Privacy Policy & Disclaimers

Section 01

Professional Scope & Nursing Registration

ExecRN provides business consulting, organizational assessment, workshop facilitation, HR advisory, disability management consulting, governance advisory, and educational content. All services are delivered from a consulting and educational perspective — not as clinical services.

ExecRN does not provide: medical advice, clinical diagnosis, mental health therapy or counselling, individual clinical assessment of any person's health status, or legal or financial advice.

Nursing Registration & Practice Scope

Sarah Scahill holds active registration as a Registered Nurse with the College of Registered Nurses of Alberta (CRNA). Organizational consulting, HR advisory, policy review, educational workshops, and The Biology Brief are business and educational services — not nursing practice. Her clinical background informs her expertise but does not create a clinical relationship with clients.

Disability management consulting is delivered under Sarah's CDMP credential (NIDMAR standards) in a consulting capacity. Depending on the nature of engagement, some disability management activities may overlap with occupational health nursing (OHN) practice under the CRNA. Scope is clarified on a per-engagement basis and individual service agreements reflect this distinction.

The 1:1 holistic coaching practice under the CCHNC-C credential may constitute nursing practice and is offered to Alberta clients.

Section 02

ExecRN Integrative Health Solutions is committed to protecting your privacy. This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) federally and the Protection of Privacy Act (POPA, SA 2024, c P-26.5) provincially, which replaced the former PIPA (RSA 2003) effective November 2024. It applies to website visitors, form submitters, newsletter subscribers, workshop participants, and consulting clients.

What we collect: Contact form submissions (name, email, organization, role, inquiry details), newsletter and waitlist email addresses, and aggregate website analytics with no personal identification.

How we use it: To respond to inquiries, facilitate engagements, send communications you have opted into, and notify NervePoint. waitlist subscribers at launch. We do not sell, rent, or share your personal information with third parties for marketing purposes, and we do not retain it longer than necessary.

Your rights: Under PIPEDA and POPA (Alberta), you may access information held about you, request corrections, and withdraw consent at any time. Contact sarah@execrn.com to exercise these rights.

Data hosting: execrn.com is hosted via Netlify. NervePoint platform data will be hosted on reputable cloud infrastructure with privacy-compliant data processing agreements in place prior to commercial launch. Email communications are handled directly by ExecRN.

Section 03

Assessment Tools & Free Resources

ExecRN Signature Assessment — Tool Disclosure

The ExecRN Signature Assessment is an evidence-informed organizational screening tool built on the MHCC 13 Psychosocial Factors and Guarding Minds at Work framework (Samra et al., 2012). It has not been independently peer-reviewed or validated as a psychometric instrument. It does not reproduce any third-party instrument. It is completed by HR leaders and managers about their organization — not as a clinical assessment of any individual. Results are for organizational awareness and planning only, and do not replace validated clinical assessment, independent research, or legal advice.

All free resources — The Biology Brief newsletter, social media content, and website content on burnout, nervous system physiology, and psychosocial health — are educational and informational only. None of this constitutes clinical advice or clinical guidance. Readers with personal health concerns should consult a qualified healthcare provider.

Section 04

Legal & HR Information

Not Legal Advice

Nothing on this website, in workshops, in consulting deliverables, or in any ExecRN communication constitutes legal advice. All legislative references and HR guidance are for general awareness and educational purposes only. Organizations should consult qualified legal counsel before implementing policy changes or making decisions based on legal or regulatory information. ExecRN does not practise law and does not hold a law licence in any jurisdiction.

Legislative content reflects Sarah Scahill's professional understanding as of the date of publication. Legislation changes — verify all legislative information with current official sources or qualified legal counsel before acting on it. HR recommendations and accommodation frameworks must be reviewed by legal counsel and adapted to your organization's specific circumstances and jurisdiction.

Section 05

NervePoint. Platform — Privacy Architecture

NervePoint Health Technologies Inc. is building a workplace psychological health and safety platform. The platform is not a clinical product. Its tools are designed for self-directed wellness, professional development, and organizational health intelligence — not clinical assessment, diagnosis, or treatment.

Planned Cloud Architecture — Privacy by Design

The NervePoint privacy model is a design commitment, not a current operational system. The platform is currently in prototype stage. When deployed to cloud infrastructure, the following architecture will govern individual data protection — these are the planned technical specifications documented for the build phase:

Separate data stores — individual and aggregate: Individual user data will be stored in a user-controlled partition. The organizational dashboard will query a separate aggregate-only data store. No join query between these two exists in the planned schema. The organizational administrator interface will be technically incapable of accessing individual user data — not merely restricted by policy.

No individual-record access via any organizational pathway: No endpoint in the organizational reporting system will return individual-level records. Aggregate data flows to organizations; individual data does not.

Minimum group size threshold: Aggregate reporting will be generated only for groups of five or more participants. Below this threshold, data will be suppressed at the database query layer — not filtered in the UI after retrieval. This is the standard approach to de-identification per CIHI disclosure control guidelines.

Anonymous organizational enrollment: Employees will enroll via an anonymous organizational code — no employer-linked identifier required or stored.

Data hosting: Platform data will be hosted on reputable cloud infrastructure in accordance with applicable privacy legislation. The hosting jurisdiction will be disclosed to users prior to commercial launch.

Current state: The individual NervePoint application currently operates as a client-side tool using browser-based local storage. No data is transmitted to any server. Employer access is not possible — not because of architectural controls, but because no server exists. This is the correct and honest description of the current build.

When cloud infrastructure is deployed: The architecture described above will govern how individual data is protected. The Organizational Intelligence Suite, which requires server-side aggregate data, is planned for cloud deployment and will not be commercially offered until the architecture described here is built and independently verified. The commitment to individual privacy is a design foundation, not a feature to be added later.

Data governance is built in accordance with Alberta PIPA, PIPEDA, and the Alberta Health Information Act (HIA) where applicable. Individual wellness tool users and organizational subscribers are subject to separate data agreements with clearly defined rights and limitations.

Privacy Policy &Professional Disclaimers

Privacy Policy &
Professional Disclaimers