We treat your information the way we treat a patient document: carefully.

Gaulden Advisory (“the firm,” “we,” “us”) is a boutique healthcare communications advisory practice led by LaShon Moton, LPN. This policy applies to this website and to the client-facing workspaces we provide during an engagement, including proposal, questionnaire, invoice, and package fulfillment links.

This page is maintained by Gaulden Advisory to answer common privacy questions about how the site and client workspaces operate. It is a description of our current practices, not a certification or an audit result.

We only ask for what a professional engagement actually requires.

• Consultation requests: your name, email address, organization, role, area of interest, timeline, and the message you write.
• Resource downloads: your name and email address, along with the resource you requested.
• Discovery questionnaires: the organizational and project responses you choose to enter.
• Proposals and agreements: the name you type to accept a proposal, and the date and time of that acceptance.
• Client portal accounts: your email address, the name and organization on your profile, and an optional phone number.
• Engagement and package workspaces: messages you send us, and documents or source files you upload for review.
• Payments: your billing details are entered directly with our payment processor. We receive a confirmation, an amount, and a payment reference — never your full card number.

The site is intentionally quiet. We do not run advertising trackers, retargeting pixels, or third-party marketing cookies. Our hosting and infrastructure providers keep standard technical logs — such as request times, IP addresses, and error records — for security, abuse prevention, and reliability.

Cookies and browser storage are used only for functional purposes: keeping you signed in to the client portal and completing a secure payment. Signing out clears your session.

• To respond to a consultation request and prepare for that conversation.
• To deliver the resource, proposal, questionnaire, invoice, or deliverable you asked for.
• To perform the engagement itself — reviewing materials, drafting content, and returning work for your approval.
• To send transactional email: confirmations, proposal and invoice notifications, receipts, and fulfillment updates.
• To maintain business records, including signed proposals and paid invoices.
• To protect the security and integrity of the site and client workspaces.

We do not sell your information, rent it, or share it with data brokers. We do not use what you submit to train external artificial intelligence models.

This website is not a channel for protected health information. Please do not submit patient identifiers, medical records, or any individually identifiable health information through the consultation form, resource signup, questionnaires, or portal messages.

When an engagement genuinely requires access to protected health information, that access is governed by a separate written agreement — including a business associate agreement where one is required — with defined handling, transmission, and disposal terms. Ask us about it before sending anything sensitive.

The materials we typically review — patient education drafts, consent language, plain language rewrites, clinical accuracy checks — should be de-identified before they reach us.

If your organization needs a business associate agreement in place first, you can request a BAA and sign it electronically before any protected health information is shared.

We work with a small number of vetted providers who process information strictly on our instructions:

• Application hosting, database, authentication, and encrypted file storage for the site and client workspaces.
• Transactional email delivery for confirmations, notifications, and receipts.
• Payment processing for card payments on invoices and defined engagement packages.
• Sign-in with Google, if you choose that option, which shares your basic account identity with us.

These providers may process data outside your state. We ask them to keep information confidential, use it only to provide their service, and protect it with appropriate safeguards.

• Traffic to the site and all client workspaces is encrypted in transit.
• Client portal access requires authentication, and administrative functions are restricted to firm accounts by role.
• Proposal, questionnaire, invoice, and package workspace links use long unguessable tokens, and uploaded files are served through short-lived signed links rather than public URLs.
• Access to client records inside the firm is limited to the people performing the engagement.

No system can promise perfect security. If an incident affects your information, we will investigate promptly and notify you as required by applicable law.

Consultation requests and engagement records are kept for as long as needed to serve you and to satisfy our professional, tax, and contractual record-keeping obligations. Signed proposals, invoices, and payment references are retained as business records. Working files and uploaded source materials are retained for the life of the engagement and a reasonable review period afterward, then removed.

If you would like your inquiry, subscriber record, or engagement files removed earlier, write to us and we will do so unless a record must be kept by law.

• Request a copy of the information we hold about you.
• Ask us to correct anything inaccurate in your profile or engagement record.
• Ask us to delete an inquiry, a subscriber record, or engagement files we are not required to keep.
• Unsubscribe from resource emails at any time; transactional messages tied to an active engagement will continue.
• Decline to provide optional details — a consultation only requires a name, email, and what you need.

Depending on where you live, you may have additional rights under state or national privacy law. We honor those requests without requiring you to give up service.

This site is intended for healthcare organizations and professional audiences. It is not directed to children, and we do not knowingly collect information from anyone under sixteen.

If this policy changes materially, we will update the effective date above and, for active clients, note the change in writing. This version is effective August 3, 2026.

Questions, requests, or concerns: lashon@gauldenadvisory.com. You can also begin the conversation or read our terms of service.