Cole Lemaster LLC, DBA Finds You Well — Health & Wellness Coaching and Travel Advisory Services

Effective date: August 1, 2026

This Privacy Policy explains how Cole Lemaster LLC, doing business as Finds You Well ("we," "us," or "our"), collects, uses, shares, and protects your personal information when you visit our website at https://www.findsyouwell.co, engage our health and wellness coaching services, or engage our travel advisory services (together, the "Services"). By using our website or Services, you acknowledge this Privacy Policy. It works alongside — and does not replace — the separate service agreement that governs each service you purchase. If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at privacy@findsyouwell.co.

Summary of key points

This summary provides key points from our Privacy Policy, but you can find out more details about any of these topics by using the table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, whether you engage our coaching or travel advisory services, the choices you make, and the features you use.

Do we process any sensitive personal information? Yes, with your consent or as otherwise permitted by law. This includes health and wellness information you share in coaching, and passport or identification details you provide for travel bookings.

How do we process your information? We process your information to provide, personalize, and improve our Services, schedule and conduct coaching, research and book travel, process payments, communicate with you, maintain records, and comply with law. We process it only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We share information with the service providers and tools that help us operate, and — for travel clients — with travel suppliers and our host agency, Fora Travel, Inc. We do not sell your personal information.

How do we keep your information safe? We use reasonable administrative, technical, and physical safeguards. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

What are your rights? Depending on where you are located, applicable privacy law may give you rights regarding your personal information.

How do you exercise your rights? The easiest way is by submitting a data subject access request or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Table of contents

1. WHO WE ARE AND WHAT THIS COVERS

2. WHAT INFORMATION DO WE COLLECT?

3. HOW DO WE PROCESS YOUR INFORMATION?

4. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

7. HOW DO WE HANDLE YOUR HEALTH AND WELLNESS INFORMATION?

8. HOW DO WE HANDLE YOUR TRAVEL INFORMATION?

9. THIRD-PARTY WEBSITES AND TOOLS

10. HOW LONG DO WE KEEP YOUR INFORMATION?

11. HOW DO WE KEEP YOUR INFORMATION SAFE?

12. INTERNATIONAL USERS AND DATA TRANSFERS

13. DO WE COLLECT INFORMATION FROM MINORS?

14. WHAT ARE YOUR PRIVACY RIGHTS?

15. CONTROLS FOR DO-NOT-TRACK FEATURES

16. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

17. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

18. DO WE MAKE UPDATES TO THIS NOTICE?

19. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

20. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. Who we are and what this covers

We provide two distinct services: (1) health and wellness coaching, and (2) travel advisory services, which we offer as an independent travel advisor affiliated with Fora Travel, Inc. ("Fora"). This Privacy Policy applies to both services and to general use of our website. Each service is also governed by its own separate agreement, which you accept when you engage that service. Where a service agreement addresses a specific matter, that agreement controls for that service; this Privacy Policy governs how we handle your personal information.

2. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you express interest in our Services, engage our coaching or travel advisory services, participate in activities on our website, or otherwise contact us. The personal information we collect depends on how you interact with us and which Services you use. It may include:

  • Identity and contact information — such as your name, email address, phone number, and mailing address.

  • Health and wellness information (coaching clients) — information you choose to share with us in the course of coaching about your health, lifestyle, habits, goals, and general well-being. We treat this as sensitive.

  • Travel information (travel clients) — such as traveler names, dates of birth, passport or identification details, travel preferences, loyalty/membership numbers, and other details needed to research and book travel.

  • Communications — the content of emails, messages, intake forms, and scheduling information you provide.

  • Payment information — billing details. We do not personally store your full payment card numbers (see "Payment Data" below).

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

  • health and wellness information you share in coaching

  • passport or other government-issued identification numbers (travel clients)

Payment Data. We do not personally store your full payment card details. For coaching services, payments are made by invoice or through secure online payment processing, and payment data is handled and stored by our payment processors, which may include Squarespace, Found, and Square (see https://www.squarespace.com/privacy, https://found.com/legal/privacy, and https://squareup.com/us/en/legal/general/privacy). For travel bookings, your payment information is held securely by Fora within its platform as part of your client profile, and Fora processes travel-related payments (see Fora’s Privacy Policy).

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our website.

We automatically collect certain information when you visit, use, or navigate our website. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, information about how and when you use our website, and other technical information. This information is primarily needed to maintain the security and operation of our website, and for our internal analytics and reporting purposes.

