Operated by: She Writes, She Reigns, LLC, doing business as The Open Practice Academy (“TOPA,” “we,” “us,” or “our”)
Mailing address: 5900 Balcones Drive Ste 100, Austin, TX 78731, United States
Contact: info@theopenpracticeacademy.com
Effective Date: August 13th, 2026
Privacy Policy URL: https://www.theopenpracticeacademy.com/privacy-policy 

​

1. Scope of This Policy

This Privacy Policy explains how TOPA collects, uses, discloses, retains, and protects personal information in connection with:

• The TOPA website and related websites, landing pages, and forms;

• Service inquiries, discovery calls, proposals, and vendor onboarding;

• Practice Cartography;

• Custom Learning Pathways;

• Specialist Support;

• Website Clarity + Content Revision;

• Workshops, webinars, talks, and asynchronous learning;

• Belong & Return services and products;

• The Open Practice Dialogue Club;

• TOPA Community and Practice Circle subscriptions;

• Future digital or tangible products;

• Communications, payments, scheduling, community platforms, and service delivery; and

• Other TOPA programs, products, or services that link to or reference this Policy.

This Policy applies to website visitors, prospective clients, client representatives, clients, community members, Dialogue Club participants, Practice Circle subscribers, workshop participants, learners, service users, purchasers, and other individuals who interact with TOPA.

This Policy does not replace:

• A client organization’s own privacy notice;

• A separate participation policy or community agreement;

• A separate data-processing addendum;

• The privacy policy of a third-party service provider; or

• The privacy policy of Boomerangme, Inc. or another platform provider.

2. Definitions

For purposes of this Policy:

“Client Organization” means a business, school, library, nonprofit, government entity, institution, or other organization that purchases or receives TOPA services.

“Member Data” means personal information concerning a Client Organization’s members, donors, alumni, customers, students, families, volunteers, participants, or other individuals that the Client Organization provides to or makes available through a TOPA service, including Belong & Return.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable individual.

“Service Provider” means a person or organization that processes information to provide services to TOPA or a Client Organization under a written agreement or other confidentiality and use restrictions.

3. Information We Collect

The information TOPA collects depends on how you interact with us.

3.1 Information You Provide Directly

We may collect:

• Name, preferred name, job title, and organization;

• Email address, telephone number, mailing address, and other contact details;

• Account credentials and profile information;

• Information submitted through contact forms, booking forms, surveys, applications, and registration forms;

• Discovery-call information, including organizational goals, project needs, budgets, timelines, and service preferences;

• Information included in proposals, statements of work, client agreements, vendor forms, W-9 or procurement materials, and related communications;

• Billing and transaction information;

• Accessibility, scheduling, dietary, or participation information voluntarily provided for an event or program;

• Content, files, documents, branding materials, artwork, logos, curriculum, or other materials provided for service delivery;

• Communications and correspondence with TOPA;

• Community posts, comments, questions, responses, and feedback;

• Information submitted when requesting a privacy, data export, correction, or deletion request; and

• Other information you choose to provide.

Please do not provide Social Security numbers, government identification numbers, payment-card numbers, bank-account credentials, health information, or other sensitive information unless TOPA expressly requests it through a secure and approved process.

3.2 Information Collected Through Payments

When you purchase a service, subscription, event, or product, TOPA may collect:

• Purchaser name and contact information;

• Organization and billing details;

• Product or service purchased;

• Transaction amount, payment status, invoice information, and refund information; and

• Shipping and delivery information for tangible products, if applicable.

Payment-card and bank-account information is processed by third-party payment processors. TOPA does not intentionally store complete payment-card numbers or bank-account credentials on its own systems.

Payment processors may maintain their own privacy notices and may process information under their own terms.

3.3 Information Collected Through Scheduling and Booking Systems

If you schedule a discovery call, consultation, workshop, or other appointment, TOPA or its scheduling provider may collect:

• Name and contact information;

• Appointment type, date, time, and time zone;

• Responses to intake questions;

• Accessibility or accommodation requests;

• Meeting links and attendance information; and

• Communications related to the appointment.

3.4 Information Collected Automatically

When you visit a TOPA website or use certain online services, TOPA or its providers may automatically collect:

• Internet Protocol address;

• Browser type and version;

• Device type and operating system;

• Approximate location derived from an IP address;

• Referring and exit pages;

• Pages, content, links, and features accessed;

• Date, time, and duration of visits;

• Website interaction data;

• Cookie identifiers and similar technologies; and

• Error, diagnostic, and performance information.

