Legal
Privacy Policy
Effective October 15, 2026
This policy explains how Health by Nareen handles your information, including health information, on this website (healthbynareen.com), in Small Steps, our private client portal (my.healthbynareen.com), and when you work with Nareen. Health by Nareen is operated by Narine Shihada Hayek, sole proprietor, doing business as Health by Nareen, Henderson, Nevada ("we", "us"). This policy is also our consumer health data privacy policy under Nevada law (NRS 603A.400 to 603A.550).
Information we collect
- Contact details: your name, email address and, if you give it, your phone number.
- Health and habit information: your intake form answers, and what you share in sessions, messages and Small Steps, such as your goals, the habits you're working on, your progress, and anything about your eating, movement, sleep, stress or health you choose to mention. Nareen also keeps session notes and recaps.
- Billing records: the program you bought, payment amounts and dates, and session dates on invoices, receipts and HSA/FSA statements. Card details are handled by our payment processor; we never see or store your full card number.
- Basic technical information: like any website, our hosting provider keeps standard server logs (such as IP address and browser type) for security.
We don't ask for medical records, diagnoses or lab results, and we don't collect precise location, biometric or genetic data.
Where it comes from
From you, from Nareen's notes of your sessions, and from our payment processor when you pay.
How we use it
- To reply to you and set up your free intro session.
- To coach you: prepare for sessions, keep notes and recaps, and support you between sessions.
- To take payment and send receipts, invoices and statements.
- To apply promo codes and know which partner referred you.
- To keep the records the law requires, such as tax records.
We collect and use your information, including health information, only with your consent or as needed to provide the coaching you ask for. We don't sell your information, use it for advertising, or share it with anyone for their own purposes.
Who we share it with
We don't share your information with third parties or affiliates. We use a small number of service providers to run our business; they process information only on our behalf and under our instructions:
- Google (Google Workspace and Firebase): email, calendar, forms, file storage, and the secure database behind our records and Small Steps.
- Netlify: hosting for this website and Small Steps.
- Stripe: card payments.
- Zoom: video sessions, if you choose them. Sessions are not recorded.
- Anthropic (Claude): an AI assistant we use to help run the business, for example to draft and organize materials. It may process information you've shared when we use it for that work.
We may also disclose information if the law requires or allows it (for example, a court order or subpoena), to protect someone from an imminent risk of serious harm, or, as the law allows, to enforce our agreements, answer a payment dispute or defend a legal claim, sharing only what is needed. For payment disputes we use billing records (such as your signed coaching agreement, invoices, receipts and session dates), not coaching notes. Referral partners, such as gyms, don't receive your information. If you message us on Instagram, Meta's privacy policy also applies to those messages.
Cookies and tracking
We don't use cookies, analytics or advertising trackers on this website or in Small Steps, and no one else collects information about you, including health information, over time or across other websites through our services.
Small Steps keeps your sign-in in your browser's storage on your device, so you stay signed in, and saves the app on your device so it opens quickly. Signing out or clearing your browser data removes it.
This website and Small Steps load fonts and app code from Google, so your browser connects to Google's servers. If you sign in to Small Steps with your Google account, or pay by card on Stripe's checkout page, those pages are covered by Google's and Stripe's own privacy policies.
How long we keep it
If you don't become a client, we delete your intake answers within 12 months. When a program ends, your Small Steps space becomes read-only and is deleted about 30 days later (we email you a week before). Other coaching information is deleted when it's no longer needed for your coaching, or sooner if you ask. Billing records are kept for 7 years because tax law requires it.
Security
Your information is kept in password-protected, access-controlled accounts, and access is limited to the people who need it to coach you or to keep our systems running, and only when needed. In Small Steps you can see only your own space. No way of storing or sending information online is completely secure.
Adults only
Health by Nareen coaches adults 18 and over. Our services are not intended for children, and we don't knowingly collect information from anyone under 18.
Your rights
You can ask us to:
- confirm whether we collect, share or sell your information, including health information;
- list the third parties and affiliates we've shared it with or sold it to (we don't do either);
- see your information and correct anything that's wrong;
- stop collecting or sharing it; and
- delete it.
Email nareenhealth@gmail.com with your request. To protect you, we'll confirm your identity, usually by asking you to reply from the email address we have on file. We respond within 45 days after confirming your identity; if we need more time, we may extend that once by up to 45 days and will tell you why. We answer up to two requests in any 12 months free of charge.
When you ask us to delete your information, we delete it within 30 days after confirming your identity and tell our service providers to delete it too; copies in their backup systems are removed on their normal schedule, within 2 years at most. Billing records we must keep for taxes are kept only for that purpose.
If we turn down your request, you can appeal by replying to our answer with the word "Appeal". We'll tell you in writing within 45 days what we decided and why, and if we deny your appeal, we'll give you contact information for the Nevada Office of the Attorney General, where you can file a complaint.
Health coaching and HIPAA
Health by Nareen is a coaching business, not a healthcare provider, so the federal HIPAA rules don't apply to us. We still treat what you share as confidential and protect it as described in this policy.
Changes to this policy
If we make a material change, we'll update this page and its effective date, and email current clients before the change takes effect. If a change would let us collect or share health information in a new way, we'll ask for your consent first.
Contact
Health by Nareen · Henderson, Nevada · nareenhealth@gmail.com
Back to the site