The Anti-Legalese Promise.
Let's start by naming the bulls*hit.
Privacy policies are usually a joke. They are intentionally unreadable walls of legalese, designed not to inform you, but to protect the company that wrote them. They are a tool of obfuscation.
This is not that.
This is a human-to-human contract. It is our promise to you, written in plain English, about what information we collect, how we use it, and, most importantly, how we fiercely protect the sanctity of your story. At Enlitens, we believe that privacy is a clinical necessity, not a legal afterthought.
The TL;DR Summary.
Anonymous Data
No Creeping
We collect basic, anonymous website analytics (like page views) to make our site better. No creeping.
The Clinical Vault
HIPAA-Compliant Fortress
Your notes and records stay in our own chart, built for this practice alone. Google hosts it under a signed HIPAA agreement, and every record is encrypted with its own key. One key per record. Separate from everything else.
The Google Wall
BAA Protected
Our emails run on Google Workspace with a signed BAA (Business Associate Agreement). We do NOT store clinical data here.
Zero Data Selling
Ever. Period.
We will never, ever sell your data. Ever. We would rather burn the company to the ground.
The Full Breakdown.
1. The Data We Collect
We collect two kinds of information: the anonymous data you generate just by being here, and the personal data you choose to give us.
- Anonymous Website Data: Standard analytics to see which pages are helpful. We use this to be better helpers, not better marketers.
- Personal Data You Give Us: When you book a Fit Check, you give us name/email. We use this only to contact you.
- Your phone number, if you opt in: after you book, on your own client portal, or on your paperwork page, you can tick a box to get texts about your appointments. That box is the only way texts are turned on. We keep the number and your opt-in record only to send those texts. We do not share, sell, or hand phone numbers or opt-in data to any third party or affiliate, for any reason. Reply STOP to any text and the texts stop.
2. The Double Fortress
We have built a two-part fortress to protect your info:
The Clinical Vault (our own chart)
Where your PHI lives. Our own chart. Secure. Encrypted. Only your clinician has access.
The Operational Space (Google)
Where we email. Covered by strict HIPAA contracts (BAA). No clinical data lives here.
3. Lived Experience & Writing
You will see stories in our writing that feel real, because they are. We use the themes and patterns of our community.
We NEVER use specific, identifying client stories. We take the "what" of a struggle, strip it of all personal data, and use it to help others feel less alone.
4. Texts About Appointments
Texting is opt-in. Nobody gets a text from us without ticking the box on our booking page first, and that box says exactly what you will get: reminders about your session, and the video link or office address before it. A few texts around each appointment, no more.
Your phone number and your opt-in are used for those texts and nothing else. They are never shared with, sold to, or rented to third parties or affiliates. Texts never carry anything private about your care. Reply STOP at any time and they stop. Reply HELP and you get a way to reach us.
Last updated: September 6, 2026.
Transparency is not a buzzword here; it is a promise.
