Privacy Policy

Shift Into Alignment, Inc.
Last updated: [September 29, 2026]

This Privacy Policy explains how Shift Into Alignment, Inc. (“Shift,” “we,” “us,” or “our”) collects, uses, and discloses personal information through shiftinto.co, Shift 1:1 coaching, the Shift Membership, The Shift 21-Day Transformation, our Circle community, and related content, events, and communications (the “Services”).

Our separate Consumer Health Data Privacy Notice explains how we handle health-related information protected by state law. Our Terms & Conditions govern purchases and participation. Accepting the Terms or reading either privacy notice does not replace any separate consent or authorization required by law.

1 Information we collect

Contact and account information. When you contact us, join a waitlist or mailing list, book a consultation, or enroll, we receive the information you provide, such as your name, email address, phone number, and account or profile information.

Forms, quizzes, and enrollment responses. We receive information you submit through Squarespace website forms and quizzes, Circle enrollment or membership questions, and the Shift 1:1 intake process. Depending on the form, this information may include contact information, interests, goals, personal circumstances, responses to questions, and other information you choose to provide.

Purchases and agreements. We receive information about purchases, plans, billing, payment status, bookings, subscriptions, refunds, and agreements you sign. Payment providers identified at checkout, including Stripe and payment services integrated with Circle, process the payment details you submit. Shift receives the transaction and billing information needed to administer your purchase.

Messages and submitted content. We receive messages directed to Shift, contact-form submissions, feedback, testimonials, and community contributions. We receive worksheets, reflections, or other materials when you choose to submit them. Completing a worksheet privately does not send its contents to Shift.

Coaching and wellness information. You may share personal circumstances, goals, or information about your emotional or physical well-being, symptoms, or treatment during coaching, program support, community activities, or messages to Shift. Our Consumer Health Data Privacy Notice describes how we handle this information when it is protected by consumer health data laws.

Coaching administration and notes. Shift maintains records concerning coaching clients, purchased packages, scheduled and completed sessions, communications, and coaching notes generated in connection with the Services.

Participation and technical information. The platforms delivering the Services process account activity, participation records, browser and device information, IP addresses, access times, and technical logs. Shift receives information made available through those platforms to administer the Services. Section 4 explains our providers’ roles.

Live calls and events. The host and other participants can see or hear the name, image, voice, questions, and contributions you share using the features you enable. Before Shift records or transcribes a session, we will explain its purpose and who will have access, and obtain any consent required by law. Shift does not currently record 1:1 coaching sessions. Certain Membership, expert, guest, or educational sessions may be recorded after advance notice and any consent required by applicable law. Approved recordings may be made available through Circle to the intended audience.

2 Where information comes from

We obtain information from you, your use of the Services, and providers that support your interactions with Shift. Examples include payment confirmations, bookings, and community submissions. If you contact Shift through social media or another external service, we receive the information supplied through that interaction. Another participant may provide information about you when reporting a community or safety concern.

3 How we use information

We use contact, account, purchase, and participation information to administer accounts, deliver purchased Services, schedule sessions, process transactions, manage subscriptions, and respond to requests. We use information you share with Shift to provide the coaching, support, or other participation you request.

We use technical information and feedback to maintain and improve the Services, troubleshoot problems, protect accounts, prevent fraud, and understand engagement. We use relevant information to moderate community spaces, enforce our Terms, keep required business records, and address legal obligations and disputes. Our Consumer Health Data Privacy Notice explains the additional restrictions on health-related information.

We use contact information to send account and service notices. We also send newsletters, event announcements, and information about Shift offerings, consistent with your choices and applicable marketing requirements. Section 8 explains how to unsubscribe.

4 Who receives information

Providers supporting the Services. We disclose information needed for website and community hosting, payments, scheduling, electronic signatures, video sessions, newsletters, email, document storage, forms, quizzes, and technical support. Circle supports community and content delivery; Stripe and payment services integrated with Circle support payments; Squarespace supports website hosting, forms, and quizzes; Notion supports internal records and service administration; Calendly supports scheduling; Zoom supports video sessions; Google Workspace, including Google Drive and Google Forms, supports email, calendar, forms, document storage, and form responses; Substack supports newsletters and essays; and electronic-signature providers support signed agreements. Providers receive information relevant to the functions they perform.

Shift uses providers to perform specified functions and applies contractual, access, and security restrictions as required by applicable law and the nature of the service. A provider may also process information for its own services, such as an account maintained directly with that provider. The provider’s own privacy notice explains that independent processing.

