order, and diagnose problems or prevent spam and fraud.
  • Legal obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or, where permitted by applicable law, in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including for investigations, fraud detection and prevention, to comply with a subpoena, warrant, or court order, or where the information is publicly available and specified by applicable regulation.

4. When and with whom do we share your personal information?

In short: We share information only with the service providers we need to run Bright Room, and in the specific situations described in this section.

Service providers. We share personal information with third-party service providers who perform services for us and need access to that information to do that work. We currently use:

  • Netlify, for website hosting and the contact form
  • Google, for email, and Porkbun, for email forwarding
  • Cal.com, for booking calls and sessions and sending reminders
  • Zoom, for video calls
  • Substack, for our newsletter
  • Google Fonts, for the fonts on our website
  • the payment service named on your invoice, for payments

When you use Cal.com, Zoom, or Substack directly, their own privacy policies also apply.

Confidentiality. What you share in coaching stays between you and your coach. We do not share it with anyone unless you ask us to or agree to it, the law requires it (for example, a court order), or we believe there is a serious and imminent risk of harm to you or someone else.

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

No selling or advertising. We do not sell personal information, and we do not share it for targeted advertising.

Third-party links. Our website links to third-party websites, such as our booking page and our newsletter. We are not responsible for the privacy practices, content, or availability of those third parties, and this Privacy Notice does not apply to their websites. We encourage you to review the privacy notices or privacy policies of any third-party sites you visit.

5. Is your information transferred internationally?

In short: We may transfer, store, and process your information in countries other than your own.

Bright Room is based in the United States. Our service providers may transfer, store, and process your information in the United States and other countries where they or their subprocessors operate. Regardless of your location, your information may be processed in countries outside your own.

Where required under applicable law, we rely on appropriate safeguards for international transfers, which may include the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms implemented by the relevant provider or parties involved.

6. How long do we keep your information?

In short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, including responding to inquiries, providing coaching, sending our newsletter if you subscribe, keeping financial records, complying with legal obligations, and resolving disputes, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). If we do not have a specific retention period for a particular category of information, we use criteria such as the nature of our relationship with you, the sensitivity of the information, the purpose for which it was collected, legal requirements, and our legitimate business needs to determine how long to retain it.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. How do we keep your information safe?

In short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

8. Do we collect information from minors?

In short: Our Services are for adults. We do not knowingly collect data from anyone under 18.

Bright Room's coaching is for adults. We do not knowingly collect, solicit data from, or market to anyone under 18 years of age. If we learn that personal information from someone under 18 has been collected, we will take reasonable measures to promptly delete it from our records. If you become aware of any data we may have collected from someone under 18, please contact us at anna@brightroomcoaching.com.

9. What are your privacy rights?

In short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, (iv) to object to certain processing of your personal information, and (v), if applicable, to data portability. You can make such a request by contacting us using the details in section 13 below.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or the UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time by contacting us using the details in section 13 below. However, this will not affect the lawfulness of the processing before its withdrawal, nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of our newsletter: You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in any newsletter email, or by contacting us. We may still contact you about Services you have booked or to respond to your requests.

If you have questions or comments about your privacy rights, you may email us at anna@brightroomcoaching.com.

10. Controls for Do-Not-Track features and online tracking

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Our website does not use cookies, analytics, or advertising trackers, and we do not track you across websites, so there is no tracking for a DNT or Global Privacy Control signal to turn off. Cal.com, Zoom, and Substack may use cookies on their own pages under their own privacy policies.

11. Do United States residents have specific privacy rights?

In short: Depending on your state of residence, you may have certain rights regarding your personal information.

Residents of certain U.S. states may have the right to access, correct, or delete their personal information, obtain a copy of their personal information, and, where applicable, withdraw consent or opt out of certain processing of their personal information, or request details about how it has been used. These rights may be limited in some circumstances by applicable law.

Residents of some states, including Washington, Nevada, and Connecticut, have additional rights over consumer health data. These include the right to know what health information we collect and who we share it with (see section 1 and section 4), to withdraw consent, and to have it deleted. We do not sell consumer health data.

To exercise any of these rights, please email us at anna@brightroomcoaching.com. We will respond within 45 days and act upon any request in accordance with applicable law.

12. Do we make updates to this notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice from time to time to stay informed about how we are protecting your information.

13. How can you contact us about this notice?

If you have questions or comments about this notice, you may email Bright Room LLC at anna@brightroomcoaching.com.