Privacy Policy

1. Overview and Compliance

This Privacy Policy describes how Holistico LLC d/b/a Holistic Consulting and Kevin Holston Consulting, and its principal, Kevin Holston (collectively, "we," "us," or "our"), collect, use, disclose, and protect information obtained through our website at www.kevinholston.com and related professional services ("Services").

Given our role in healthcare consulting, we acknowledge our responsibilities under the following laws and regulations:

  • The Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations

  • Standards governing Protected Health Information (PHI)

  • Applicable federal and state laws governing Personally Identifiable Information (PII)

  • The Health Information Technology for Economic and Clinical Health (HITECH) Act, where applicable

2. Information We Collect

We collect information in the following ways: 

2a. Information You Provide Directly

  • Names, titles, and contact details (email, phone, mailing address)

  • Professional credentials, licensure information, and organizational affiliation

  • Project details, correspondence, and documents shared with us during the course of an engagement

2b. Protected Health Information (PHI)

When acting in the capacity of a Business Associate under HIPAA, we may receive, access, or process PHI provided by a Covered Entity. Such PHI is handled exclusively pursuant to the applicable Business Associate Agreement (BAA) and applicable law.

2c. Website Usage Data

Our website at www.kevinholston.com may automatically collect standard technical data such as IP address, browser type, device identifiers, and pages visited. This data is used solely for security, analytics, and site improvement purposes.

3. Use of Data and Artificial Intelligence (AI) Disclosure

We use collected information to:

  • Deliver and improve our consulting and professional services

  • Communicate with clients regarding engagements, updates, and administrative matters

  • Comply with legal, regulatory, and contractual obligations

  • Maintain the security and integrity of our systems

AI DISCLOSURE:

Holistico LLC d/b/a Holistic Consulting and Kevin Holston Consulting and Kevin Holston utilize Artificial Intelligence (AI) and machine learning tools to support product development, workflow automation, and data analysis. We explicitly represent the following:

  • We do not use PHI or PII to train publicly available or third-party AI models.

  • Any AI processing involving client data is conducted within secure, access-controlled, and compliance-reviewed environments.

  • AI-generated outputs are reviewed by qualified professionals before use in client-facing work or deliverables.

4. Data Security

Holistico LLC d/b/a Holistic Consulting and Kevin Holston Consulting and Kevin Holston implement administrative, technical, and physical safeguards designed to protect PHI and PII from unauthorized access, disclosure, alteration, and destruction. These measures are reviewed periodically and updated in response to evolving threats and regulatory guidance.

IMPORTANT NOTICE: No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. Your use of our website and services constitutes an acknowledgment of this inherent risk.

5. Business Associate Agreements (BAA)

Where we serve as a Business Associate under HIPAA, all handling of PHI shall be governed by the specific BAA executed between us and the applicable Covered Entity. In the event of any conflict between this Privacy Policy and an executed BAA with respect to PHI, the terms of the BAA shall control.

6. Disclosure to Third Parties

We do not sell, rent, or trade your personal information to third parties. We may disclose information in limited circumstances, including:

  • To service providers engaged to support our operations, under appropriate confidentiality obligations

  • As required by law, regulation, subpoena, or court order

  • To protect the rights, property, or safety of our clients, personnel, or the public

  • In connection with a merger, acquisition, or sale of substantially all assets, subject to standard confidentiality protections

7. Your Rights and Choices

Subject to applicable law, you may have the right to:

  • Access, correct, or request deletion of your personal information

  • Withdraw consent where processing is based on consent

  • Request that we limit or cease certain uses of your information 

To exercise any of these rights, please contact us using the information provided in Section 8 below.

8. Contact Information

For questions or concerns regarding this Privacy Policy or our data practices, please contact:

Kevin Holston

Holistico LLC d/b/a Holistic Consulting and Kevin Holston Consulting

www.kevinholston.com