Participants and hosts. Content you post in a community space or share during an event is available to that audience. Messages you direct to a coach, host, or guest are available to that recipient and the providers delivering the interaction. Section 5 explains community visibility.

Promotional use and your directions. We will obtain separate affirmative permission before using your community posts or other submissions in advertising, external testimonials, or promotional materials. We also disclose information when you direct us to do so, subject to any additional consent requirements described in the Consumer Health Data Privacy Notice.

Advisers and legal matters. We disclose relevant information to legal and accounting advisers for their work, and in response to legal requirements or to address fraud, security incidents, and legal disputes. Disclosures of consumer health data are limited to the circumstances described in the Consumer Health Data Privacy Notice.

Business transactions. Information may be disclosed during a financing, merger, acquisition, reorganization, or transfer of the relevant business, with confidentiality protections and the limits required for the information involved. A successor must honor the obligations that apply to information it receives.

5 Community visibility and messages

Review the audience and available settings before posting or joining a live activity. A members-only space involves sharing with other people and does not guarantee confidentiality. Other participants may retain or disclose information despite community rules. Do not share another person’s private information without permission.

Messages sent to Shift can be accessed by the personnel and providers needed to respond or administer the interaction. Access to messages exchanged solely between members depends on the platform and its settings. Review the platform’s information about message privacy before sharing sensitive content.

6 Cookies and external services

The website and platforms delivering the Services use cookies and similar technologies for login sessions, preferences, transactions, security, and technical operation. You can limit or delete cookies through your browser settings, although this may affect functionality.

External websites, embedded media, social platforms, and payment services can collect information when you interact with them, including information about activity across websites or services. Their privacy notices describe their own collection and available controls. Section 4 explains the distinction between processing on Shift’s behalf and a provider’s independent processing. Contact hello@shiftinto.co with questions about privacy controls for the Services.

Shift does not currently sell personal information or use third-party advertising pixels for cross-context behavioral advertising. The Services and their providers may use operational cookies and built-in analytics to provide functionality, maintain security, and understand engagement. Shift will update this Policy and implement any legally required notice, consent, or opt-out mechanism before materially changing these practices.

7 Retention and protection

We retain personal information for as long as needed for the purposes described in this policy. The period depends on the information’s type and sensitivity, the Service involved, and applicable accounting, legal, security, and dispute-resolution requirements. We retain limited records of unsubscribe requests and other privacy choices so we can honor them.

Consumer health data is subject to the deletion requirements described in the separate notice, including required action by providers and limits on backup retention.

We will maintain reasonable administrative, technical, and organizational safeguards suited to the information we process. We limit access to personnel and providers who need the information for their authorized work. No system is completely secure. Protect your account credentials and notify us if you suspect unauthorized access.

8 Choices and privacy requests

Promotional email. Unsubscribe using the instructions in a promotional email or by contacting hello@shiftinto.co. We may still send messages needed for your account, purchase, security, or request.

Access and changes. You can contact hello@shiftinto.co to request access to, correction of, or deletion of information associated with you. You can also update information through available account settings. Tell us which account, information, or interaction your request concerns.

Rights under privacy laws. Your legal rights depend on the law that applies to you, Shift, and the information involved. These rights can include confirming whether information is processed; obtaining access or a portable copy; correcting or deleting information; withdrawing consent; and opting out of covered sales, advertising-related sharing, targeted advertising, or profiling used for decisions with legal or similarly significant effects. Our Consumer Health Data Privacy Notice explains rights concerning covered health information. Contact us at the email above to exercise a right that applies to you.

We may ask for information reasonably needed to verify your identity or an agent’s authority. Do not send medical records or identification documents unless we request them and they are needed. We will respond within the applicable legal deadline, explain any permitted denial or extension, and not unlawfully discriminate against you for exercising your rights.

If we deny a request and you have a legal right to appeal, reply to our decision or email hello@shiftinto.co with “Privacy Appeal” in the subject line. We will explain the outcome and provide regulator contact information when required.

9 Adults and processing locations

The Services are intended for individuals who are at least 18. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided information, contact hello@shiftinto.co so we can take steps to delete it.

Shift operates in the United States. Our providers may process information in the United States and other countries where they operate.

If you access the Services from outside the United States, your information may be transferred to and processed in the United States and other countries where Shift’s providers operate, which may have different data-protection laws from your country.

10 Policy changes

We may update this policy when our practices or legal requirements change. We will identify the effective date of an updated policy and provide additional notice of material changes when required. We will obtain any required consent before a new use or disclosure of information.

11 Contact

For questions or privacy requests, contact Shift Into Alignment, Inc. at hello@shiftinto.co.