A Note about Protected Health Information:
In providing services, we connect people with clinics and other healthcare providers in the United States. As part of that process, we may be asked by these healthcare providers to collect certain Protected Health Information (“PHI”) on their behalf, which is regulated under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Health Information Technology for Economic and Clinical Health Act, and their implementing regulations as amended from time to time. However, we do not collect PHI on the Website and our Website may not be HIPAA compliant. Do NOT (a) provide any PHI (e.g., medical diagnosis, symptoms, etc.), (b) provide your identifying information (other than just your first name – do not include your date of birth, home or work address, or any other personal information), or (c) request healthcare services, if you contact us through our Website. If we collect PHI from you after you become a patient of the applicable healthcare provider, we (or the healthcare provider) will provide you with separate notices as required by HIPAA and other applicable law.
This notice concerns arrangements with applicable United States healthcare providers, not every FADEN gathering. Separate provider notices apply to clinical care. Its warning about identifying information is preserved as supplied; the website’s inquiry and member-account processes nevertheless collect an email address and other nonclinical details described below or in the Privacy notice. These channels are not intended for clinical information, but information submitted by mistake may still require protection under applicable law. FADEN must reconcile the supplied warning with its contact and account practices before adopting the revised policy. The supplied wording has not been certified as legally approved or adopted as a comprehensive privacy policy.
Privacy notice
Review draft · October 24, 2026
Privacy contact: Faden, Marriage and Family Therapy, Inc.. lindsay@wearefaden.com.
Scope and responsibility
This notice describes the FADEN website and its invitation-only member community. The operator is Faden, Marriage and Family Therapy, Inc. It does not replace separate notices, agreements or consent required for clinical care, retreat screening or services provided by another practitioner.
The site welcomes international visitors aged 21 or older. Individual gatherings and clinical services may have additional eligibility requirements. If you believe information about someone under 21 has been provided, contact us so we can review it and arrange appropriate removal.
Information and its purposes
Member sign-in uses an email address and password through our authentication provider. Invitation and password recovery processes use your email and account information. Profiles include an account identifier, display name, an optional photograph and optional location, gatherings attended, favorite FADEN moment, carrying word, currently loving and ask-me-about responses. These details support account access, recognition and participation in the community.
When you post in the community, we store your author identifier, category, title, message, optional link, optional photograph, optional event date and creation time. We use this information to display your contribution, support member conversation and resources, and operate the community. The service may retrieve a preview image from a linked website. Membership and editor permissions are stored separately from your profile.
The inquiry form collects your name, email address, gathering of interest, referral source, written answers and optional Field Notes preference. Submitted inquiries are saved in our restricted application records so FADEN can respond and manage the inquiry. The service also attempts to send Lindsay an email notification containing the inquiry; failure of that notification does not remove the saved submission. Provide only nonclinical information and use a first name rather than unnecessary identifying details.
Selecting Field Notes records a marketing preference with your inquiry. It does not automatically add your address to Squarespace Email Campaigns or Substack. FADEN uses Squarespace Email Campaigns for its central marketing list; any manual addition must respect the recorded opt-in and any later withdrawal. Addresses supplied only for an inquiry or account must not be added without a separate marketing choice.
When you email us directly, we receive your email address and the information in your message to respond and manage the conversation. Reading or subscribing to Reweaving on Substack takes place on Substack and is governed by its own privacy notice.
Community visibility and photographs
The community is restricted to invited members, but it is not a private conversation with a therapist. Profiles and contributions are visible to other authorized members. The profile directory can include account profiles beyond the people who have posted. Account email addresses and passwords are not displayed in the member directory.
Women working individually with Lindsay may be invited without attending a retreat. No client status is recorded in the community profile. Announcements and circle details are visible to invited members. RSVP responses are visible to the responding member and the community administrator, not the wider directory.
Members can privately report contributions. Reports store a contribution reference, reporter identifier, reason, review status and time. Limited automatic checks for profanity and threatening phrases create review flags without automatically removing posts. Lindsay can review reports and remove contributions. The service attempts to send Lindsay an email alert without copying post content or the report reason into the email; failed delivery does not remove the saved report. Reports are not displayed to other members.
