Privacy Policy
Effective date: November 1, 2026 · Last updated: November 1, 2026
This Privacy Policy explains how 108 North, LLC, doing business as Heirlūm ("Heirlūm," "we," "us," "our"), collects, uses, shares and protects personal information. It also explains the choices and rights you have.
1. Scope
This policy covers:
- myheirlum.com
- Our emails and newsletter
- Free and paid downloads
- Courses, workshops and printed products
- Consulting and coaching services
Together, these are the "Services." If you are a consulting client, your Service Agreement may add terms about how we handle information in your engagement. Where the two differ, the Service Agreement controls for that engagement.
2. Summary
- We collect what you give us, what our site and email tools record automatically, and what payment and ad partners report back.
- We don't keep your estate documents or the contents of your plan. If you're a consulting client, the planning information you share is held only while we prepare your plan, then returned to you or destroyed.
- We never ask for passwords or full account or ID numbers.
- We do not sell your personal information for money.
- We use the Meta pixel, which California law may treat as "sharing" for advertising. You can opt out (section 9.2).
- You can ask us to show you, correct or delete your information at hello@myheirlum.com.
3. Information we collect
3.1 Information you give us
Free guides and newsletter: email address and, if you choose, your first name. The first time you sign up, we also ask who you're planning for and how you heard about us. If you choose a reminder month for The yearly check-in, we store that month.
Purchases and accounts: name, email, billing address, order history and, for printed products, a shipping address and phone number. If you create a customer or course account, Squarespace stores your sign-in details; we never see your password. Card details go directly to Stripe. We never see or store your full card number.
Courses and workshops: enrollment details, course progress, and anything you share in a live session.
Free and paid guides: you fill these in yourself, on paper or on your own device. We never see what you write.
Consulting and coaching: contact and scheduling details, and your Service Agreement. To prepare your Life Continuity Plan, you may also share planning information with us, such as:
- Family members, executors, trustees and beneficiaries
- Where documents, accounts and insurance policies are kept (locations, not numbers)
- Health care wishes
- Information about a person who has died
- Copies of documents you choose to provide
- Session notes, and Zoom session recordings made with your consent
We hold planning information only while we prepare your plan. When your final plan is delivered or the engagement ends, we return it to you or destroy it (section 10).
Messages: anything you send us by email, form or phone.
3.2 Information about other people
Planning involves other people. In a message or a session, you might mention a parent, child, spouse, executor or advisor. When you tell us about someone else, you confirm you have the right to share it for planning purposes. We use it only to provide the Services to you.
3.3 Information collected automatically
When you visit the site or open our emails, our providers collect:
- IP address and approximate location (city or region)
- Browser and device type
- Pages viewed and the referring site
- Time on the site
- Whether you opened an email or clicked a link
This uses cookies, pixels and similar technologies (section 7).
3.4 Information from others
- Payment confirmations from Stripe
- Aggregated campaign results from Meta and Google
- Referrals from attorneys, advisors or other professionals, with your knowledge
4. Sensitive personal information
California law treats some information as "sensitive." We may hold two kinds:
- Account sign-in details, if you create a customer or course account. Squarespace stores them, and we never see your password.
- Health care wishes, if a consulting client chooses to include them in their plan. We hold them only while we prepare the plan, then return or destroy them with the rest of the planning information.
We never ask for passwords, Social Security or other ID numbers, or full financial account numbers. Please don't send them to us. If you do, we'll delete them.
We use sensitive information only to provide the Services you requested and to keep your account secure. We never use it for advertising or to infer characteristics about you.
5. How we use information
- To deliver guides, products, courses, workshops and services you request
- To process payments, fulfill orders and send receipts
- To run consulting and coaching engagements
- To send our newsletter and any reminders you ask for, until you unsubscribe
- To answer questions and provide support
- To understand which guides and pages are useful, and improve the Services
- To measure and improve our advertising (section 7)
- To protect against fraud, abuse and security incidents
- To meet legal, tax and accounting obligations and enforce our Terms
If we want to use personal information for a materially different purpose, we will update this policy first and, where required, ask for your consent.
