Privacy & Confidentiality | Courageous Steps

Confidentiality Statement

I, Katie Reginato Cascamo, take your confidentiality seriously. I am committed to keeping your personal information safe and secure in accordance with the General Data Protection Regulation (GDPR) and applicable privacy laws. This commitment extends to individuals in Europe, the United States, and around the world.

Lawful and Transparent Processing

I handle your personal information in a lawful, fair, and transparent manner, using it only for specific, legitimate purposes that are necessary to provide the services you have requested. I identify and document my legal basis for every processing activity I undertake.

Data Minimization

I collect and retain only the minimum amount of personal data necessary to deliver my leadership development, life coaching, and organizational consulting services. I do not collect data beyond what is required for these purposes.

Security and Protection

I implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction. My security practices are reviewed regularly to address evolving risks.

Your Rights Under GDPR

You hold meaningful rights regarding your personal data. These include the right to:

Access the personal data I hold about you

Correct inaccurate or incomplete data

Request deletion of your data (“right to be forgotten”)

Restrict or object to certain types of processing

Receive your data in a portable, machine-readable format

Withdraw consent at any time

Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact me directly using the information at the end of this page.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, I have documented response procedures in place. I will assess the situation promptly and notify the appropriate supervisory authority within 72 hours where required. Affected individuals will be notified without undue delay when there is a high risk to their rights and freedoms, in accordance with GDPR Articles 33 and 34.

Automated Decision-Making

I do not engage in automated decision-making or profiling that produces significant legal or similarly significant effects on individuals. If this practice is ever introduced, I will update this statement and provide appropriate disclosures and opt-out rights in accordance with GDPR Article 22.

Retention

I retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When data is no longer needed, it is securely deleted or anonymized.

Privacy Statement

Analytics

This website collects personal data to support site analytics, including:

Information about your browser, network, and device
Web pages you visited prior to arriving at this website
Your IP address

This information may also include details about your activity on this website, such as clicks, internal links visited, pages viewed, scrolling behavior, searches performed, and timestamps.

I share this information with Squarespace, my website analytics provider, to help me understand site traffic and activity. Squarespace processes this data in accordance with its own privacy practices. Where analytics cookies are used, I obtain your consent prior to activation through my cookie consent banner.

This website uses cookies and similar technologies — small files or pieces of text that download to your device when you visit a website or app.

Functional and required cookies are always in use; they allow Squarespace, my hosting platform, to securely serve this website. Analytics and performance cookies are only activated after you acknowledge my cookie consent banner. You may withdraw or adjust your cookie preferences at any time. For details about the specific cookies used on this site, please visit: The cookies Squarespace uses.

I am committed to ensuring that accepting or rejecting cookies requires equal effort — no dark patterns or pre-checked boxes.

Visitor and Purchase Data

When you make a purchase on this website, I collect personal information necessary to fulfill your order, which may include:

Billing and shipping address
Details relating to your purchase
Email address
Name
Phone number

I share this information with Squarespace, my online store hosting provider, solely so they can provide website services to me. During checkout, this site may use the Google Places API to auto-complete your shipping and billing address, improving the accuracy of your order information.

Member Site Data

When you subscribe to a membership on this website, I collect personal information to enable your member site access, which may include:

Billing and shipping address
Details relating to your subscription
Email address
Name
Phone number

I share this information with Squarespace, my website hosting provider, so they can deliver member site hosting services on my behalf. The Google Places API may be used during checkout to assist with address auto-completion.

Website Visitors

This website is hosted by Squarespace. When you visit, Squarespace collects certain personal data, including:

Information about your browser, network, and device
Web pages you visited prior to arriving here
Web pages you view while on this website
Your IP address

Squarespace requires this data to operate the website and to protect and improve its platform and services. Squarespace analyzes this data in a de-personalized form.

Social Share Buttons

This website includes share buttons that allow you to share content to LinkedIn, Instagram, and Facebook. When you click a share button, those third-party platforms may receive personal data including:

Information about your browser, network, and device
Details about the content you shared or proposed to share
Your IP address

I encourage you to review the privacy policies of LinkedIn, Instagram, and Facebook to understand how they use data shared through these features.

Third-Party Data Processors

Where I share your data with third-party service providers (including Squarespace and Google), I do so under contractual arrangements that require those providers to protect your data in accordance with GDPR standards. I do not sell your personal data to third parties.

International Data Transfers

I am based in the United States. If you are accessing my services from the European Economic Area (EEA) or elsewhere, please be aware that your data may be transferred to and processed in the United States. I rely on appropriate legal safeguards for such transfers, including Standard Contractual Clauses (SCCs) where applicable.

Questions & Data Requests

Katie Reginato Cascamo

Data Protection Officer

Organization Courageous Steps

Address P.O. Box 316, Lincoln, Arkansas, USA

Phone +1 479.900.1168

Email katie.reginato.cascamo@gmail.com