Privacy Policy
Last updated: May 9, 2026
This Privacy Policy describes how BeyondYou, operated by Aya Luna LLC ("BeyondYou," "we," "us"), collects, uses, stores, and shares your personal information. It applies to your engagement with BeyondYou and to your use of walkbeyondyou.com.
What we collect
The practice runs on what you share with us. We collect personal information directly from you, in the following ways.
Booking and contact. When you book a Diagnostic, contact us through the website, or sign up for updates: name, email, phone number, and any message you send.
Intake form. Before we meet, we ask you to complete an intake form. This includes contact information, date of birth, address, emergency contact, occupation, medical history, current medications and supplements, allergies, surgeries and injuries, family medical history, recent physicals and bloodwork, activity level, exercise history, dietary patterns, alcohol and caffeine intake, sleep patterns, stress level, therapy history, current emotional state, why you are reaching out, and what you have tried before. You may also upload your bloodwork results and allergy test results.
Session and engagement data. During Diagnostic, Reset, and Ongoing engagements, we collect body measurements, workout records, the contents of your living plan, and observations from sessions.
Wearable and lab uploads. If you choose to share data from wearable devices or lab work, you upload these files to us directly. We do not pull data from third-party services automatically.
Payment information. Payments are processed through Stripe. Stripe collects and stores your payment card information directly. We do not store full card numbers. We do receive transaction confirmations and the billing name and email associated with each payment.
Messages. When you message us through WhatsApp, iMessage, or phone during an engagement, those conversations are part of the practice. We do not formally archive messages as deliverables.
Website use. Squarespace, our website host, collects standard analytics data, such as your IP address, browser type, pages visited, and approximate location. Stripe and Acuity Scheduling set cookies necessary for payment and booking. We do not use Google Analytics, Meta Pixel, or other third-party tracking.
How we use your information
We use your information to:
- Deliver the practice you have engaged us for.
- Coordinate care with our network partners, with your knowledge.
- Schedule sessions and communicate with you about your engagement.
- Process payments through Stripe.
- Send you updates, content, and information about BeyondYou's offerings, when you have opted in.
- Maintain records as required by law and for our own operational and legal needs.
We do not sell your personal information to anyone. We do not share it with advertisers.
Who we share with
Network partners. When you engage in the Reset or Ongoing, we share relevant information with the partners involved in your care: Rick Scott PhD, Rebecca Steiner at Be Well Natural Medicine, and Dr. Jessica Dzieszko. The information shared is what each partner needs to do their work for you. Partners are independent licensed practitioners and apply their own privacy practices to the information you share with them directly.
Service providers. We use the following third-party services to operate. Each holds your data only for its specific purpose:
- Squarespace (website, intake forms, scheduling): hosts our website and processes form submissions.
- Stripe (payments): processes payments and stores payment card data securely.
- Acuity Scheduling (booking): handles Diagnostic appointment booking.
- Google Workspace (email, document storage): stores your living plan, intake responses, uploads, and email correspondence.
Legal requirements. We may disclose information if required by law, court order, or to protect the safety of any person.
How we store your information
Your information is stored in our Google Workspace account, in Squarespace, and in Stripe and Acuity, depending on the data type. All providers are based in the United States. We apply reasonable security practices, including access controls and account-level protections, to limit who can see your information.
No system is fully secure. We cannot guarantee absolute security, but we treat your information with the care the practice itself depends on.
How long we keep your information
We keep your personal information for the duration of your engagement and for seven years after your engagement ends. This retention period reflects standard practice for health-adjacent services and California's statute of limitations for related claims.
After seven years, we delete or de-identify your information, unless a longer retention is required by law.
You may request earlier deletion at any time, subject to the limits described under "Your rights."
Your rights
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights regarding your personal information:
- Right to know what personal information we have collected about you, where we got it, why we use it, and who we share it with.
- Right to delete the personal information we have about you, with limited exceptions for information we are legally required to retain or that we need to complete a transaction.
- Right to correct inaccurate personal information.
- Right to opt out of sale of your personal information. We do not sell your information.
- Right to non-discrimination for exercising any of these rights. We will not refuse service, charge different prices, or change service quality because you exercised a right.
To exercise any of these rights, email info@walkbeyondyou.com from the address associated with your engagement, or write to us with enough information to verify your identity. We will respond within 45 days.
Marketing emails
When you provide your email address through the intake form, the contact form, or a newsletter signup, you may also opt in to receive emails from BeyondYou about new content, offerings, and updates. You can unsubscribe at any time using the link at the bottom of any marketing email, or by emailing us. Unsubscribing from marketing does not affect transactional emails related to your engagement, such as booking confirmations or invoices.
Cookies
Our website uses cookies set by Squarespace, Stripe, and Acuity Scheduling. These are necessary for the website, payment processing, and booking to function. We do not use third-party advertising cookies, Google Analytics, or social media tracking pixels.
You can disable cookies in your browser settings. Some parts of the website may not work as expected without cookies.
Children's privacy
BeyondYou is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.
Changes to this Privacy Policy
We may update this Privacy Policy as the practice evolves or as the law changes. The current version is always available at walkbeyondyou.com/privacy. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated to active clients in writing.
Contact
Questions about this Privacy Policy or about your personal information can be sent to info@walkbeyondyou.com.