1. Who We Are
Sprout Behavioral Health Services LLC ("Sprout," "we," "us") is a Wyoming limited liability company operated by a Board Certified Behavior Analyst. We provide digital educational products for parents and professionals, parent coaching, BCBA/BCaBA supervision, and organizational consulting.
This policy describes what personal information we collect, how we use it, who we share it with, and what rights you have.
Contact: info@SproutBHS.com
2. What We Collect
Information you provide directly
| Data | When collected | | --------------------------------------- | ---------------------------------------------------------------- | | Name and email address | Newsletter signup, account creation, product purchase | | Billing information | At checkout (processed by Stripe — we do not store card numbers) | | Mailing address | If required by Stripe for billing | | Communications | When you contact us by email or through the portal | | Coaching/supervision intake information | When you complete a pre-service intake form | | Scheduling information | When you book through Cal.com |
Information collected automatically
| Data | Source | | --------------------------------------- | -------------------- | | Pages visited, clicks, session duration | PostHog (analytics) | | Device type, browser, operating system | PostHog | | IP address | Server logs, PostHog | | Cookie identifiers | See §7 (Cookies) |
What we do not collect
We do not collect protected health information (PHI) through this site or portal. We do not collect a child's name, diagnosis, clinical history, behavioral data, or treatment records. Do not send this type of information through the site's contact form, portal messaging, or email. If you are a clinical services client, clinical data is handled through our third-party HIPAA-compliant platform — not through this site.
3. How We Use Your Information
We use the information we collect to:
- Fulfill product orders and deliver digital downloads
- Create and manage your member portal account
- Process payments through Stripe
- Send order confirmations and account notifications
- Send the Sprout email newsletter, if you opt in
- Schedule coaching or supervision sessions via Cal.com
- Analyze site usage and improve products and content
- Respond to support inquiries
- Comply with legal obligations
We do not use your information to make automated decisions that have legal or significant effects on you.
4. Legal Basis for Processing
For users who may be located in jurisdictions with formal legal basis requirements:
- Contract: to fulfill product purchases and service agreements
- Legitimate interest: analytics, security, and business operations
- Consent: email marketing (you can unsubscribe at any time)
5. Third-Party Data Processors
We share data with the following service providers only to the extent necessary for operations:
| Processor | Purpose | Data shared | | --------- | --------------------------------- | -------------------------------------------- | | Stripe | Payment processing | Name, email, billing address, payment method | | Supabase | Database and file storage | Account data, purchase records | | Resend | Transactional and marketing email | Name, email address | | Cal.com | Appointment scheduling | Name, email, availability | | PostHog | Product analytics | Usage data, IP address, device/browser | | Vercel | Website hosting | Server request logs | | Beehiiv | Email newsletter | Name, email address | | Mux | Video hosting (courses) | Playback session data |
We do not sell your personal information to third parties. We do not share your personal information with advertisers.
6. Data Retention
| Data type | Retention period | | --------------------------------- | ---------------------------------------------------------- | | Account and purchase records | 7 years (tax/legal requirement) | | Email subscriber records | Until you unsubscribe plus 1 year | | Analytics data | Retained per PostHog configuration (default 1 year) | | Support communications | 3 years | | Coaching/supervision intake forms | Per applicable state records requirement (minimum 5 years) |
When data is no longer needed, it is deleted or anonymized.
7. Cookies
The site uses cookies and similar tracking technologies for:
- Essential site functionality (session cookies, authentication)
- Analytics (PostHog — can be opted out)
We do not use advertising or cross-site tracking cookies. You can control cookie behavior through your browser settings. Disabling cookies may limit site functionality.
8. Security
We use industry-standard technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls on our database, and use of vetted third-party processors with their own security programs. No system is perfectly secure. If you believe your account has been compromised, contact us immediately at info@SproutBHS.com.
9. Children's Privacy
This site is not directed to children under 13. We do not knowingly collect personal information from children under 13. Products are purchased by parents, caregivers, and professionals — not by children. If you believe we have inadvertently collected data from a child under 13, contact us at info@SproutBHS.com and we will delete it.
10. Your Rights
Depending on where you live, you may have rights to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information (subject to legal retention requirements)
- Opt out of marketing emails (unsubscribe link in every email)
- Withdraw consent where processing is based on consent
To exercise any of these rights, email info@SproutBHS.com. We will respond within 30 days.
11. International Users
This site is intended for U.S.-based users only. We do not accept customers outside the United States at this time. If you are outside the U.S. and access this site, your information may be processed in the United States, where privacy laws may differ from your jurisdiction.
12. HIPAA Notice
Sprout does not operate as a HIPAA-covered entity through this website or portal. The digital product channel and member portal handle commercial and contact data only — not protected health information. All PHI related to any Sprout clinical client relationship is handled exclusively through a separate HIPAA-compliant platform, not this site.
If you have questions about how clinical data is handled, contact info@SproutBHS.com.
13. Changes to This Policy
We may update this policy. Material changes will be posted with a new effective date. Continued use of the site after a policy change constitutes acceptance.
14. Contact
Sprout Behavioral Health Services LLC
info@SproutBHS.com
SproutBHS.com