TOPA may use analytics and website tools to understand website performance, improve accessibility and usability, and evaluate whether content is useful to visitors.

3.5 Information Received from Other Sources

TOPA may receive information from:

• A Client Organization or authorized representative;

• A referral partner;

• A procurement, grant, or vendor-registration system;

• A payment, scheduling, learning, community, email, or platform provider;

• A publicly available professional or organizational source; or

• Another person who contacts TOPA on your behalf.

When legally required, TOPA will provide additional notice regarding information received from sources other than the individual.

4. Belong & Return Member Data

Belong & Return is a TOPA service that may help Client Organizations support recognition, participation, communication, belonging, and return through a digital platform.

4.1 Roles and Responsibilities

For Member Data:

• Belong & Return is a TOPA service name, not a separate legal entity.

• The Client Organization generally determines why Member Data is collected and how it will be used.

• The Client Organization is generally responsible for providing legally required notices and obtaining required consents or permissions from its members, donors, alumni, customers, students, families, volunteers, or other participants.

• TOPA may access or process Member Data only as necessary to configure, implement, manage, support, report on, or provide other agreed services for the Client Organization.

• The underlying third-party application used for Belong & Return services may be BoomerangMe, which is operated by Boomerangme, Inc., a Delaware corporation, registered at 24A Trolley Square, Unit #4087, Wilmington, DE 19806, United States (the “Platform Provider”), as identified in the applicable service materials and platform agreements.

• The legal roles of the Client Organization, TOPA, and the Platform Provider may vary depending on the service, applicable law, and the contracts governing the relationship.

TOPA does not use Member Data for its own independent marketing purposes, sell Member Data, or use Member Data to train external artificial-intelligence models.

The Client Organization remains responsible for its own privacy notice, lawful basis, consent practices, communications permissions, data-subject responses, and compliance obligations relating to its participants.

4.2 Categories of Member Data

Depending on the Client Organization’s configuration, Member Data may include:

• Name or preferred name;

• Email address or telephone number;

• Organization or membership information;

• Participation, attendance, visit, volunteer, donor, alumni, or loyalty activity;

• Communication preferences;

• Referral or peer-advocacy information;

• Feedback and responses;

• Dates or milestones associated with participation; and

• Other information the Client Organization elects to upload or collect.

4.3 Prohibited or Restricted Member Data

TOPA’s Belong & Return service is not designed for the collection or storage of:

• Social Security numbers or other government-issued identification numbers;

• Payment-card, bank-account, or financial-account information;

• Health, medical, insurance, or protected health information;

• Biometric or genetic information;

• Precise geolocation;

• Passwords or authentication secrets;

• Information concerning criminal convictions or offenses;

• Sensitive personal information revealing protected characteristics or intimate life;

• Information about children under 13; or

• Other information subject to heightened legal, contractual, or industry requirements,

unless expressly approved in writing by TOPA after appropriate legal, technical, and contractual review.

TOPA may require removal or deletion of information submitted in violation of this section.

4.4 Third-Party Platform

Belong & Return is TOPA’s service name. Belong & Return services may use the BoomerangMe application operated by Boomerangme, Inc., a Delaware corporation, registered at 24A Trolley Square, Unit #4087, Wilmington, DE 19806, United States (the “Platform Provider”). The Platform Provider’s published legal materials (including its Terms of Use, Privacy Policy, acceptable-use materials, and other posted terms) may govern the Platform Provider’s collection and processing of information on its systems.

Important notice (public-vendor-information only; no warranties): The disclosures in this Section 4.4 summarize information that TOPA understands to be reflected in the Platform Provider’s publicly available materials as of the date this Policy draft is prepared. These disclosures are not warranties, guarantees, or representations by TOPA about the Platform Provider’s systems, practices, or compliance, and they do not replace review of the then-current Platform Provider terms and any attorney-approved contract documents.

Based on TOPA’s review of publicly available materials, the Platform Provider’s published legal materials:

• Do not provide a discrete, named list of subprocessors;

• Do not identify a specific cloud provider or data-center location(s);

• Do not specify a fixed retention or deletion period applicable to all customer data;

• Do not provide a standalone public data-processing addendum (DPA) with detailed GDPR/processor terms for customer execution;

• Do not identify a named messaging carrier; and

• Do not identify a specific security certification.

