1. Who We Are
Sprout Behavioral Health Services LLC ("Sprout," "we," "us") is a Wyoming limited liability company operated by a Board Certified Behavior Analyst. We provide digital educational products for parents and professionals, parent coaching, BCBA/BCaBA supervision, and organizational consulting.
This policy describes what personal information we collect, how we use it, who we share it with, and what rights you have.
Contact: info@SproutBHS.com
2. What We Collect
Information you provide directly
| Data | When collected | | --------------------------------------- | ---------------------------------------------------------------- | | Name and email address | Newsletter signup, account creation, product purchase | | Billing information | At checkout (processed by Stripe — we do not store card numbers) | | Mailing address | If required by Stripe for billing | | Communications | When you contact us by email or through the portal | | Coaching/supervision intake information | When you complete a pre-service intake form | | Scheduling information | When you book through Cal.com |
Information collected automatically
| Data | Source | | --------------------------------------- | -------------------- | | Pages visited, clicks, session duration | PostHog (analytics) | | Device type, browser, operating system | PostHog | | IP address | Server logs, PostHog | | Cookie identifiers | See §7 (Cookies) |
What we do not collect
We do not collect protected health information (PHI) through this site or portal. We do not collect a child's name, diagnosis, clinical history, behavioral data, or treatment records. Do not send this type of information through the site's contact form, portal messaging, or email. If you are a clinical services client, clinical data is handled through our third-party HIPAA-compliant platform — not through this site.
3. How We Use Your Information
We use the information we collect to:
- Fulfill product orders and deliver digital downloads
- Create and manage your member portal account
- Process payments through Stripe
- Send order confirmations and account notifications
- Send the Sprout email newsletter, if you opt in
- Schedule coaching or supervision sessions via Cal.com
- Analyze site usage and improve products and content
- Respond to support inquiries
- Comply with legal obligations
We do not use your information to make automated decisions that have legal or significant effects on you.
4. Legal Basis for Processing
For users who may be located in jurisdictions with formal legal basis requirements:
- Contract: to fulfill product purchases and service agreements
- Legitimate interest: analytics, security, and business operations
- Consent: email marketing (you can unsubscribe at any time)
5. Third-Party Data Processors
We share data with the following service providers only to the extent necessary for operations:
| Processor | Purpose | Data shared | | --------- | --------------------------------- | -------------------------------------------- | | Stripe | Payment processing | Name, email, billing address, payment method | | Supabase | Database and file storage | Account data, purchase records | | Resend | Transactional and marketing email | Name, email address | | Cal.com | Appointment scheduling | Name, email, availability | | PostHog | Product analytics | Usage data, IP address, device/browser | | Vercel | Website hosting | Server request logs | | Mux | Video hosting (courses) | Playback session data |
We do not sell your personal information to third parties. We do not share your personal information with advertisers.
6. Data Retention
| Data type | Retention period | | --------------------------------- | ---------------------------------------------------------- | | Account and purchase records | 7 years (tax/legal requirement) | | Email subscriber records | Until you unsubscribe plus 1 year | | Analytics data | Retained per PostHog configuration (default 1 year) | | Support communications | 3 years | | Coaching/supervision intake forms | Per applicable state records requirement (minimum 5 years) |
When data is no longer needed, it is deleted or anonymized.
7. Cookies and Similar Technologies
We do not use advertising or cross-site tracking cookies, and we do not sell or share data with advertisers.
Strictly necessary — always active
These are required for the site to work and are not covered by the consent banner, because without them the service you asked for cannot be delivered.
| Purpose | Set by | | --------------------------------------------------- | ---------------------------------- | | Keeping you signed in | Supabase authentication | | Remembering your language | next-intl | | Blocking automated abuse of forms | Cloudflare Turnstile, Vercel BotID | | Processing a payment | Stripe, only during checkout | | Recording your cookie choice | This site | | Reporting application errors so faults can be fixed | Sentry |
Analytics and session recording — only with your consent
These do not run at all until you accept, and nothing is stored for them beforehand.
| Purpose | Set by | | -------------------------------------------------------- | --------------------- | | Which pages are visited, and how the site is used | PostHog | | Recording of a browsing session, used to diagnose faults | Sentry Session Replay |
You are asked once, on your first visit. Declining is a single click and changes nothing else about the site. You can change your mind at any time using Cookie settings in the footer, and withdrawing consent stops collection immediately and clears the stored analytics identifiers.
You can also control cookies through your browser settings, though disabling the strictly necessary ones will prevent signing in.
8. Security
We use industry-standard technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls on our database, and use of vetted third-party processors with their own security programs. No system is perfectly secure. If you believe your account has been compromised, contact us immediately at info@SproutBHS.com.
9. Children's Privacy
This site is not directed to children under 13. We do not knowingly collect personal information from children under 13. Products are purchased by parents, caregivers, and professionals — not by children. If you believe we have inadvertently collected data from a child under 13, contact us at info@SproutBHS.com and we will delete it.
10. Your Rights
Depending on where you live, you may have rights to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information (subject to legal retention requirements)
- Opt out of marketing emails (unsubscribe link in every email)
- Withdraw consent where processing is based on consent
To exercise any of these rights, email info@SproutBHS.com. We will respond within 30 days.
11. International Users
This site is intended for U.S.-based users only. We do not accept customers outside the United States at this time. If you are outside the U.S. and access this site, your information may be processed in the United States, where privacy laws may differ from your jurisdiction.
12. HIPAA and Clinical Information
Sprout does not operate as a HIPAA-covered entity through this website or member portal. This site is not where clinical care happens, and it is not where your clinical record lives.
What this site and portal hold
Contact details, newsletter preferences, purchase and download history, appointment times, billing records, portal messages, and brief non-clinical notes.
What they never hold
Diagnoses, assessment results, treatment plans, session notes, behavioral data about a child, or any other protected health information. The portal is download-only for digital products: completed data sheets and forms are never uploaded to it.
If you are a clinical client
Your clinical record, your intake forms, and the practice's Notice of Privacy Practices are handled through the separate HIPAA-compliant platform used to deliver your care, and are provided to you at intake. Nothing about your care is stored on this website.
The portal messaging feature carries a standing reminder not to send clinical information through it. If you do send something clinical by message or email, please raise it with us so it can be moved to the right system.
If you have questions about how clinical data is handled, contact info@SproutBHS.com.
13. Changes to This Policy
We may update this policy. Material changes will be posted with a new effective date. Continued use of the site after a policy change constitutes acceptance.
14. Contact
Sprout Behavioral Health Services LLC
info@SproutBHS.com
SproutBHS.com