Authorized service providers and personnel may access information where needed to operate, support or secure the service. Members can copy or photograph what they see, so access restrictions cannot guarantee that a contribution will remain within the group. Share only what you are comfortable making available to the community, and do not publish another person’s private information or photograph without permission.
Profile and uploaded post photographs use temporarily signed links rather than public gallery links. Anyone who receives a still-valid signed link may be able to view its image until the link expires. Linked-site previews may use public image URLs. Uploaded files may retain their original metadata. Replacing a photograph does not automatically delete the earlier uploaded file.
Photographs deliberately selected for the public Cabinet and other public editorial pages can be viewed by anyone. Cabinet editor access is restricted, but publication of a selected image makes that image public.
Sensitive information and clinical care
Do not submit diagnoses, medical history, medication details, clinical records or other protected health information through public contact forms or the member community. These spaces are not clinical intake, medical records or emergency channels. Participation does not itself establish a therapist and client relationship.
If clinical care or screening is arranged, the responsible provider must explain the appropriate private channel and any separate confidentiality and health privacy notices. This website notice does not certify HIPAA compliance. Describing a channel as nonclinical does not waive legal protection that may apply to medical information received there, including information submitted unintentionally.
Service providers and disclosures
The site uses Lovable Cloud for hosting, account services, application records and file storage. Inquiry notification and account-email delivery providers process information needed to deliver those messages; their identities and contracts must be confirmed before adoption. Squarespace Email Campaigns processes contacts added to FADEN’s marketing list, while Substack processes subscriptions made there. Our hosting and supporting infrastructure process requests needed to deliver pages and images, maintain accounts and diagnose errors. Google Fonts receives requests to deliver the site’s typefaces. These requests can disclose an IP address and standard browser or device information.
FADEN confirms that it does not use advertising trackers, buy mailing lists or share contacts for another business’s marketing. No advertising pixels or Google Analytics integration were found in the reviewed application. This is not a representation that hosting providers collect no operational data; their processing and contracts require separate verification.
Information may be disclosed where required by applicable law or a valid legal demand, or where permitted and necessary to protect the service, investigate misuse or establish or defend legal rights. Any new purpose or recipient requiring separate notice or consent must be addressed before that processing begins.
Links to Substack, social media and member-supplied websites take you to independent services with their own privacy practices. They are not embedded private FADEN communications.
Browser storage and technical information
Sign-in information is stored in your browser’s local storage to maintain and refresh your session. Local storage is different from a cookie. Signing out ends your application session; clearing browser storage can also remove the locally stored sign-in state. Do not use a shared device without signing out.
Hosting systems may process IP addresses, request details and diagnostic errors. The reviewed application reports errors and page paths to available hosting diagnostics. In the editor preview, the trusted Lovable editor may also broker the session needed to test the app. Preview behavior is distinct from ordinary public visits.
The reviewed application does not implement a response to browser Do Not Track signals. No cross-site advertising tracker was found. Global Privacy Control is a distinct signal; if legally covered sale or sharing is introduced, applicable opt-out obligations must be addressed. Blocking browser storage may prevent sign-in from working.
Retention, removal and security
Member accounts, profiles, posts and uploaded files remain stored unless removed. The application does not currently implement automatic age-based deletion. Showing only the most recent posts is not a deletion schedule. Replaced photographs and files left by unsuccessful saves may remain in storage.
Members can edit their profile name and photograph and delete their own posts. This does not ensure removal from backups, diagnostic records or copies made by other members. Account closure, access copies and complete file removal require a request to FADEN; there is no self-service account export or deletion tool.
Before this draft is adopted, FADEN must document retention periods or criteria for accounts, posts, uploads, correspondence, logs and backups, and confirm how removal requests are completed. No fixed retention period or immediate erasure guarantee is made here.
Sign-in requirements, membership checks and restricted access help protect member information. No website or transmission method can guarantee complete security. Community participation is not a confidential therapy session. This does not limit any confidentiality or security duties that apply to information FADEN receives.
Requests and communication choices
Contact lindsay@wearefaden.com to ask about your information or request access, correction, a copy, account closure or deletion. Describe your request and give us a way to respond. Do not include clinical records, identity documents or unnecessary sensitive information in the initial email. We may need proportionate verification before disclosing or changing account information.