The Platform Provider’s publicly available materials expressly identify Stripe as a payment processor for the Platform Provider. Separately, TOPA may use its own payment processors for TOPA invoices and payments. Stripe and other payment processors maintain their own privacy notices and may process information under their own terms.

The Platform Provider’s publicly available materials state that data is processed, transferred, and stored in and to the United States. EEA/UK data processing requires additional review: if TOPA or a Client Organization intends to process EEA/UK personal data through the Platform Provider, the parties must review then-current international transfer documentation and ensure an attorney-approved DPA or other lawful transfer mechanism is in place, because the Platform Provider’s publicly available materials do not identify Standard Contractual Clauses (SCCs) or another specific GDPR transfer mechanism.

TOPA does not represent website analytics tools as confirmed Platform Provider subprocessors for client platform data unless and until such tools are specifically identified in the Platform Provider’s applicable contractual documentation for the Platform Provider’s services.

The final relationship, applicable documents, and URLs must be verified before publication. TOPA does not control the Platform Provider’s independent privacy practices and is not responsible for practices that occur outside TOPA’s services or instructions.

5. How We Use Information

TOPA may use Personal Information to:

• Respond to inquiries and requests;

• Schedule and conduct discovery calls, meetings, workshops, and events;

• Prepare proposals, statements of work, agreements, invoices, and vendor materials;

• Provide, configure, manage, and support services;

• Deliver learning, consulting, implementation, community, and Belong & Return services;

• Process payments, refunds, credits, and subscription changes;

• Communicate about services, events, programs, purchases, deadlines, and account matters;

• Send newsletters, resources, or marketing communications where permitted;

• Administer Dialogue Club, Practice Circle, and other community programs;

• Record, summarize, or archive Dialogue Club sessions where participants have been appropriately notified and consent has been obtained where required;

• Provide captions, transcripts, summaries, accessibility support, or other participation assistance;

• Maintain, secure, troubleshoot, and improve websites and services;

• Understand use of website content and improve accessibility and user experience;

• Prevent fraud, misuse, unauthorized access, or other harmful activity;

• Protect the rights, safety, and property of TOPA, clients, participants, and others;

• Comply with legal, regulatory, tax, accounting, procurement, and contractual obligations;

• Establish, exercise, or defend legal claims; and

• Carry out another purpose disclosed at or before collection or otherwise permitted by law.

TOPA does not make decisions about an individual’s eligibility for employment, housing, education, credit, insurance, or public benefits based solely on automated processing.

6. AI-Assisted, Human-Directed Operations

TOPA may use artificial-intelligence tools to assist with activities such as:

• Organizing information;

• Drafting or revising text;

• Summarizing meetings or documents;

• Generating notes, outlines, or administrative materials;

• Supporting accessibility and formatting; and

• Identifying patterns for human review.

TOPA’s operations are human-directed and human-reviewed. AI tools do not independently set final prices, finalize recommendations, approve legal documents, or deliver final client findings without appropriate human review.

TOPA will not intentionally submit confidential client information, Member Data, or sensitive personal information to an AI tool unless the use is authorized, reasonably necessary, appropriately safeguarded, and consistent with applicable contractual and legal requirements.

Some AI tools may process information through third-party infrastructure. The specific tools used for a service may vary. Clients should contact TOPA before providing information subject to special confidentiality, regulatory, or contractual restrictions.

7. Dialogue Club and Community Programs

Dialogue Club sessions may be recorded and summarized using AI-assisted notetaking tools, such as [Recording or AI Notetaking Provider]. Participants will receive appropriate notice regarding recording and may be required to provide consent before participating.

Recordings and summaries may be shared with eligible members or participants according to the applicable participation policy or community agreement.

TOPA does not sell participant data or use community discussions to train external AI models.

Thematic or collective insights may be synthesized and shared publicly when personal information, institutional specifics, and identifying details are removed or appropriately protected. Participants remain responsible for complying with applicable confidentiality and community agreements.

8. Legal Bases for Processing

Where data-protection law requires TOPA to identify a lawful basis, TOPA may rely on one or more of the following:

• Contract: To provide services, process purchases, administer subscriptions, and perform an agreement;

• Consent: Where an individual has given consent, such as for certain marketing, recordings, cookies, or optional communications;

• Legitimate interests: To operate, secure, improve, and communicate about TOPA’s services, provided those interests do not override applicable rights;

• Legal obligation: To comply with tax, accounting, legal, regulatory, or governmental requirements; and

• Vital interests or public interest: Where recognized and applicable under relevant law.

