Who This Policy Covers
This Privacy Policy explains how From Chaos Consulting Group LLC ("From Chaos," "we," "us") collects, uses, and protects information when you visit fromchaos.co or engage us for services. It does not apply to information we handle on behalf of a client practice under a signed Business Associate Agreement (BAA) — that information is governed by HIPAA and the terms of the applicable BAA, not this policy.
Information We Collect
We collect information you provide directly, including:
- Contact information submitted through our contact, intake, or referral forms (name, email, phone, practice name)
- Information shared during discovery calls or consultations
- Any documents or practice information you share with us in the course of an engagement
We do not knowingly collect protected health information (PHI) through this website. PHI shared during an active client engagement is handled under the terms of a signed BAA, not through website forms.
How We Use Information
- To respond to inquiries, schedule discovery calls, and evaluate potential engagements
- To deliver contracted services to clients
- To maintain records required for our own business, tax, and compliance purposes
We do not sell personal information, and we do not use it for advertising or marketing to third parties.
Third-Party Services
This site uses third-party tools to operate, including:
- Google Forms, for contact, intake, and referral requests
- Google Calendar, for scheduling discovery calls
- Google Fonts, for typography
These providers may process limited technical information (such as IP address) as part of standard operation. Review their respective privacy policies for details on how they handle data.
Data Retention
We retain contact and engagement information for as long as reasonably necessary to provide services, meet legal and tax obligations, and maintain accurate business records — generally for the duration of the client relationship and up to 7 years afterward, consistent with standard business recordkeeping practices.
Confidentiality & Security
All client engagements begin with a signed NDA, and a BAA wherever protected health information is involved. We take reasonable administrative and technical measures to protect information we handle, consistent with the sensitivity of that information.
Your Rights
Depending on where you're located, you may have rights to access, correct, or request deletion of your personal information — for example, under the California Consumer Privacy Act (CCPA/CPRA) if you're a California resident, or similar laws in other states. To make a request, contact us using the information below and we'll respond within a reasonable timeframe.
Children's Privacy
This site is intended for healthcare practice owners, clinicians, and business contacts. It is not directed at children, and we do not knowingly collect information from children through this site.
Changes to This Policy
We may update this policy from time to time. The "Last updated" date above reflects the most recent revision.
Contact Us
Questions about this policy can be directed to rebecca@fromchaos.co or 336-390-3751.