Applicable law determines the rights available for particular information, any exceptions and response deadlines. You may contact us with a request even where a particular statutory right does not apply. FADEN must assess the request under applicable law and explain any limitation on its response. Verification should not involve collecting more information than reasonably needed to establish identity and authority.
Providing an email address to ask a question or create a member account is not, by itself, agreement to receive promotional messages. FADEN requires a separate marketing choice. Use the unsubscribe link in a marketing email or contact lindsay@wearefaden.com to withdraw that choice; Substack subscriptions can also be managed through Substack. Necessary account or service messages are separate from marketing.
California professional services and health confidentiality
The operator name supplied by FADEN is Faden, Marriage and Family Therapy, Inc. A California marriage and family therapy corporation is subject to professional-corporation and licensing requirements distinct from each practitioner’s license. This notice does not verify corporate formation, ownership, good standing or any practitioner’s licensure, and does not represent every retreat activity as licensed psychotherapy.
California’s Confidentiality of Medical Information Act (CMIA) can apply to licensed marriage and family therapists and qualifying medical information independently of HIPAA. HIPAA coverage depends on the provider’s activities, including applicable electronic healthcare transactions, not merely the corporation’s name or use of email. FADEN must determine the rules applicable to each provider and service, establish appropriate confidentiality practices and issue separate notices or authorizations where required.
Whether information is protected depends on its content, who holds it and the circumstances, not simply its location or a nonclinical label. The request not to submit medical details does not waive applicable health confidentiality or security duties. Community access restrictions do not make every contribution a clinical record or a confidential therapy session.
California website privacy and consumer rights
The California Online Privacy Protection Act (CalOPPA) requires applicable commercial websites collecting California consumers’ personally identifiable information to conspicuously post disclosures about collection, recipient categories, available review or correction procedures, tracking, material changes and an effective date. It is separate from the revenue and processing thresholds of the California Consumer Privacy Act (CCPA). This document remains a review draft, not an adopted policy with an effective date.
CCPA applicability has not been established. If it applies, California consumers may have rights to know and access personal information, correct inaccuracies, request deletion, opt out of sale or sharing, limit certain uses of sensitive personal information where applicable, and exercise rights without unlawful discrimination, subject to legal conditions and exceptions. FADEN must assess coverage and implement the required notices, request methods and controls before representing that those processes are operational.
Operating as a professional corporation or providing healthcare does not create a blanket CCPA exemption. Exclusions for qualifying CMIA medical information, HIPAA-protected health information and certain patient information are fact-specific; ordinary inquiry, newsletter, website and community data must be assessed separately.
FADEN confirms that it does not share contacts for another business’s marketing. California’s Shine the Light law addresses certain disclosures for third parties’ own direct marketing, subject to its applicability requirements and exceptions; it is not the same as CCPA sale or sharing. Contact lindsay@wearefaden.com with a California privacy request. Applicable rights, verification requirements and response deadlines depend on the law and the information involved.
International visitors and changes
The operator is based in California. Accessing the site from another country may involve processing outside your country. Storage locations, international transfer arrangements and any required safeguards must be verified before this draft is adopted. Visiting the website is not blanket consent to international transfers or other processing.
If European or other international privacy laws apply, FADEN must confirm the relevant purposes and legal bases, any additional conditions for sensitive data, transfer safeguards, representative or data protection officer obligations and regulator contact information. International availability alone does not settle those questions.
Draft revised October 24, 2026; no effective date has been adopted. On adoption, FADEN must publish the actual effective date. The proposed change procedure is to publish revisions here, update that date and announce material changes through a prominent website notice and, where appropriate, direct communication to affected members. Any additional consent required by law must be obtained before materially different processing begins. A revised notice does not automatically authorize materially different use of previously collected information.
Before this notice is adopted
- Confirm service provider contracts, access, hosting locations, logs, backups and international transfer safeguards.
- Set and implement retention and deletion procedures, including old photographs and backup handling.
- Assess California website notice requirements and whether CCPA, GDPR, health confidentiality or other laws apply. Complete any additional notices and controls required by that assessment.