6. Artificial intelligence
We use AI tools, including Anthropic's Claude and OpenAI's ChatGPT, across our work: to research, draft and edit our guides, emails and website, and to help us prepare materials for courses, workshops and consulting.
We don't enter your personal information or planning details into these tools, and none of it is used to train them or stored in them. If that ever changes, we will update this policy before it does.
7. Cookies, pixels and tracking
| Tool | What it does | Your choices |
|---|---|---|
| Squarespace | Runs the website and checkout. Sets essential cookies for security and site function | Required for the site to work |
| Google Analytics | Measures site traffic and how pages are used. If you decline analytics cookies, Google may still receive limited measurement signals without cookies or identifiers. | Cookie banner, or Google's opt-out add-on |
| Google reCAPTCHA | Checks that contact form submissions come from a person, not a bot | Required to submit the form |
| Meta pixel | Measures visits from Facebook and Instagram ads, and helps show our ads to people likely to find them useful | Cookie banner, Your Privacy Choices (section 9.2), Global Privacy Control, or Meta ad settings |
| Kit | Records whether emails are opened or links clicked | Unsubscribe link in every email |
| Stripe | Uses cookies at checkout to prevent fraud | Required to complete a purchase |
You can also block or delete cookies in your browser settings. Some parts of the site may not work without essential cookies.
Global Privacy Control and Do Not Track. We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of sale or sharing for that browser. There is no common standard for older "Do Not Track" signals, so we don't respond to those separately.
8. How we share information
8.1 Service providers
We share information with service providers that help us run the Services. They are bound by contract to use it only for that purpose.
| Provider | Purpose |
|---|---|
| Squarespace | Website hosting, customer accounts, forms, online store and cookie banner |
| Stripe | Payment processing |
| Kit (ConvertKit) | Email newsletter and subscriber management |
| Google Workspace (Drive, Gmail) | Email, and secure storage of business records and, temporarily, consulting planning information |
| Google Analytics | Website analytics |
| Google reCAPTCHA | Spam protection on our contact form. Google processes this information on our behalf only to provide and secure the service. |
| Zoom | Video sessions and workshops, including recordings made with consent |
8.2 Other disclosures
- People you direct us to share with, such as your attorney, advisor, or family members you name
- Legal requirements: to comply with law, a court order or a valid government request, or to protect the rights, property or safety of Heirlūm, our clients or others
- Business transfers: as part of a merger, sale, financing or reorganization, with notice to you before your information becomes subject to a different privacy policy
8.3 Selling and sharing
We do not sell personal information for money, and we have not done so in the past 12 months.
Meta. If you allow advertising cookies, the Meta pixel sends Meta device identifiers and the pages you visit on our site. Meta uses this under its own terms to measure our ads and show them to people likely to find them useful. Meta is not our service provider, and California law may treat this as "sharing" for cross-context behavioral advertising. You can opt out at any time (section 9.2).
We never sell or share sensitive personal information or consulting records. We do not knowingly sell or share the personal information of anyone under 16.
9. Your rights and choices
9.1 Choices for everyone
- Emails: unsubscribe using the link in any email, or write to us. We will still send transaction and service messages.
- Access, correction and deletion: write to hello@myheirlum.com. We honor these requests from all users, wherever you live, subject to the same exceptions California law allows (for example, records we must keep for tax or legal reasons).
9.2 Your Privacy Choices: opt out of sharing
You can stop the Meta pixel from sharing information about your visits. Any one of these works, and you don't need an account:
- Cookie Preferences. Choose "Decline all," or "Manage cookies" and turn off advertising cookies, in the cookie banner. If you've already made a choice, use the "Cookie Preferences" button at the bottom of any page to change it. This takes effect right away in this browser. Cookie Preferences
- Global Privacy Control. Turn on GPC in your browser or a browser extension. We honor it automatically for that browser.
