Privacy Policy

Last updated: May 29, 2026

This Privacy Policy explains how Livin La Vida LLC, doing business as Secure Nomad ("Secure Nomad," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with the website at securenomad.ai and the services we provide. We are a healthcare cybersecurity and HIPAA-compliance consultancy, and we treat privacy and data protection as core to what we do.

01Who We Are & Scope

Secure Nomad is the trade name of Livin La Vida LLC, based in Northwood, New Hampshire, United States. This policy applies to information we collect through securenomad.ai, our contact and scheduling forms, and our direct communications with you. It does not apply to third-party websites we link to, or to protected health information (PHI) we handle on behalf of a client under a Business Associate Agreement — see the HIPAA & Protected Health Information section below.

02Information We Collect

We collect only what we need to respond to you, schedule conversations, and operate the site.

Information you provide

• Contact & inquiry details — your name, email address, phone number, company or practice name, and the contents of any message you send through a form or by email.
• Scheduling information — when you book a call through our scheduling provider (Calendly), the details you submit to confirm a meeting, including name, email, and any context you add.

Information collected automatically

• Privacy-friendly analytics — we use Plausible Analytics, which is cookieless and does not collect or store personal data or cross-site identifiers. It reports aggregate, anonymized metrics (page views, referrer, country, device type).
• Server logs — our hosting provider may record standard technical data (IP address, browser type, timestamps) for security, abuse prevention, and reliability.

03How We Use Information

• To respond to your inquiries and provide information you request;
• To schedule and conduct consultations and scoping calls;
• To send you, where applicable, service-related communications about an engagement;
• To send the business owner internal SMS notifications about inbound meeting and call requests (see Section 04);
• To operate, secure, maintain, and improve the website;
• To comply with legal obligations and enforce our Terms & Conditions.

We do not sell your personal information, and we do not use it for third-party advertising.

05Cookies & Tracking

Our site is built to minimize tracking. We use Plausible Analytics, which does not set cookies and does not track you across sites or over time. We do not use advertising cookies, behavioral retargeting pixels, or third-party trackers. Any cookies that exist are strictly necessary for the site to function or for security (for example, those set by our hosting/CDN provider).

06How We Share Information

We share information only as needed to run the business, and only with service providers who are bound to protect it:

• Scheduling — Calendly, to book and manage meetings;
• Messaging — Twilio, to deliver the internal SMS notifications described in Section 04;
• Analytics — Plausible, for cookieless, aggregate metrics;
• Hosting & security — our website host and CDN provider;
• Legal & safety — when required by law, legal process, or to protect rights, property, and safety.

We may share information in connection with a merger, acquisition, or sale of assets, subject to this policy. We never sell personal information.

07Data Retention

We keep personal information only as long as necessary for the purposes described in this policy, to maintain business records, and to meet legal obligations. Inquiry and scheduling data is retained for the duration of our relationship and a reasonable period thereafter, then deleted or anonymized. Information governed by a client engagement is retained per that engagement's terms.

08How We Protect Information

As a security firm, we apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data — including encryption in transit (TLS), access controls on a least-privilege basis, and reputable vendors that maintain their own security and compliance programs. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit collection to what is necessary.

09HIPAA & Protected Health Information

Where Secure Nomad performs services that involve access to PHI on behalf of a covered entity or another business associate, that PHI is governed by a separate Business Associate Agreement (BAA) and the HIPAA Privacy and Security Rules — not by this website Privacy Policy. The BAA controls in the event of any conflict regarding PHI.

10Your Privacy Rights

United States (including California)

Depending on your state, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). To exercise any right, contact us using the details below; we will not discriminate against you for doing so.

European Economic Area, UK & equivalent (GDPR)

If you are in the EEA or the UK, you have rights to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. Our legal bases for processing are typically your consent, our legitimate interests in operating and securing the site and responding to inquiries, and compliance with legal obligations. You may withdraw consent at any time and have the right to lodge a complaint with your local data protection authority. Where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

11International Visitors

Secure Nomad is based in the United States. If you access the site from outside the U.S., your information may be processed in the U.S. and other countries whose data-protection laws may differ from your own. By using the site, you understand your information may be transferred and processed as described here, subject to applicable safeguards.

12Children's Privacy

The site is intended for business audiences and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the site after an update constitutes acceptance of the revised policy.

14Contact Us

Questions about this policy or your information? Reach out: