1. Introduction

Jorba Counseling (“we,” “us,” “our”) is committed to protecting the privacy and security of the personal information of people who visit and register on our website, sign up for trainings or workshops, or otherwise engage with our services. 

​

This Privacy Policy describes how we collect, use, store, and — when necessary — share your personal data. It applies to all portions of our site, including the public pages, the private member/training portal, registration and payment forms, newsletters, and any other services we offer now or in the future.

​

By using or registering on our site, applying for trainings, purchasing services, or otherwise submitting your personal information, you agree to the terms of this Privacy Policy. If you do not agree with these terms, do not use the site or provide your personal information.

2. What data we collect

We may collect the following types of personal data:​

• Identity Data — first name, last name, any professional titles, credentials or certifications you provide, date of birth (if required for specific trainings or verifications).

• Contact Data — email address, mailing address, phone number.

• Billing/Financial Data — information necessary to process payments (e.g. via secure payment processor), though we will not store raw credit-card data on our servers longer than required for processing.

• Transaction Data — records of trainings or services you purchase, dates, amounts paid, status of payments.

• Profile Data — username/password if you create an account, preferences, feedback or survey responses, participation history, and other information you provide for your profile or membership/training record.

• Communications & Marketing Data — your preferences for receiving newsletters or other communications, any consents you give.

• Technical & Usage Data — data collected automatically when you interact with the website (e.g. IP address, browser and device type, referring/exit pages, date/time stamps, how you navigate the site, cookies or tracking-technologies).

We do not collect highly sensitive data by default (e.g. health diagnoses, psychotherapy notes, race/ethnicity, religious convictions, sexual orientation), unless you voluntarily provide such data for a specific purpose — in which case this data will be handled with additional care.

3. How We Collect Your Data

Your personal data may be collected in several ways:

• When you voluntarily fill out forms — e.g. registration for trainings, membership forms, purchase or payment forms, newsletter sign-ups, surveys, or contact forms.

• Automatically — when you use the website, through cookies or similar technologies, which gather technical and usage data.

• From third parties — for example, if you register via a third-party training coordinator or if certain referrals or verifications require additional information.

4. How We Use Your Data — Purpose & Legal Basis

We use your data to:

• Process and manage your registration, enrollment, payments, and delivery of trainings or services,

• Communicate with you about your account, trainings, scheduling, or other administrative matters.

• Send you relevant information — such as newsletters, updates, or promotional materials — only if you have opted in.

• Maintain and secure our website, including authentication, fraud prevention, troubleshooting, and analytics to improve functionality and user experience.

• Fulfill legal, tax, accounting, or compliance obligations.

We only use data for purposes compatible with the reason it was collected. If we want to use data for new, unrelated purposes, we’ll notify you and, where required, ask for additional consent.

5. Data Sharing and Disclosure

We will not sell, trade, or rent your personal information to unaffiliated third parties.

However, we may share or disclose your data when necessary to:

• Process payments (e.g. with payment processors or banks)

• Fulfill services (e.g. mailing training materials, coordinating trainings)

• Comply with law, regulation, or legal process (e.g. court orders, subpoenas, law-enforcement requests)

• Enforce our Terms of Service, manage disputes, or protect rights — including fraud prevention
   

If you participate in group trainings, certain basic identity or contact details (e.g. name, professional credential, general location) may be shared with training coordinators, instructors, or other participants — but only as needed for the functioning of the training.

We require any third parties with whom we share data to handle it according to confidentiality standards and our instructions.

We are not responsible for the privacy practices of external websites or services linked to from our site — you should review their policies before submitting any information to them.

6. Data Security

We take reasonable physical, technical, and administrative safeguards to protect your personal data from unauthorized access, disclosure, alteration or destruction. This includes:

• Encrypting sensitive data transmissions (e.g. payments)

• Restricting access to personal data only to those within our organization or authorized service-partners who need it to deliver services

• Encouraging or requiring secured passwords for protected accounts
   

That said, no method of electronic transmission or storage can guarantee 100% security. By using our site, you acknowledge there are inherent risks, and you agree to notify us immediately if you suspect unauthorized access to your account or data.

If a data breach occurs, we commit to following an appropriate breach-notification protocol and informing affected individuals if legally required.

​7. Data Retention & Deletion

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected — such as providing trainings or services, maintaining accounting records, or legal/regulatory compliance. You may request deletion of your personal data at any time. In such cases, we will erase or anonymize your data unless we are legally obligated to retain it (e.g. for tax, accounting, or compliance reasons). If data is anonymized (so that it can no longer be traced to you), we may keep and use it for statistical or research purposes.

8. Your Rights & Choices

Depending on your location and applicable law, you may have rights regarding your personal data, including:

• Accessing a copy of the data we hold about you

• Requesting correction of inaccurate or incomplete data

• Requesting erasure of data (to the extent we are not legally required to retain it)

• Objecting to certain processing (especially marketing)

• Withdrawing consent where we rely on it

• Requesting restriction of processing or data portability (where applicable)
   

If you wish to exercise any of these rights — or have questions or concerns about how we handle your data — contact us at: [your contact email].

We will respond to legitimate requests as promptly as we can; if a request is complex it may take additional time, but we will keep you informed.

9. Special Considerations for Minors & Sensitive Information

Our trainings and website are intended for adults (18+). We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13 without verified parental consent, we will delete that data.

If you voluntarily share sensitive information (e.g. health history, trauma, personal story) in contexts like trainings, workshops, or therapeutic conversations — this data is treated with heightened confidentiality, per our ethical and legal obligations as a therapeutic provider.

10. Special Considerations for Data Protection During Traiings

​I understand that:

• When I choose to share data in the training, that data is considered “made public” to the participants of the Training in the course of the Training, and is not confidential.

• I am in control of my own data (what information I choose to share, and the means by which I choose to share it).

• In the course of a Jorba Counseling training, I may be exposed to personal information shared by the course trainer or assistants/volunteers. I agree to hold this information in confidence as I would confidential information, whether it is shared in a practice exercise or in the course of contact with other team members, or participants, during or after the training course.

11. Changes to This Privacy Policy

We may update this Privacy Policy over time (e.g. to reflect new services, legal requirements, or changes in our practices). When we do, we will post the updated version on our website with a revised “Last Updated” date.

We encourage you to review this page periodically. Continuing to use our site or services after changes constitute your acceptance of the revised policy.

12. Contact Information

If you have any questions, concerns, or requests regarding your personal data or this policy, contact:

Jorba Counseling / Laia Jorba
Email: laia@jorbacounseling.com
Address:2737 Mapleton Av, Suite 201, Boulder, CO, 80304