Privacy Policy

Who we are

LMNL Health is operated by Keagan Barnes LLC, a California limited liability company. Keagan Barnes is the sole practitioner and the person responsible for the privacy practices described here.

Contact for privacy questions:
Keagan Barnes · keagan@lmnlhealth.com

What this policy covers

This policy explains what information LMNL Health collects when you use this website (lmnlhealth.com), submit the symptom quiz, become a member, or work with me through the Metabolic Alignment Protocol (MAP). It applies to data we control. It does not apply to data handled by third parties we work with (listed below), which are governed by their own privacy policies.

What we collect

We collect only what we need to serve you. Specifically:

Information you give us directly

• Name and email address (website forms, symptom quiz, membership signup, MAP enrollment)
• Symptom quiz responses (age range, symptoms, duration, prior lab history, readiness level)
• Anything you voluntarily share during coaching calls, messages, or email

Lab results (if you order through the LMNL LabShop)

• When you order labs through the LMNL Rupa LabShop, your results are processed by Rupa Health and its partner physician network (who signs the lab order). Those results are then made available in my Rupa practitioner dashboard so I can review them with you during coaching. I do not order the labs, I do not sign them off, and I do not provide clinical interpretation — but I do see the results and use them to inform your coaching plan.
• The data I see includes: the markers ordered, your results, Rupa's reference ranges, and the order/collection dates.
• By choosing to order through the LMNL LabShop, you're authorizing Rupa to share those results with me as your coach. You can revoke that authorization at any time through Rupa or by emailing me.

Information we generate about you in the course of coaching

• Notes on our conversations and sessions
• Observations and recommendations from lab reviews
• Coaching records (progress, check-ins, plans)

Information collected automatically

• Website usage — page views, approximate location (country/region only), referrer, browser type. Collected via Plausible Analytics (cookie-free, aggregate only) and Meta Pixel (cookies, used for ad attribution and retargeting on Facebook and Instagram). See the Cookies and tracking section below for details and how to opt out.

What we do not collect

• We do not use advertising cookies or retargeting pixels.
• We do not sell your data.
• We do not share your data for cross-context behavioral advertising.
• We do not collect precise geolocation, biometric data, government IDs, or financial account numbers.

Sensitive personal information

Under California law, health-related information is considered sensitive personal information. Coaching, by its nature, involves you sharing such information with me. I treat it with the care it deserves.

How I use your sensitive information: only to provide the coaching services you've signed up for. I don't use it for marketing, profiling, advertising, or any purpose other than serving you.

Your right to limit use: you can ask me to limit the use of your sensitive information to what's strictly necessary to deliver the service. Email keagan@lmnlhealth.com to make the request.

How we use your information

• To deliver the services you've signed up for (coaching, lab reviews, membership content)
• To send emails you've opted into (welcome sequences, program communications, content you've requested)
• To respond to your questions
• To improve the website and the coaching experience
• To meet legal obligations

We may use website activity data — collected via Meta Pixel — to show you relevant LMNL Health ads on Meta platforms (Facebook, Instagram), and to measure ad performance. We do not use your information for automated decision-making, profiling, or sharing with third-party advertisers. You can opt out of this — see Cookies and tracking below.

Who we share information with (subprocessors)

We work with a small number of vetted third-party providers to operate the business. Each has their own privacy policy and their own security practices. We share the minimum necessary information with each:

Provider	What they do	What we share
Google Workspace	Business email (keagan@lmnlhealth.com)	Email correspondence
GoHighLevel (GHL)	CRM + email workflows + client records	Name, email, quiz responses, pipeline stage
Mailgun	Outbound email delivery (via GHL)	Email address + message content
Stripe	Payment processing	Billing name, email, payment info (we never see your card number)
Rupa Health	Lab ordering + results platform	If you use our LabShop, you create an account with Rupa directly. Your lab results are made available to me through my Rupa practitioner dashboard so I can review them with you.
Everfit	Client content delivery (membership + MAP)	Name, email, program assignments
Plausible Analytics	Website analytics	No personal data — aggregate usage only
Meta Platforms (Facebook, Instagram)	Advertising attribution + retargeting (via Meta Pixel)	Page views, button clicks, and conversion events. May include IP address, browser data, and a Meta-assigned identifier. Used to measure ad performance and to show you relevant ads.
Netlify	Website hosting + DNS	Standard server logs

If a medical partner is involved (Medical Partner Coordination): your clinical relationship with them is separate from your coaching relationship with me. They collect and handle your medical data under their own privacy practices and HIPAA obligations. For me to exchange information with them about your care, we'll ask you to sign a specific written authorization at that moment — a general acceptance of these terms is not enough to authorize the sharing of medical information under California law.

