Privacy Policy

The short version

• The only information you actively give us is what you type into the contact form: your name, email, what you're interested in, and your message.
• We use analytics to understand which pages are useful. Those tools never see what you type.
• We never sell, rent, or trade your information. There are no advertising trackers here.
• Contact-form submissions are automatically deleted after 24 months.
• You can ask us to delete your information at any time by emailing info@korilynnorth.com.

The sections below say the same thing with the detail a policy needs. Where a promise below is enforced by an automated check in our codebase rather than just good intentions, we say so.

Who we are

Healthy Home & Family is operated by Korilynn Orth, LLC, a Pennsylvania limited liability company. Korilynn Orth is the owner and the person who reads what you send. When this policy says "we," "us," or "our," it means Korilynn Orth, LLC.

This policy covers korilynnorth.com and its subdomains. It does not cover the third-party platforms we link to, such as Facebook, Instagram, LinkedIn, or TikTok — those have their own policies, and visiting them is between you and them.

What we collect

Information you give us

The contact form is the only place on this site where you can submit information. It collects:

• Your first and last name
• Your email address
• Which service or class you're interested in, chosen from a fixed list
• Your message, in your own words

All four fields are required. There is no account to create, no password to store, and no newsletter signup that quietly does something else.

Information collected automatically when you submit the form

To stop spam and abuse, we store two additional things alongside your submission: a one-way cryptographic hash of your IP address — a scrambled fingerprint that cannot be reversed back into the original address — and your browser's user-agent string, which identifies your browser and operating system. We never store your raw IP address.

The form is also protected by Cloudflare Turnstile, a privacy-preserving alternative to CAPTCHA that verifies you're a person without profiling you or making you identify traffic lights.

Information collected automatically as you browse

Our hosting provider, Cloudflare, keeps standard server logs for security and reliability. Analytics are described in their own section below.

Health information

We say this plainly because Korilynn Orth is a registered nurse, and people understandably assume that means the usual medical-privacy rules apply. They do not. This website is not a medical practice, Korilynn Orth, LLC is not a HIPAA-covered entity, and coaching is not medical care. Information you send through this site does not receive HIPAA protection.

That said, the message box is free text, and we know some people will volunteer more than they meant to. So we treat every message as if it might contain something sensitive:

• Your message is never written to our server logs — a check in our build pipeline fails if any code tries.
• Your message is never sent to any analytics tool.
• It is stored only so Korilynn can read it and reply, and it is deleted on the schedule described below.

Once you become a client, health information is handled under a separate agreement with appropriate safeguards. That is a different relationship from browsing this website.

Analytics and cookies

We use two analytics tools to understand which pages people find useful and where the site is confusing:

• Google Analytics 4 — counts page views and tells us roughly where visitors come from. We enable IP anonymization, so Google does not receive your full IP address.
• Microsoft Clarity — records anonymized interaction patterns (scrolls, clicks, rage-clicks) and builds heatmaps. We enable Clarity's global input masking, which means it never captures the text you type into any field, including the contact form's message box.

Both tools set cookies. Neither is used for advertising, retargeting, or building a profile of you across other websites, and we have not installed any advertising pixel. Because we don't sell data and don't advertise, we don't show a cookie consent banner. If we ever add advertising technology, this page changes first and a banner appears with it.

Analytics scripts load only on the public marketing pages. They are structurally prevented from loading on our content-management or form-submission endpoints by an automated check that blocks any code change violating it.

You can opt out of Google Analytics entirely using Google's browser opt-out add-on, or block both tools with any standard content blocker. The site works fine without them.

Videos

Videos on this site are hosted by Vimeo, but nothing loads from Vimeo until you click play. Until then, you see a still image served from our own server, and Vimeo does not know you exist. When you do click, we load the player with Vimeo's do-not-track flag enabled, which disables their session tracking and cookies.

Who we share it with

We do not sell, rent, or trade your personal information. We share it only with the service providers that make this site work, and only to the extent they need it:

• Cloudflare — hosting, our database, and bot protection.
• Resend — delivers the email notification that tells Korilynn you wrote in. Your name, email, interest, and message are in that email.
• Google and Microsoft — analytics, as described above.