- Confirm inquiry-notification delivery and the email processor; document the Squarespace opt-in transfer and unsubscribe workflow without treating inquiry submission as marketing consent.
- Verify California professional-corporation formation, ownership and good standing separately from each treating practitioner’s active license and scope; identify the provider responsible for each clinical or screening service.
- Complete the CalOPPA notice, including an actual adoption date, implemented change-notification procedure and verified third-party collection over time and across websites. No advertising integration found in source code is not proof that all providers avoid cross-site collection.
- Assess CCPA coverage using current thresholds, relevant affiliations and dataset-specific exemptions. If applicable, implement notices at collection, required rights and request methods, retention disclosures, contracts and any sale/sharing or sensitive-information controls; distinguish Do Not Track from Global Privacy Control.
- Reconcile the preserved health-information warning with inquiry and account collection; assess CMIA and HIPAA independently and establish appropriate clinical channels, access, vendor agreements and separate notices.
- Adopt category-specific retention criteria for inquiries, accounts, posts, files, logs, backups and marketing suppression. Clinical health-service records, if any, follow separate California retention rules; do not apply a clinical retention period to every website record.
- Verify commercial-email compliance: accurate sender and subject information, required advertising identification where applicable, a valid postal address, working opt-out controls and suppression within CAN-SPAM’s 10-business-day deadline. Confirm the supplied historical mailing address before using it.
Legal sources for this review
- CalOPPA: Business and Professions Code §22575
- CCPA: California Privacy Protection Agency, 2026 statute and regulations
- CCPA: inflation-adjusted monetary thresholds
- CCPA health-information exclusions: Civil Code §1798.145
- CMIA definitions: Civil Code §56.05
- MFT professional corporations: Business and Professions Code, Article 6
- Shine the Light: Civil Code §1798.83
- HIPAA coverage: U.S. Department of Health and Human Services
- MFT record retention: California Board of Behavioral Sciences laws and regulations
- CAN-SPAM: Federal Trade Commission compliance guide
Privacy Policy · October 1, 2023
Source: Owner-supplied Privacy_Policy_Last_Updated_October_1_2023_pasted.txt
Privacy Policy Last Updated: October 1, 2023
This privacy policy (“Policy”) identifies the privacy practices of Faden, Marriage and Family Therapy, Inc. and its affiliates (“Faden”, “we”, “our”, or “us”) on www.wearefaden.com (the “Website”) for services we provide in the United States. By using the Website, you agree to be bound by this Policy and our Terms of Use as they may be amended or updated.
The Policy only applies to information we collect through the Website and not through other means. This Policy does not identify or govern the privacy practices of any third party, and we are not responsible for third-party privacy practices, even if we provide links to a third party’s website in the Policy, on the Website, or elsewhere. Any information you provide to a third party will be governed by that third party’s privacy policy and practices, which we encourage you to review.
To ask us questions about the Policy or for any other reason, or exercise any rights identified in the Policy, please contact us by:
Faden, Marriage and Family Therapy, Inc. Attn: Lindsay Olshan, MFT 1833 Fillmore Street, Suite 102 San Francisco, CA 94115 Phone: (415) 967-1139 Email: lindsay@wearefaden.com
Please include your email address and phone number with your correspondence along with the information needed to support your request.
Information We May Obtain From or About You
If you fill any forms to provide any information to us on the Website, we may obtain certain kinds of “personal information”, including your name, email address, and telephone number. The Website is not intended for use by children or persons under eighteen (18) years of age, or for persons who reside outside the United States. We do not knowingly collect personal information from persons under 18 and no person under 18 may provide any personal information or other information to or on the Website. If you are under 18 or do not reside in the United States, do not use or provide any information to this Website or on or through any of its features, make any purchases through the Website, use any of the interactive features of this Website, or otherwise provide any information about yourself to us through the Website. If we learn that we have obtained personal information from a person under 18 on or through the Website, we will attempt to delete such personal information.
