Privacy Policy

Last updated: September 20, 2026
Effective date: September 20, 2026

Introduction

This Privacy Policy explains how Kathleen Reyes ("I," "me") collects, uses, and shares information when you visit healthtechgirl.com (the "Site"), subscribe to my newsletter, or contact me.

This Site is hosted on Squarespace, which processes data on my behalf as a service provider. Squarespace's own privacy practices are described in its privacy policy.

By using the Site, you agree to the practices described here.

A note on health information: This Site is a personal blog. It is not a healthcare service, and I am not acting as your healthcare provider through it. Anything you send me through this Site is not protected health information under HIPAA and is not handled under HIPAA safeguards. Please do not send me personal medical details about yourself or anyone else.

Information I Collect

Information you give me directly

  • Newsletter: your email address, and your name if you provide it.

  • Contact and inquiry forms: your name, email address, organization, and the contents of your message.

  • Product review and consulting inquiries: whatever you choose to tell me about yourself, your company, or your product.

  • Comments: your name, email address, and comment text, where commenting is enabled.

  • Payments: [if applicable] payments are processed by [Stripe / Squarespace Payments]. I receive confirmation and limited billing details. I never receive or store your full card number.

Information collected automatically

When you visit, Squarespace collects technical information on my behalf, including your IP address, browser and device type, operating system, the pages you viewed and how long you stayed, and the site that referred you. Squarespace also uses this data to operate, protect, and improve its own platform, and analyzes it in de-personalized form.

Cookies and Similar Technologies

Essential cookies. These keep the Site working and secure and cannot be turned off. On Squarespace these include crumb (browsing security), test (checks whether your browser supports cookies), and ss_sd (session integrity). Squarespace also uses browser local storage to remember things like a dismissed announcement bar or your video player volume.

Analytics cookies. Squarespace's built-in analytics identify unique visitors and track sessions using ss_cid, ss_cvr, and ss_cpvisit (about two years) and ss_cvisit and ss_cvt (about 30 minutes). If you decline analytics cookies through the banner, Squarespace records that choice in ss_cookie Allowed and disables them.

Affiliate cookies. Where posts contain affiliate links, the merchant or affiliate network may set a cookie to attribute a purchase. Those cookies are governed by that company's privacy policy.

You can manage cookies through the banner on this Site and through your browser settings. Blocking essential cookies may break parts of the Site.

How I Use Your Information

To send the newsletter you subscribed to; respond to your messages and review requests; operate, secure, and improve the Site; understand in aggregate which content is useful; process payments and deliver paid services; prevent spam and abuse; and meet legal obligations.

I don't use your information for automated decision-making that produces legal or similarly significant effects.

Legal Bases (EU/UK visitors)

Consent (newsletter, non-essential cookies); legitimate interests (site security, aggregate analytics, responding to inquiries); contract (paid services); and legal obligation (tax and recordkeeping).

How I Share Information

I do not sell your personal information, and I do not share it for cross-context behavioral advertising.

Information is shared only with:

  • Service providers: Squarespace (hosting, forms, analytics), Squarespace Email Campaigns, Substack (newsletter), Stripe (payments processor).

  • Legal and safety: when required by law or legal process, or to protect rights, safety, or property.

  • Business transfer: if the Site or business is acquired, information may transfer as part of that transaction.

I do not share reader information with companies whose products I review.

Data Retention

Subscriber information is kept until you unsubscribe, plus a reasonable recordkeeping period. Form submissions and correspondence are kept for 24 months. Squarespace analytics data is retained per the platform's standard retention. Payment records are kept as long as tax and accounting law requires.

Your Privacy Rights

California (CCPA/CPRA). You have the right to know what personal information is collected, used, and disclosed; to delete it; to correct it; to opt out of sale or sharing (I do neither); to limit use of sensitive personal information; and not to be discriminated against for exercising these rights. I treat Global Privacy Control signals as an opt-out request.

California Shine the Light. I do not share personal information with third parties for their direct marketing purposes.

EU/UK (GDPR). You have rights of access, rectification, erasure, restriction, portability, and objection, plus the right to withdraw consent at any time and to complain to your supervisory authority.

Other US states. Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana, have comparable rights.

Email [your email] to make a request. I may need to verify your identity, and I'll respond within the time your law requires. You can unsubscribe from the newsletter using the link in any email.

Children's Privacy

This Site is not directed to children under 13, and I do not knowingly collect information from them. If you believe a child has provided information, email [your email] and I'll delete it.

International Transfers

The Site is operated from the United States, and information is processed and stored there. If you visit from outside the U.S., your information will be transferred to the U.S., where privacy laws differ from those in your country. Where required, Squarespace relies on appropriate safeguards such as Standard Contractual Clauses.

Security

The Site uses HTTPS and reputable service providers, and I take reasonable steps to protect information. No method of transmission or storage is completely secure, so I can't guarantee absolute security.

Third-Party Sites

This Site links to third parties, including affiliate links and product pages. Their privacy practices are their own. Review their policies before sharing information.

Changes

I may update this policy. The "last updated" date reflects the current version, and material changes will be announced on the Site or by email.

Contact

hello@healthtechgirl.com