We may also disclose information if we're legally required to — a subpoena, a court order — or if it's necessary to protect someone's safety or our legal rights. If Korilynn Orth, LLC is ever sold or merged, your information could transfer to the new owner, who would be bound by this policy until they told you otherwise.

How long we keep it

• Contact-form submissions: 24 months. Every submission is stamped with its own deletion date when it's created, and an automated job deletes expired ones. This is not a policy we remember to follow; it's a scheduled job that runs whether we think about it or not.
• Anti-spam records: about one hour. The hashed IP and email used for rate limiting are pruned automatically.
• Analytics data: retained by Google and Microsoft under their own retention schedules. We configure the shortest retention period each platform offers.

If you become a client, correspondence related to your engagement is kept under that engagement's terms, not this one.

Your choices and deletion

Email info@korilynnorth.com and we will:

• Tell you what information we hold about you
• Correct anything that's wrong
• Delete it

We'll do it within 30 days, and we won't make you explain why. We may need to confirm you are who you say you are before acting on a request — usually by replying from the email address on the submission.

Deleting a submission removes it from our database. It does not retract the notification email already delivered to Korilynn's inbox, though we will delete that too on request.

State privacy rights

We work with clients across the United States, and several states give residents specific privacy rights — including California, Colorado, Connecticut, Virginia, Utah, Texas, and others, plus Washington's My Health My Data Act and Nevada's health-data law.

Rather than parse which statute applies to you, we extend the same core rights to everyone: know what we hold, correct it, delete it, and get a copy of it. Use the email address above. We do not sell personal information or share it for cross-context behavioral advertising under any state's definition, and we do not use it to make automated decisions about you.

If you believe we've mishandled a request, you may appeal by replying to our response, and depending on your state you may also have the right to complain to your state attorney general.

Children's privacy

This site is intended for adults. We do not knowingly collect personal information from children under 13. Parents often write to us about their children — that's the nature of the work — and information you share about your child is treated the same as any other information in your message. If you believe a child has submitted information directly, email us and we'll delete it.

Security

The site is served over HTTPS, so everything you send is encrypted in transit. Your IP address is hashed before it's stored. Access to the database is limited to Korilynn and the site's developer. Our hosting and email providers encrypt data at rest on their infrastructure.

To be straightforward with you: contact-form messages are stored using our database provider's standard encryption at rest, not an additional layer of our own. We're building that additional layer for the client-facing system where real health information will live. Web-form messages shouldn't contain that in the first place, which is why we ask you not to send it.

No system is perfectly secure. If we ever discover a breach affecting your information, we will notify you and the relevant authorities as Pennsylvania law requires.

Medical-education disclaimer

Korilynn Orth is a Registered Nurse (RN, MSN), an Integrative Health Practitioner, and a Covenant Life Coach. Reading this website, watching a video, attending a class, or sending a message does not create a nurse-patient, practitioner-client, or any other professional relationship between you and Korilynn Orth or Korilynn Orth, LLC. Coaching is not the practice of nursing or medicine, and no content here is offered as clinical care.

Always consult your physician or another qualified healthcare provider before starting any diet, supplement, exercise program, or other change to your health routine, and before stopping or changing any prescribed medication. Never disregard professional medical advice, or delay seeking it, because of something you read here.

If you are experiencing a medical emergency, call 911 or go to your nearest emergency department immediately. Do not use this website's contact form to report an urgent medical concern; nobody is monitoring it around the clock.

Any statements on this site regarding supplements, functional lab testing, or nutritional protocols have not been evaluated by the U.S. Food and Drug Administration. Individual results vary. Testimonials describe one person's experience and are not a promise, guarantee, or prediction of what you will experience.

Changes to this policy

We'll update this page when our practices change, and we'll move the "last updated" date at the top. If a change materially affects how we handle information you've already given us, we'll email the address you provided rather than quietly editing this page.

Governing law

This policy and any dispute arising from it are governed by the laws of the Commonwealth of Pennsylvania, without regard to its conflict-of-laws rules. See our Terms of Use for the full agreement governing your use of this site.

Contact us