A Note about Protected Health Information
In providing services, we connect people with clinics and other healthcare providers in the United States. As part of that process, we may be asked by these healthcare providers to collect certain Protected Health Information (“PHI”) on their behalf, which is regulated under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Health Information Technology for Economic and Clinical Health Act, and their implementing regulations as amended from time to time. However, we do not collect PHI on the Website and our Website may not be HIPAA compliant. Do NOT (a) provide any PHI
(e.g., medical diagnosis, symptoms, etc.), (b) provide your identifying information (other than just your first name – do not include your date of birth, home or work address, or any other personal information), or (c) request healthcare services, if you contact us through our Website. If we collect PHI from you after you become a patient of the applicable healthcare provider, we (or the healthcare provider) will provide you with separate notices as required by HIPAA and other applicable law.
How We Collect Your Information
Depending on how you use our Website, we may collect information from you in the following ways:
Directly from you. We may collect personal information from you directly through your use of the Website.
Through automated data collection technologies. We may collect certain information about you, your device, or your visits to or use of the Website using automated data collection technologies as described in the “A Note about Automated Data Collection” section below.
From third parties. We may obtain your information through third party sources such as lead generation companies, marketing partners, and service providers. For example, if you are on a third-party website and you opt in to receive information from us, that website will forward your contact information to us so we may contact you as requested. We may combine this information with the information we collect from you to help us tailor our communications and improve our Services.
A Note about Automated Data Collection
As noted above, the Website may use automated tracking tools, such as cookies. While the trackers we use may change from time to time, they may include some or all of the following:
Cookies: Cookies are small pieces of data sent to your browser from a web server and stored on your computer's hard drive. Your web browser may include a function that permits you to refuse the setting of all or some cookies. If you do so, you may not be able to access all or parts of the Website.
Web Beacons: Pages of the Websites may contain small electronic files known as web beacons (which may also be referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related statistics or information.
Google Analytics: The Website, as well as third parties, may use analytics cookies or similar analytics tools to collect aggregate information about how users visit the Website.
Server Logs: We may track information about your visit to the Website and store that information in web server logs.
Social Media Widgets: Some pages of the Website may use social media features, including without limitation, "Like" or "Share" buttons to aid social media sharing or interactive features. These features may collect your IP address, information about the webpage you are visiting or using, and may set a cookie to enable the feature to function properly. Social media features and widgets are hosted by a third party or hosted directly on our Products. We do not control any of the content from the social media widgets and recommend that you review each social media company's privacy policies prior to using any such widget.
To learn more about cookies and similar technologies, please visit www.allaboutcookies.org. Most web and mobile device browsers automatically accept cookies. If you prefer, you can change your browser to prevent that or to notify you each time a cookie is set. You may also choose to opt out of receiving interest-based advertising by visiting the Network Advertising Initiative’s Opt-Out Tool.
Additionally, when you use the Website, you may be directed to third party websites which contain cookies or other automated data-collection methods. Third parties may also use tools that track your activity online, even when you are on the Website or other websites. We are not responsible for third parties’ use of cookies or other tracking devices.
Do Not Track Signals
Some web browsers incorporate a Do Not Track (or "DNT") feature that signals to the websites that you visit that you do not want to have your activity tracked. Presently, many websites and mobile apps, including our Website, do not respond to DNT signals. As a result, we and third parties may track your online activities, including over time and across different sites and apps.
How We May Use and Share Information
We may collect and use the personal information we collect for certain purposes, including the following purposes:
Presenting and providing content to you, and operating and improving the Website;
Providing the Website and offering our products and services to you, and communicating with you;
Providing you with targeted advertisements, email marketing, or other marketing communications;
Improving our products, services, and Website, and how we operate our business;
Understanding and enhancing your experience using our Website, services, and products;
Responding to your comments or questions and for our support team to provide related services;
Sending you information, including, without limitation, confirmations, technical notices, updates, security alerts, and support and administrative messages, and modifications or updates to the Policy, Website, or other terms where applicable, and other messages;
Communicating with you about surveys, promotions, upcoming events, news about products and services offered by us and our affiliates or partners, and for our other marketing purposes;
Linking or combining your information with other information we get from third parties to help understand your needs and provide you with better service;
Permitting you to access and interact with interactive features of the Website;
Monitoring and analyzing site traffic, usage, trends, and activities related to our services or the Website, and diagnosing technical problems, administering the Website, or providing or displaying content;
Protecting, investigating, and deterring against fraudulent, unauthorized, or illegal activity; and
For any other purpose that you request or with your consent.
