Last Updated: July 26th, 2026
Your privacy matters to me. The work I do is personal, and I want you to understand exactly how I collect, protect, and handle your information — both the data side and, just as importantly, what you share with me in our work together.
This Privacy Policy describes how Body-Led Living LLC ("I," "me," or "my") collects, uses, discloses, and protects the personal data of individuals ("you") who visit my website, use my booking platform, or engage my somatic healing services. I am committed to protecting your privacy in compliance with applicable laws, including the Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq., and its implementing rules (4 CCR 904-3).
Body-Led Living LLC is a Colorado limited liability company offering somatic healing services — body-oriented support designed to help regulate and support the nervous system. I am a trauma-trained somatic practitioner and a managing member of Body-Led Living LLC. I am not a licensed therapist, psychologist, counselor, or medical professional. My services do not constitute therapy, psychotherapy, medical advice, diagnosis, or treatment of any kind.
By using my website, booking platform, or services, you acknowledge that you have read and understood this Privacy Policy.
Alyssa Hill, Owner
Body-Led Living LLC
Contact Email: alyssa@bodyledliving.com
As the data controller under the Colorado Privacy Act, I determine the purposes and means of processing your personal data. If you have questions about this policy or my data practices, please contact me using the information above.
I collect various categories of personal data depending on how you interact with me and my business. Below is a detailed description of the data I collect, the sources, and the purposes for collection.
Certain information you share with me through intake forms or during sessions may constitute "sensitive data" under the Colorado Privacy Act, C.R.S. § 6-1-1303(24). This primarily includes information related to your physical and mental health, such as current or past health conditions, previous injuries or accidents, and any relevant history that helps me tailor my somatic work to your needs.
I will obtain your affirmative, opt-in consent before processing any sensitive data, as required by C.R.S. § 6-1-1308(7). You may withdraw your consent at any time by contacting me. Withdrawal of consent does not affect the lawfulness of processing performed prior to withdrawal, and may limit my ability to continue providing services.
I process your personal data for the following purposes:
What you share with me during sessions is held in strict confidence. I treat the content of our work together — what you say, what arises, and what we explore — as private, and I do not share it with anyone except in the following limited circumstances:
Please note that because I am not a licensed healthcare provider, our communications are not protected by therapist-client privilege under Colorado law (C.R.S. § 12-245-220 applies to licensed, registered, or certified mental health professionals). This is part of why I want to be fully transparent with you about exactly how I hold and protect what you share with me.
I process your personal data under the following legal bases:
If you are a Colorado resident, you have the following rights under the CPA, C.R.S. § 6-1-1306:
You have the right to confirm whether I am processing your personal data and to access the specific personal data I hold about you.
You may request that I correct inaccurate personal data, taking into account the nature of the data and the purposes for processing.
You may request that I delete personal data I have collected from or about you, subject to certain legal exceptions (such as data required for legal compliance or to complete a transaction you requested).
You have the right to obtain a copy of the personal data you previously provided to me in a portable, readily usable format that allows you to transmit the data to another entity.
You may opt out of the processing of your personal data for purposes of:
I honor universal opt-out mechanisms, including Global Privacy Control (GPC) signals, as required by the CPA and 4 CCR 904-3. If I detect a recognized universal opt-out signal from your browser or device, I will treat it as a valid opt-out request for targeted advertising and the sale of personal data.
To exercise any of these rights, please contact me at alyssa@bodyledliving.com. I will respond to your request within forty-five (45) days, as required by C.R.S. § 6-1-1306(2). If I need additional time, I will notify you of an extension of up to an additional forty-five (45) days. I will verify your identity before fulfilling your request. If I decline your request, you have the right to appeal my decision by contacting me at alyssa@bodyledliving.com, and I will respond to your appeal within forty-five (45) days as required by C.R.S. § 6-1-1306(3).
I will not discriminate against you for exercising your privacy rights. I will not deny you services, charge different prices, or provide a different level or quality of service because you exercised your rights under the CPA.
Because I provide services to clients worldwide via Zoom, you may have additional rights under your local data protection laws. This may include rights under the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act, Canada's PIPEDA, Australia's Privacy Act, or other applicable frameworks. I endeavor to honor the privacy rights of all clients regardless of location. If you are located outside of the United States, please contact me to discuss your specific rights.
International Data Transfers: If you are located outside of the United States, please be aware that your personal data will be transferred to and processed in the United States, where my business is based. I take reasonable steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which I process it.
I do not sell your personal data, as "sale" is defined under C.R.S. § 6-1-1303(23). I share personal data only as described below:
You can manage your cookie preferences through the cookie consent banner displayed when you first visit my website. You can also adjust your browser settings to refuse or delete cookies. Please note that disabling essential cookies may impact the functionality of my website and booking platform.
I retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
When personal data is no longer needed, I securely delete or de-identify it.
I implement reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction, consistent with my duty of care under C.R.S. § 6-1-1305(5). These measures include:
While I strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. I cannot guarantee absolute security, but I am committed to promptly addressing any data security incident in accordance with Colorado's data breach notification law, C.R.S. § 6-1-716.
My services are not directed to individuals under the age of eighteen (18). I do not knowingly collect personal data from minors. If I become aware that I have collected personal data from a minor without appropriate consent, I will take steps to delete that information promptly. If you believe I may have collected data from a minor, please contact me immediately.
In accordance with the CPA's enhanced protections for minors (effective October 1, 2025), if I know or have reason to believe that a consumer is a minor, I will use reasonable care to avoid any heightened risk of harm and will not process their data for targeted advertising, sale, or profiling without opt-in consent.
My website and communications may contain links to third-party websites, platforms, or services (including Zoom, payment processors, and social media platforms). This Privacy Policy does not apply to those third parties. I encourage you to review the privacy policies of any third-party services you use in connection with my services.
As required by C.R.S. § 6-1-1309, I conduct data protection assessments for processing activities that present a heightened risk of harm, including the processing of sensitive health-related data. These assessments evaluate the benefits and risks of processing, including risks to your rights, and identify safeguards to mitigate those risks. Documentation of these assessments is maintained internally and may be made available to the Colorado Attorney General upon request.
I may update this Privacy Policy from time to time to reflect changes in my practices, technology, legal requirements, or other factors. When I make material changes, I will:
I encourage you to review this Privacy Policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or my data practices, please contact me:
Alyssa Hill, Owner
Body-Led Living LLC
Contact Email: alyssa@bodyledliving.com
If anything in this policy is unclear, please reach out — I'm happy to answer questions.