Where processing is based on consent, an individual may withdraw consent, although withdrawal does not affect processing that occurred before withdrawal.

The applicable legal basis may vary by jurisdiction, relationship, data category, and processing activity.

9. How We Share Information

TOPA may disclose information to the following categories of recipients:

9.1 Client Organizations

For Member Data, TOPA may provide information to the applicable Client Organization as directed or as necessary to provide the service.

9.2 Platform and Technology Providers

TOPA may disclose information to providers that support:

• Website hosting;

• Forms and surveys;

• Scheduling and video meetings;

• Learning-management and community platforms;

• Email and communications;

• Artificial-intelligence assistance;

• Analytics and website performance;

• Customer relationship management;

• File storage and collaboration;

• Belong & Return platform services;

• Payment processing;

• Shipping, fulfillment, and product delivery; and

• Security, technical support, and administrative operations.

These providers may process information under their own agreements and privacy policies or under contractual restrictions imposed by TOPA or a Client Organization.

9.3 Professional Advisors

TOPA may disclose information to attorneys, accountants, insurers, auditors, consultants, and other professional advisors where reasonably necessary and subject to appropriate confidentiality obligations.

9.4 Legal and Safety Disclosures

TOPA may disclose information when reasonably necessary to:

• Comply with law, regulation, subpoena, court order, or legal process;

• Respond to a lawful governmental request;

• Protect the rights, safety, or property of TOPA or another person;

• Investigate fraud, security incidents, or misuse;

• Enforce agreements or policies; or

• Establish, exercise, or defend legal claims.

9.5 Business Transfers

If TOPA undergoes a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

9.6 No Sale of Personal Information

TOPA does not sell Personal Information for monetary consideration.

TOPA does not knowingly share Personal Information for cross-context behavioral advertising. If TOPA begins selling or sharing Personal Information in a manner that triggers an opt-out right under applicable law, TOPA will update this Policy and provide required mechanisms before engaging in that activity.

9.7 Text Messaging and SMS Opt-In Information

TOPA will not share your text messaging opt-in data or consent to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. All categories of information described in this Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for unrelated purposes. TOPA will not share your mobile information with third parties or affiliates for marketing or promotional purposes.

​

TOPA may share your Personal Information, including your SMS opt-in or consent status, with third parties that help TOPA provide messaging services, including, but not limited to, platform providers, phone companies, carriers, and other vendors that assist with the delivery of text messages. These providers may process information only as reasonably necessary to support the applicable messaging service and subject to applicable contractual or legal restrictions.

10. Cookies and Similar Technologies

TOPA and its providers may use cookies, pixels, tags, local storage, and similar technologies for:

• Essential website functionality;

• Security and fraud prevention;

• Remembering preferences;

• Scheduling and account functionality;

• Analytics and performance measurement;

• Understanding how visitors use the website; and

• Marketing or advertising, if applicable.

The specific technologies used may vary by website and provider.

You may control cookies through your browser settings or, where available, TOPA’s cookie-management tool. Disabling certain cookies may affect website functionality.

Cookie categories currently used or expected to be used include:

• Strictly necessary cookies: Required for core website and service functions;

• Preference cookies: Remember settings and choices;

• Analytics cookies: Help measure use and performance; and

• Marketing cookies: [Used only if applicable and after required consent].

The final list of cookies, providers, purposes, retention periods, and consent controls should be confirmed before publication.

11. Third-Party Links and Services

TOPA websites, communications, programs, and services may contain links to third-party websites, platforms, payment processors, learning systems, community spaces, software, or other services.

Third parties maintain their own privacy practices. TOPA is not responsible for the privacy, security, availability, content, or practices of third-party services that TOPA does not control.

Review the applicable third party’s privacy policy before submitting information through its website or platform.

12. Data Retention

TOPA retains Personal Information only for as long as reasonably necessary for the purposes described in this Policy, including to:

• Provide services;

• Maintain business and transaction records;

• Comply with legal, tax, accounting, procurement, and contractual obligations;

• Resolve disputes;

• Enforce agreements;

• Protect against fraud or misuse; and

• Establish, exercise, or defend legal claims.

Retention periods depend on the type of information, the relationship with TOPA, the purpose of collection, applicable law, and whether the information is needed for an active service or agreement.

TOPA may retain de-identified or aggregated information when it cannot reasonably be used to identify an individual.

