Privacy Policy
Last updated: July 2, 2026
On this page
1. Who We Are
Altagracia Montilla Consulting LLC (doing business as “A.M. Consulting”) (“A.M. Consulting”, “we”, “us”, “our”) is a New Jersey limited liability company and the coaching and facilitation practice of Altagracia Montilla, based in Newark, New Jersey. We provide coaching, facilitation, courses, and sessions — including our Conflict Bravery™ programs — to individuals and organizations. For the purposes of data-protection law, A.M. Consulting is the “controller” of the personal information described here. Questions about this policy or your data: [email protected].
2. Information We Collect
We keep collection to the minimum needed to do good work. Here is exactly what we collect, why, and where it comes from.
| Category | Examples | Why we collect it | Source |
|---|---|---|---|
| Contact details | Name, email, optional phone | To reply to you, schedule work, and (if opted in) send updates | You, via a form / booking / newsletter |
| Inquiry & program details | Messages, coaching or facilitation goals, appointment info, course progress | To understand and deliver the coaching, facilitation, or program you ask for | You |
| Payment information | Amount, item, billing name/email, last-4 & card brand | To process deposits and payments (via Stripe). We never see or store your full card number. | You → Stripe |
| Technical data | IP address, browser, referring page, timestamps | Security, diagnostics, and preventing abuse | Collected automatically (server logs) |
| Usage & analytics | Aggregate, non-identifying page/interaction data | To understand what’s useful and improve the site | Collected automatically (analytics) |
| Communications history | Emails, form submissions, bookings, session notes you provide | Records of our work together | You / automatically |
We do not collect government IDs, financial account numbers, biometric data, precise geolocation, or special-category / sensitive data (health, race, religion, sexual orientation, etc.), and we do not knowingly collect information from anyone under 13. Any personal reflections you choose to share during coaching are treated as confidential and used only to serve you.
3. How We Use Your Information
- Respond to your inquiry and schedule calls, coaching sessions, facilitation, and program work.
- Send transactional messages — booking confirmations, reminders, receipts, and course updates.
- Process payments and deposits for the services you request.
- Send newsletters or updates only if you have opted in.
- Maintain, secure, and improve the site and our services, and prevent fraud or abuse.
- Comply with legal obligations and enforce our Terms.
We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not sell it or use it for third-party advertising.
4. Legal Bases for Processing (EEA / UK)
If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to deliver services you request), legitimate interests (to run, secure, and improve our practice, balanced against your rights), consent (for opt-in marketing — which you may withdraw at any time), and legal obligation (where the law requires it).
5. Who We Share Information With
We do not sell your personal information and we do not “share” it for cross-context behavioral advertising. We disclose it only to the vetted service providers (“processors” / “sub-processors”) that run this practice, each bound by contract to protect it and use it only to provide their service to us:
| Provider | What it does | Data involved | Their policy |
|---|---|---|---|
| Stripe | Payment processing | Billing name/email, amount, card token | stripe.com/privacy |
| Amelia | Appointment & session booking | Name, email, phone, appointment details | Runs on this site |
| WooCommerce | Orders, courses & checkout | Order & billing details | woocommerce.com/privacy-policy |
| WPForms | Contact-form handling | Whatever you submit in a form | Runs on this site |
| Resend | Transactional & newsletter email | Name, email, message content | resend.com/legal/privacy-policy |
| Beehiiv | Newsletter delivery (opt-in) | Name, email, engagement | beehiiv.com/privacy |
| Twilio | SMS confirmations/reminders (opt-in) | Phone number, message content | twilio.com/legal/privacy |
| Notion | Client / CRM records | Contact & program details | notion.so/Privacy-Policy |
| “Sign in with Google” (OIDC) for member login; aggregate analytics | Email / account identifier; non-identifying usage data | policies.google.com/privacy | |
| SiteGround | Website hosting | All site data, server logs | siteground.com/privacy |
| Cloudflare | CDN, security & bot protection | Technical/connection data | cloudflare.com/privacypolicy |
We may also disclose information where required by law (e.g. a valid subpoena), to enforce our Terms, or to protect the rights, property, or safety of any person. In the unlikely event of a merger, sale, or transfer of the practice, records may transfer as part of that transaction, subject to this policy.
6. Cookies & Analytics
We use a small number of cookies for essential functions and aggregate analytics. Disabling cookies will not stop you browsing the site. Full detail — including a cookie-by-cookie table — is in our Cookie Policy.
7. Email & SMS
Transactional and (opted-in) marketing email is delivered through Resend and Beehiiv. If you provide a phone number and opt in, we may send appointment confirmations or reminders by text through Twilio — reply STOP to opt out at any time, or HELP for help; message & data rates may apply. We do not sell or share your phone number for anyone else’s marketing, and marketing consent is never a condition of purchase. See our SMS / Messaging Terms for full detail.
8. How Long We Keep It
| Data | Retention |
|---|---|
| Contact-form & inquiry data | Up to 24 months after last contact, then deleted |
| Booking, coaching & program records | For the engagement + up to 7 years (tax/records), then deleted |
| Payment records | As required by tax/accounting law (typically 7 years) |
| Newsletter subscription | Until you unsubscribe |
| Server / security logs | Short-term (typically 30–90 days) |
9. Your Rights
Wherever you are, you may email [email protected] to access, correct, delete, or receive a copy of your personal information, or to stop receiving communications. We will verify your request and respond within the time your law requires (generally 30–45 days). You will never be discriminated against for exercising a privacy right.
10. US State & Regional Privacy Rights
Several states and regions grant specific rights. The table shows what applies and how to use them. In every case we honor the same core rights for all users — the table simply names the legal source.
| If you are in… | Law | Key rights |
|---|---|---|
| New Jersey | NJ Data Privacy Act | Access, correct, delete, portability, opt out of sale/targeted ads/profiling |
| California | CCPA / CPRA | Know, access, delete, correct, opt out of sale/sharing (we do neither), limit sensitive data, non-discrimination, authorized agent |
| New York | SHIELD Act | Reasonable security safeguards; breach notification |
| Other US states (CO, CT, VA, etc.) | State privacy acts | Access, correct, delete, portability, opt-outs |
| Nevada | SB 220 | Opt out of the sale of covered information (we do not sell) |
| EEA / UK | GDPR / UK GDPR | Access, rectification, erasure, restriction, portability, objection; right to complain to your supervisory authority |
Do Not Sell or Share / Do Not Sell My Personal Information: we do not sell or share personal information as those terms are defined by these laws, so there is nothing to opt out of — but you may still email us to confirm.
11. International Transfers
We are based in the United States and our service providers may process data in the US and elsewhere. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by those providers.
12. Data Security
We use reasonable administrative and technical safeguards — encryption in transit (HTTPS), access controls, reputable processors, and least-data collection — to protect your information. No method of transmission or storage is perfectly secure, but we will notify affected individuals and regulators of a breach as, and when, the law requires.
13. Children
This site and our services are for adults and are not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided information, contact us and we will delete it.
14. Changes to This Policy
If we update this policy we will revise the “Last updated” date above and, for material changes, provide a more prominent notice. Continued use of the site after a change indicates acceptance of the updated policy.
15. Contact
Altagracia Montilla Consulting LLC
Newark, New Jersey
[email protected]
This Privacy Policy is provided for transparency and general information; it is not legal advice. It is governed by, and works alongside, our Terms of Service and Cookie Policy.
