Data Privacy & Confidentiality Policy

3.1 Coaching Session Confidentiality

All coaching conversations are confidential. Session content, client disclosures, and developmental observations remain between the coach and the individual client unless:

• ✦The client provides explicit written consent to share specific information
• ✦There is a legal obligation to disclose (e.g., imminent harm, court order)
• ✦A corporate sponsor has a pre-agreed reporting structure (see Section 3.2)

3.2 Corporate-Sponsored Engagement Boundaries

When a corporate client sponsors coaching for an employee, we establish clear data boundaries before the engagement begins:

• ✦The sponsoring organization receives aggregate progress indicators and program completion status only
• ✦Specific session content, personal disclosures, and individual assessment scores are never shared with the sponsoring organization without the coachee's explicit written consent
• ✦Reporting structures are defined in writing before the engagement begins and are shared with both the sponsor and the coachee
• ✦The coachee retains ownership of their individual coaching journey and developmental insights

3.3 Assessment and Diagnostic Data

Data collected through our proprietary diagnostic tools is handled with the following standards:

• ✦POWER Score™ and Invisible Tax Audit™ results are owned by the individual respondent
• ✦Assessment data is stored securely in our CRM (GoHighLevel) with access restricted to authorized personnel
• ✦Aggregate, de-identified data may be used for program improvement, research, or thought leadership content
• ✦Individual results are never published, shared, or used in marketing without explicit written consent

4.1 Collection

We collect only the data necessary to deliver our services effectively. Data collection points include coaching intake forms, diagnostic assessments, scheduling systems, payment processing, and program participation tracking.

4.2 Storage and Access

• ✦Client data is stored in encrypted, access-controlled cloud systems
• ✦Access to client data is limited to Erika Chestnut and any authorized coaches or team members operating under NDA
• ✦Third-party technology providers are vetted for data protection compliance before integration

4.3 Data Transfer

When data is transferred between systems (e.g., from a diagnostic tool to our CRM), we use secure API connections with authentication. We do not transmit client data via unencrypted channels.

4.4 Retention and Deletion

• ✦Active engagement data: retained for the duration of the engagement plus 3 years
• ✦Assessment data: retained for 3 years post-engagement unless earlier deletion is requested
• ✦Clients may request deletion of their data at any time by contacting accounts@erikachestnut.com
• ✦Upon deletion request, data is removed from active systems within 30 business days. Backup copies are purged within 90 days.