Privacy Policy

We collect information that you voluntarily provide to us when inquiring about, booking, or utilizing our services:

• Contact Information: Name, email address, phone number, physical or mailing address, and job title (for community staff, directors, and corporate event planners).
• Community & Booking Details: Senior living facility or host organization name, location, event preferences, and session scheduling details.
• Account & Purchase History: Records of purchased educational guides, downloads, and transactional account history.
• Workshop Sign-Ups: Contact details provided by residents registering or family members registering on the behalf of a resident for optional small-group workshops or individual coaching sessions.
• No Medical Data (HIPAA Scope): We do not seek, request, collect, or log any medical records, physical accessibility details, health-status records, or cognitive condition metrics. Please do not input health-related information into any contact forms or intake fields. Our operations remain strictly clear of HIPAA regulatory scopes.
• No Automated AI Chatbots on Website: In alignment with our values of transparent communication, our website does not deploy automated AI conversational agents, consumer chatbots, or hidden machine-learning scripts to process user behavior or scrape web history. All communications sent through our website contact forms are handled directly by human staff members.

We use the information we collect strictly to:

• Service Delivery: Respond to inquiries, schedule educational seminars and workshops, and deliver private 1-on-1 coaching sessions focused on everyday AI usage and safety.
• Digital Purchases: Deliver purchased digital materials, guides, downloadable workbooks, and manage account access.
• Customer Support: Provide updates, confirmation notices, invoices, and customer support related to your bookings or orders.
• Security & Operations: Maintain the security, safety, integrity, and functionality of our website, transactions, and services.

• Processing Gateway: Payments made via credit card or direct bank transfer (ACH) are processed securely by Stripe, Inc., a PCI DSS certified payment processor. Take Smart Steps LLC does not store full credit card numbers, banking credentials, or bank routing/account numbers on our website servers. Stripe collects and uses payment information, including to prevent fraud and meet its legal obligations, as described in the Stripe Privacy Policy at stripe.com/privacy.
• ACH Management: Stripe verifies bank accounts used for ACH payments, either through a secure sign in to your bank or with small test deposits, and keeps a record of your ACH authorization as required by Nacha rules.
• Strict No-Selling Pledge: We do not sell, rent, trade, lease, or monetize your personal information, resident data, or contact lists to third parties under any circumstances.

We may share limited information only with trusted third-party service providers who assist us in operating our website, conducting our business, processing payments, or serving our clients (such as website hosting platforms, email delivery systems, or our payment processor, Stripe). Other than Stripe, these providers are contractually bound to keep this information strictly confidential and use it solely to perform specified services for Take Smart Steps LLC. Stripe may also use payment information for its own purposes, such as preventing fraud and meeting its legal obligations, under the Stripe Privacy Policy.

We maintain appropriate physical, administrative, and technological security barriers to safeguard the basic contact data you share with us. We maintain established internal response protocols tailored to multi-state operating requirements:

• Pennsylvania BPINA Compliance: In compliance with the Pennsylvania Breach of Personal Information Notification Act (BPINA), in the event of an unencrypted personal data breach, we will expeditiously notify affected residents and state regulatory authorities within legally mandated timelines.
• Florida FIPA Compliance (Fla. Stat. § 501.171): In strict compliance with the Florida Information Protection Act of 2014 (FIPA), if a breach of security affects Florida residents, we will provide formal written or electronic notification to affected individuals as expeditiously as practicable and without unreasonable delay, but no later than thirty (30) days following determination of the breach. If a security breach affects 500 or more Florida residents, notice will additionally be provided to the Florida Department of Legal Affairs within thirty (30) days.

You may request to review, update, amend, or delete your personal contact information or transactional profile from our system at any time by contacting us directly.

Florida Digital Bill of Rights (FDBR) Notice: The Florida Digital Bill of Rights (FDBR, Fla. Stat. § 501.701 et seq.) applies exclusively to large commercial entities generating over $1 billion in global gross annual revenue that operate major tech platforms, app stores, or consumer ad networks. As an educational small business operating under a strict data minimization model, Take Smart Steps LLC falls significantly below these statutory applicability thresholds. However, we voluntarily honor core consumer privacy principles, including data minimization, purpose limitation, non-monetization of personal data, and individual data access and deletion rights, for all clients.

If you have any questions or concerns regarding this Privacy Policy, your data rights, or wish to update your contact files, please contact Take Smart Steps LLC:

• Company: Take Smart Steps LLC
• Email: info@takesmartsteps.com
• Website: www.takesmartsteps.com