We do not sell, rent, lease, or share your personal information to third parties, but we may share your personal information with others in the following circumstances:
If information is “anonymized”, meaning it cannot be used to identify you;
To fulfill the purpose for which you provide personal information, including to third-party payment processors, fulfillment centers, or shipping companies;
To our subsidiaries, affiliates, agents, contractors, service providers, partners, and other third parties we use to support our business (including to our information technology or similar personnel or contractors);
To comply with any enforceable subpoena, government or regulatory request or demand, investigative demand, court order, law or legal process;
To enforce or apply our legal rights and to defend against legal claims;
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our customers, or others, including for the purposes of fraud protection and credit risk reduction;
In an emergency, including to protect the personal safety of any person;
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about the Website’s users is among the assets transferred. Additionally, in the event of an insolvency, bankruptcy, or receivership, personal information may also be transferred as a business asset. If another company acquires our company, business or assets, that company will also acquire and possess the personal information collected by us and will assume the rights and obligations regarding your personal information as described in this Policy;
For any other purpose disclosed by us when you provide personal information; or
With your consent.
Protection of Your Information
We maintain reasonable administrative, physical, and technological measures to protect the confidentiality and security of personal information you submit via the Website (which should NOT include PHI) and to ensure that such personal information (which should NOT include PHI) is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed. These security measures, however, cannot guarantee that any information that we possess will be completely secure. By using the Website, you expressly acknowledge that we do not guarantee the security of any data provided to or received by us through the Website and that any information provided to us by you or received by us from you through the Website is provided at your own risk.
Retention of Your Information
As a general matter, we will keep your personal information for as long as necessary to fulfill the purpose for which it was collected. If a law requires us to retain your information for a longer period of time, we will comply with that law. We will also retain your personal information as necessary to protect our legal rights. In some circumstances we will anonymise or de-identify your personal data (so that data can no longer be associated with you) in accordance with applicable law, in which case we may use this information indefinitely without further notice to you.
6. CALIFORNIA RESIDENTS – YOUR CALIFORNIA PRIVACY RIGHTS
If you are a California resident, California law allows you to request information about our disclosure of certain classes of your personal information to third parties for those third parties’ direct marketing purposes. You can make such requests of us using the contact information identified above. We reserve the right not to respond to requests submitted in ways other than those specified above. This request may be made no more than once per calendar year. Within thirty (30) days of receiving an express written request, we will provide a list of the categories of those classes of your personal information required to be identified under California law which we have disclosed to third parties for third-party direct marketing purposes during the immediately preceding year, along with the names and addresses of those third parties.
The Website is not intended for use by persons under the age of 21. However, if you are a California resident under the age of eighteen (18) and have publicly posted information on our Website, California law permits you to request and obtain removal of content or information you have publicly posted. You can do so by contacting us using the information set forth at the top of this policy. If you make such a request, please identify where the content or information is posted on the Website so that we can attempt to remove the post from public view or anonymize the content or information such that you cannot be identified. This removal process cannot ensure complete removal, for example, if content or information remains visible because a third party has copied the posting or reposted the content or information posted by the minor.
Your Rights and Choices
You have the following rights and choices with respect to the information we maintain about you:
Correct your information. You can request to correct certain personal information we maintain about you. To make such a request, please contact us using any of the methods described at the end of this Privacy Policy.
Promotional Email Opt-Out. By providing us with your email address, you give us permission to send you emails about our services, products, and other updates. You have the right to opt out of receiving future marketing, promotional, or emails from us at any time by following the instructions set forth in any such emails, including by clicking the “Unsubscribe” or other similar buttons or links included at the bottom of such emails. Even if you opt out of such communications, we may nevertheless transmit non-promotional communications to you, such as communications concerning our business relationship with you. We may not accommodate a request to change personal information if we believe that the requested change would violate any law or legal requirement or cause the information to be incorrect.
8. CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify and revise the Policy at any time. The effective date of the Policy is set forth at the top of this webpage under "Last Updated", and this Policy supersedes all prior versions. If we materially change the way we collect, use, or disclose your personal information, we will notify you prior to said change by email and/or by inserting a prominent notice on the Website.