Member Data retained by Boomerangme, Inc. or another third-party platform is also subject to that provider’s retention, export, backup, and deletion practices. The Platform Provider’s publicly available materials state it will honor customer removal requests within a reasonable timeframe after the customer requests removal; TOPA does not promise a fixed deletion deadline for Platform Provider systems.

13. Data Export and Deletion

You may contact TOPA to request access, correction, export, or deletion of information that TOPA controls, subject to applicable law and legitimate retention requirements.

For Member Data:

• TOPA will reasonably assist the Client Organization with export or deletion requests within the scope of TOPA’s service;

• Member/end-customer deletion requests are generally routed through the applicable Client Organization, and the Client Organization remains responsible for responding to its members or participants;

• Export and deletion are subject to the technical capabilities, retention rules, backup systems, and contractual terms of the applicable platform provider; and

• Information may remain in backups or records for a limited period where necessary for security, legal, accounting, or dispute-related purposes.

TOPA may need to verify the identity and authority of the person making a request before taking action.

14. Security

TOPA uses reasonable administrative, technical, and organizational measures intended to protect Personal Information against unauthorized access, acquisition, disclosure, alteration, or destruction.

These measures may include:

• Access controls;

• Password and account protections;

• Use of reputable service providers;

• Data minimization;

• Confidentiality obligations;

• Secure transmission where available;

• Backup and recovery procedures; and

• Review of service-provider security practices appropriate to the nature of the information.

No method of transmission, storage, or processing is completely secure. TOPA cannot guarantee absolute security.

Clients are responsible for maintaining appropriate account security, limiting access to authorized users, and notifying TOPA promptly of suspected unauthorized access or disclosure.

15. Security Incidents and Breach Cooperation

If TOPA becomes aware of a security incident involving Personal Information under TOPA’s control, TOPA will take reasonable steps to investigate, contain, remediate, and document the incident.

Where required by law or contract, TOPA will provide notice to affected parties, Client Organizations, regulators, or other appropriate recipients.

For Member Data processed on behalf of a Client Organization, TOPA will cooperate reasonably with the Client Organization and the applicable platform provider in investigating and responding to an incident, subject to legal restrictions and the applicable agreement.

TOPA cannot guarantee that a third-party platform provider will prevent or immediately detect every security incident.

16. Sensitive Information, Minors, and Regulated Data

TOPA does not intentionally collect sensitive information through ordinary website forms or general service inquiries.

TOPA services and websites are not directed to children under 13. TOPA does not knowingly collect Personal Information directly from children under 13 without legally required parental or guardian involvement.

Educational, nonprofit, and institutional clients may serve minors or individuals whose information is subject to FERPA, COPPA, HIPAA, the GDPR, UK GDPR, state student-privacy laws, or other heightened requirements. A Client Organization must notify TOPA before providing such data.

Unless a written agreement, data-processing addendum, and appropriate safeguards are in place, clients must not provide:

• Protected health information;

• Student records;

• Information about children under 13;

• Payment-card or bank-account information;

• Government identifiers;

• Biometric or genetic data;

• Criminal-history information;

• Precise geolocation; or

• Other regulated or sensitive information.

The Client Organization remains responsible for determining whether it may lawfully collect, disclose, or instruct TOPA to process information.

17. International Processing

TOPA is based in Texas, United States. TOPA and its service providers may process Personal Information in the United States or other countries where service providers operate.

If Personal Information is transferred internationally, TOPA will use legally recognized transfer mechanisms where required, such as:

• Adequacy decisions;

• Standard Contractual Clauses;

• UK International Data Transfer Agreements or Addenda;

• Data Privacy Framework mechanisms, where applicable; or

• Another legally recognized safeguard.

The specific transfer mechanism may depend on the provider, jurisdiction, data type, and applicable agreement.

18. European Economic Area and United Kingdom Rights

Where applicable under the GDPR or UK GDPR, individuals may have rights including:

• Access to Personal Information;

• Correction of inaccurate or incomplete information;

• Deletion;

• Restriction of processing;

• Data portability;

• Objection to processing;

• Withdrawal of consent;

• Objection to direct marketing; and

• The right not to be subject to certain solely automated decisions.

These rights are subject to legal exceptions and may not apply in every circumstance.

Individuals may contact TOPA using the information in Section 22. TOPA may request information reasonably necessary to verify identity and authority.