We do not share your information with anyone else unless required by law, required to respond to a legal process, or necessary to protect our rights or the safety of someone.

How long we keep your information

We keep your information only as long as needed to provide you with services and meet our legal or operational obligations. We don't set a fixed, arbitrary retention period — instead we use these criteria:

• Active coaching records and lab data: retained while you're a client and for a reasonable period after, so that we can support you if you come back, respond to follow-up questions, or meet any legal or tax recordkeeping requirements.
• Quiz submissions that don't lead to further engagement: retained while they might reasonably be useful (to re-engage you if you're interested, or to understand how the quiz is performing), then deleted.
• Email list: until you unsubscribe. After unsubscribing, your email stays on a suppression list only, so we don't accidentally email you again.
• Payment records (via Stripe): retained by Stripe per their retention policy. We retain the receipt/billing record as needed for tax and accounting.
• Website analytics: aggregate only, retained per Plausible's retention schedule. No personal identifiers.

You can ask us to delete your data at any time. Email keagan@lmnlhealth.com with the subject "Delete my data." We'll confirm receipt and complete the deletion on a best-effort basis (typically within 30 days). Some records may need to be retained to meet legal or tax requirements — if so, we'll tell you which and why.

Your rights (California residents and beyond)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to:

• Know what personal information we've collected about you, where it came from, why we collected it, and who we shared it with.
• Delete your personal information (with some legal exceptions — e.g., we may need to retain records of completed transactions).
• Correct inaccurate personal information.
• Opt out of sharing your information for cross-context behavioral advertising. We use Meta Pixel for ad attribution and retargeting — to opt out, see Cookies and tracking below, or email keagan@lmnlhealth.com with the subject line "Do not sell or share my personal information."
• Opt out of the sale of your information. (We don't sell information.)
• Limit the use of your sensitive personal information to what's necessary to deliver the service.
• Non-discrimination — we won't deny service, charge different prices, or provide different quality of service because you exercised a right.

To exercise any of these rights, email keagan@lmnlhealth.com with the subject line "Privacy request." We'll verify your identity (usually by confirming the email address on file), and respond within 45 days. If we need more time, we'll tell you why.

You can also authorize an agent to make a request on your behalf. We'll ask for written authorization.

If you're outside California: we extend these rights to everyone, regardless of where you live.

Cookies and tracking

This site uses two tracking tools:

• Plausible Analytics — cookie-free, aggregate only. No personal identifiers, no cross-site tracking. No consent required.
• Meta Pixel — cookies. Used for ad attribution and retargeting on Facebook and Instagram. Activity on this site may inform what LMNL Health ads (and other Meta-network ads) you see.

How to opt out of Meta Pixel:

• Email keagan@lmnlhealth.com with the subject line "Do not sell or share my personal information". We will exclude your activity from Meta-related processing going forward.
• Use Meta's own ad-personalization controls at accountscenter.facebook.com/ad_preferences to limit how Meta personalizes ads to you across the web.
• Install a tracking-blocker browser extension (e.g., uBlock Origin, Privacy Badger, or your browser's built-in tracker protection).

The booking subdomain (book.lmnlhealth.com) embeds scheduling widgets from GoHighLevel, which may set functional cookies required for the booking flow to work. See GoHighLevel's privacy policy for details.

Children

LMNL Health is not for children. We do not knowingly collect information from anyone under 18. If you believe a minor has submitted information to us, email keagan@lmnlhealth.com and we'll delete it.

Security

We use reasonable administrative and technical safeguards to protect your information. All subprocessors listed above maintain industry-standard security practices. No system is perfectly secure — if a breach ever affects your data, we'll notify you as required by California law.

Changes to this policy

If we make material changes to this policy, we'll post the updated version here with a new "Last updated" date. If the change affects how we use information you've already given us, we'll email you before the change takes effect.

Contact