The information we collect includes:

  • Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our website and which we record in log files. This may include your IP address, device information, browser type and settings, and information about your activity (such as date/time stamps, pages and files viewed, and actions you take).

  • Device Data. Information about the computer, phone, tablet, or other device you use to access our website, such as IP address, device and application identification numbers, browser type, hardware model, Internet service provider and/or mobile carrier, and operating system.

Google API

Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

3. How do we process your information?

In Short: We process your information to provide, personalize, and improve our Services, communicate with you, process payments, maintain records, and comply with law. We process your information only when we have a valid legal reason to do so, and for other purposes only with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To provide, personalize, and improve our Services. We process your information to deliver the coaching and travel advisory services you request and to improve how we provide them.

  • To schedule and conduct coaching sessions. We use your information to schedule, prepare for, and conduct coaching sessions and to create related notes and resources.

  • To research, book, and manage travel arrangements. For travel clients, we use your information to research options, make bookings, and manage your travel arrangements with suppliers and through Fora.

  • To process payments. We use your information to process payments for the Services through our payment processors and, for travel, through Fora.

  • To communicate with you and provide support. We use your information to respond to inquiries, provide support, and send administrative information such as changes to our terms and policies.

  • To send newsletters or updates. Where you have opted in, we may send newsletters or updates. You may opt out at any time.

  • To comply with our legal obligations. We may process your information to comply with our legal, tax, accounting, and regulatory obligations, and to exercise or defend legal claims.

  • To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.

4. What legal bases do we rely on to process your information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases:

  • Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.

  • Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.

  • Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

  • Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example, where collection is clearly in the interests of an individual and consent cannot be obtained in a timely way; for investigations and fraud detection and prevention; for business transactions provided certain conditions are met; if disclosure is required to comply with a subpoena, warrant, or court order; or if the information is publicly available and is specified by the regulations.

5. When and with whom do we share your personal information?

In Short: We share personal information only as needed to run our Services and as described in this section. We do not sell your personal information.

We may share your personal information in the following situations and with the following parties:

  • Service providers and tools. Such as scheduling software, payment processors, and secure communication or AI-assisted note tools that help us operate. These providers may access information only to perform services for us and are bound by contract to protect it.

  • Travel suppliers and Fora (travel clients). To complete travel bookings, we share necessary information with travel suppliers (such as hotels, airlines, cruise lines, and tour operators) and through Fora, our host agency, which processes travel payments and maintains its own privacy practices. Travel suppliers are independent third parties responsible for their own handling of your information.

  • Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

  • Legal and safety. When required by law, subpoena, or legal process, or when we reasonably believe disclosure is necessary to prevent illegal activity or a serious, imminent risk of harm.

We do not sell your personal information.

6. Do we use cookies and other tracking technologies?

In Short: We may use cookies and similar technologies to operate our site, remember your preferences, and understand how the site is used.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our website. Some online tracking technologies help us maintain the security of our site, prevent crashes, fix bugs, save your preferences, and assist with basic site functions. You can control or disable cookies through your browser settings, though some features may not function properly as a result.

Google Analytics

We may share your information with Google Analytics to track and analyze the use of our website. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

7. How do we handle your health and wellness information?

We treat the information you share with us in coaching as sensitive and protect it using reasonable safeguards. Coaching is not medical care and does not create a provider–patient relationship. Please note that the coaching relationship is not a legally privileged relationship (unlike, for example, the attorney–client or doctor–patient relationships), as further described in our Coaching Services Agreement. This Privacy Policy governs how we handle your information; where our Coaching Services Agreement addresses confidentiality, that agreement also applies.

8. How do we handle your travel information?

To research and book travel, we act as an independent travel advisor affiliated with Fora Travel, Inc. ("Fora"), our host agency. To complete your bookings, we share the information necessary with travel suppliers (such as hotels, airlines, cruise lines, and tour operators) and through the Fora platform, which processes travel payments and maintains its own privacy practices. We encourage you to review Fora’s Privacy Policy for how it handles data on its platform. Travel suppliers are independent third parties responsible for their own privacy practices.

Travel advisory services are also governed by a separate Travel Terms & Conditions agreement that you review and sign before we begin planning or booking.

9. Third-party websites and tools

Our website and Services rely on third-party tools and platforms that have their own privacy policies, including our scheduling software, payment processors, analytics providers, and the Fora platform. We are not responsible for the privacy practices of these third parties, and we encourage you to review their policies. Our website may also contain links to third-party websites that we do not control.

10. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). As a general matter, we retain health coaching records for six (6) years. We retain travel advising records for as long as needed to provide our Services and maintain our business records, unless you ask us to delete your information or applicable law requires otherwise.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

11. How do we keep your information safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We use reasonable administrative, technical, and physical safeguards designed to protect the security of any personal information we process. However, despite our safeguards, no method of transmission over the Internet or method of storage is completely secure, and we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

12. International users and data transfers

We are based in the United States. If you access our Services from outside the United States, your information will be processed in the United States under U.S. law, which may differ from the laws of your location. Where required by applicable law, we take steps to ensure appropriate safeguards for international transfers of personal information.

13. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction.

We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction, or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@findsyouwell.co.

14. What are your privacy rights?

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, (iv) if applicable, to data portability, and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time by contacting us using the contact details provided below. However, this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, the processing conducted in reliance on lawful grounds other than consent.

Opting out of marketing and promotional communications

You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in the emails we send, or by contacting us using the details below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send service-related messages necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

15. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

16. Do United States residents have specific privacy rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

Categories of personal information we collect

The table below shows the categories of personal information we may have collected in the past twelve (12) months. The table includes illustrative examples of each category. For a comprehensive inventory of all personal information we process, please refer to the section "WHAT INFORMATION DO WE COLLECT?"

CategoryExamplesCollectedA. IdentifiersContact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account nameYESB. Personal information as defined in the California Customer Records statuteName, contact information, education, employment, employment history, and financial informationYESC. Protected classification characteristics under state or federal lawGender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic dataYESD. Commercial informationTransaction information, purchase history, financial details, and payment informationYESE. Biometric informationFingerprints and voiceprintsNOF. Internet or other similar network activityBrowsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisementsYESG. Geolocation dataDevice locationNOH. Audio, electronic, sensory, or similar informationImages and audio, video or call recordings created in connection with our business activitiesYESI. Professional or employment-related informationBusiness contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with usYESJ. Education InformationStudent records and directory informationNOK. Inferences drawn from collected personal informationInferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristicsNOL. Sensitive personal InformationHealth data, passport or other government identification numbers, and the contents of communicationsYES

We only collect sensitive personal information as permitted by applicable law or with your consent. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

We will use and retain the collected personal information as needed to provide the Services or as follows:

  • Health coaching records: six (6) years.

  • Travel advising records: retained for as long as needed to provide our Services and maintain our business records, unless you ask us to delete your information or applicable law requires otherwise.

We may disclose personal information to service providers and travel suppliers pursuant to a written contract in order to provide our Services, as described in the section "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We have not sold or shared personal information for targeted advertising or other consideration in the preceding twelve (12) months, and we do not sell or share personal information belonging to website visitors, users, and other consumers.

Your rights

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

  • Right to know whether or not we are processing your personal data

  • Right to access your personal data

  • Right to correct inaccuracies in your personal data

  • Right to request the deletion of your personal data

  • Right to obtain a copy of the personal data you previously shared with us

  • Right to non-discrimination for exercising your rights

  • Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

How to exercise your rights

To exercise these rights, you can contact us by submitting a data subject access request, by emailing us at privacy@findsyouwell.co, or by visiting https://www.findsyouwell.co/contact. Upon receiving your request, we will need to verify your identity before responding. If you submit a request through an authorized agent, we may need additional information to verify your identity, and the agent will need to provide written permission to act on your behalf.

Appeals

If we decline to take action regarding your request, you may appeal our decision by emailing us at privacy@findsyouwell.co. If your appeal is denied, you may submit a complaint to your state attorney general.

17. Do other regions have specific privacy rights?

In Short: You may have additional rights based on the country you reside in.

Australia and New Zealand

We collect and process your personal information under the obligations and conditions set by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 (Privacy Act). At any time, you have the right to request access to or correction of your personal information by contacting us using the details in the section below.

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner and a breach of New Zealand’s Privacy Principles to the Office of New Zealand Privacy Commissioner.

Republic of South Africa

At any time, you have the right to request access to or correction of your personal information by contacting us using the details in the section below. If you are unsatisfied with the manner in which we address any complaint, you can contact the office of the regulator:

The Information Regulator (South Africa) — General enquiries: enquiries@inforegulator.org.za

18. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated effective date at the top of this Privacy Policy. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

19. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at privacy@findsyouwell.co or contact us through our contact form at https://www.findsyouwell.co/contact.

20. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please submit a data subject access request or contact us using the details in the section above.

Privacy Policy