Individuals may also complain to the applicable data-protection supervisory authority. For UK matters, the relevant authority may be the Information Commissioner’s Office at [ICO Contact URL]. For EEA matters, the relevant supervisory authority depends on the individual’s location and circumstances.

TOPA’s GDPR and UK GDPR obligations, including controller/processor roles and any required Data Processing Addendum, should be confirmed before TOPA intentionally serves individuals or organizations in those jurisdictions.

19. California Privacy Rights

Where applicable under the California Consumer Privacy Act, as amended, California residents may have rights to:

• Know or access categories and specific pieces of Personal Information;

• Correct inaccurate Personal Information;

• Delete Personal Information, subject to exceptions;

• Opt out of the sale or sharing of Personal Information;

• Limit certain uses or disclosures of sensitive Personal Information;

• Receive equal treatment for exercising privacy rights; and

• Appeal a denied request where required by law.

TOPA does not sell Personal Information and does not currently share Personal Information for cross-context behavioral advertising.

California residents may submit a request by contacting TOPA at info@theopenpracticeacademy.com. TOPA may use reasonable verification procedures and may require an authorized agent to provide proof of authority.

TOPA will not discriminate against a person for exercising applicable privacy rights.

The applicability of California privacy obligations depends on factors such as TOPA’s business activities, revenue, data practices, and applicable exemptions. The final California-specific disclosures and request procedures must be reviewed before publication.

20. Texas Privacy Rights

Where applicable under the Texas Data Privacy and Security Act, Texas residents may have rights to:

• Confirm whether TOPA processes Personal Information;

• Access Personal Information;

• Correct inaccuracies;

• Delete Personal Information;

• Obtain a portable copy of Personal Information; and

• Opt out of targeted advertising, the sale of Personal Information, or certain profiling decisions, where applicable.

TOPA does not sell Personal Information or use Personal Information for targeted advertising as currently operated.

To submit a request, contact TOPA at info@theopenpracticeacademy.com. TOPA may authenticate requests and may deny or limit a request where permitted by law.

If TOPA denies a request, the requester may appeal by replying to the denial or contacting TOPA at the same address with the subject line Privacy Appeal. TOPA will review the appeal and provide a response within the period required by applicable law.

If an appeal is denied, the requester may contact the Texas Attorney General where permitted by law.

21. Marketing Communications

TOPA may send service-related communications, including:

• Transaction confirmations;

• Invoices and payment notices;

• Appointment reminders;

• Program and platform notices;

• Security or legal notices;

• Changes to services, agreements, or policies; and

• Other communications necessary to administer a relationship.

Where permitted by law, TOPA may also send newsletters, resources, event announcements, or other marketing communications.

You may unsubscribe from marketing emails by using the unsubscribe link or contacting info@theopenpracticeacademy.com. You may not opt out of essential service or legal communications.

22. Your Choices and Privacy Requests

To submit a privacy request, contact:

She Writes, She Reigns, LLC DBA The Open Practice Academy
Email: info@theopenpracticeacademy.com
Mailing address: 5900 Balcones Drive Ste 100, Austin, TX 78731, United States

You may request:

• Access to Personal Information;

• Correction of inaccurate information;

• Deletion, subject to applicable exceptions;

• Export or portability, where applicable;

• Information about processing or disclosures;

• Withdrawal of consent;

• Marketing opt-out;

• Cookie or tracking preferences; or

• Review of a denied privacy request.

TOPA may request additional information to verify identity, authority, or the scope of a request. TOPA will respond within the period required by applicable law.

If you submit a request concerning Member Data held for a Client Organization, TOPA may refer the request to that Client Organization or assist the Client Organization in responding.

23. Changes to This Privacy Policy

TOPA may update this Privacy Policy from time to time to reflect changes in:

• Services or products;

• Technology;

• Data practices;

• Legal requirements;

• Service providers; or

• Business operations.

When changes are material, TOPA will update the Effective Date and provide additional notice where required by law.

The revised Policy will apply from the revised Effective Date unless otherwise stated.

24. Contact Us

Questions about this Privacy Policy or TOPA’s privacy practices may be directed to:

She Writes, She Reigns, LLC DBA The Open Practice Academy
5900 Balcones Drive Ste 100
Austin, TX 78731
United States

Email: info@theopenpracticeacademy.com

Effective Date: August 13th, 2026
Last Updated: August 13th, 2026
Privacy Policy URL: https://www.theopenpracticeacademy.com/privacy-policy