- Email us. Write to hello@myheirlum.com with the subject line "Opt out." We'll apply it to the email address you give us and confirm within 15 business days.
Opting out in one browser doesn't carry over to other browsers or devices. Clearing your cookies can reset your choice; GPC doesn't have that problem.
9.3 California residents
California law gives you the right to:
- Know what personal information we collect, use and disclose, and to get a copy
- Delete personal information we collected from you, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information (section 9.2)
- Limit the use of sensitive personal information. We already use it only for permitted purposes, so no separate request is needed
- Not be discriminated against for using these rights
How to make a request: email hello@myheirlum.com with the subject line "Privacy Request," or write to the address in section 15.
We will confirm receipt within 10 business days and respond within 45 days. We may extend that once, by another 45 days, if we tell you why. To protect you, we will verify your identity by matching information we already hold.
You may use an authorized agent. We will ask for proof of the agent's authority and may confirm the request with you directly.
Categories collected in the past 12 months (California Consumer Privacy Act categories):
| Category | Examples | Collected | Disclosed to |
|---|---|---|---|
| Identifiers | Name, email, postal address, IP address | Yes | Service providers; Meta |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Phone, billing details, and for consulting clients, where financial and insurance records are kept | Yes; consulting details held temporarily | Service providers |
| Commercial information | Purchases, services requested | Yes | Service providers |
| Internet activity | Pages viewed, email opens and clicks | Yes | Service providers; Meta |
| Geolocation | Approximate location from IP address (not precise) | Yes | Service providers |
| Audio or visual | Consulting and workshop sessions recorded with consent | Yes | Service providers |
| Protected classifications | Age, marital status, medical condition, when shared for a plan | Consulting clients only, if they share it; held temporarily | Service providers |
| Sensitive personal information | Account sign-in details; health care wishes shared for a plan | Account holders; consulting clients only, held temporarily | Service providers |
| Biometric, education, employment, inferences | None | No | Not applicable |
Shine the Light. California residents may ask once a year whether we disclosed personal information to third parties for their own direct marketing. We do not.
10. How long we keep information
| Information | How long we keep it |
|---|---|
| Newsletter subscribers | While you're subscribed, and up to 12 months after you unsubscribe. Your email stays on a suppression list so you aren't emailed again |
| Purchase and payment records | 7 years, for tax and accounting |
| Consulting planning information (what you share to build your plan, document copies, session notes and recordings) | Only while we prepare your plan. Returned to you or destroyed when your final plan is delivered or the engagement ends |
| Consulting business records (Service Agreement, scheduling, correspondence) | 3 years after our last engagement |
| Messages and support requests | 3 years |
| Analytics data | According to each tool's settings (Google Analytics: 14 months) |
When we no longer need information, we delete it or de-identify it.
11. Security
We use reasonable administrative, technical and physical safeguards:
- Reputable providers with encryption in transit
- Two-step verification on our business accounts
- Access limited to the people who need it
- Consulting planning information returned or destroyed when the plan is complete
- Physical binders delivered only to the client or their designee
No method of storing or sending information is completely secure, so we can't guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.
12. Children
Our Services are for adults 18 and older. We do not knowingly collect personal information directly from anyone under 18. If you believe a minor gave us information directly, write to us and we will delete it.
13. Visitors outside the United States
Heirlūm is based in California and our Services are intended for U.S. residents. If you use them from elsewhere, your information will be processed in the United States, where privacy laws may differ from those in your country.
14. Changes to this policy
We may update this policy. We will change the "Last updated" date above. For material changes, we will notify subscribers and clients by email or with a notice on the site before the change takes effect.
15. Contact us
108 North, LLC, dba Heirlūm
Attn: Privacy
1968 S. Coast Hwy #6214
Laguna Beach, CA 92651
hello@myheirlum.com