Privacy Policy

This Privacy Policy explains how [TODO: confirm legal/business name of the practice] (“we”, “us”), a Rapid Transformational Therapy and hypnotherapy practice based in Prince Edward Island, Canada, handles your personal information. It reflects our obligations under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

We collect only what we need to respond to you and provide our services:

• Contact form — when you send an enquiry we collect your name, email address, the reason for your enquiry, and your message, so we can reply. You may choose to share health-adjacent details about what you’d like support with; we treat anything you share as sensitive and use it only to respond to you.
• Booking — when you book a session, scheduling details (such as your name, email, and appointment time) are collected through our booking provider, Cal.com.
• Payment — payments are processed by Stripe (through our booking provider). Your card details are entered directly with Stripe and are never seen or stored by us.
• Sessions — sessions and recordings are delivered online; video sessions take place over Zoom.
• Technical information — our host, Vercel, automatically records standard technical data (such as your IP address and browser information) to serve and secure the website.

We use only essential cookies — for example, to remember your chosen language. We do not use analytics or advertising cookies. [TODO: update if analytics/GA4 is added]

We collect, use, and disclose your personal information with your consent. When you submit the contact form, you consent to us using your details to reply. When you book or attend a session, you consent to us using your information to provide it.

You can withdraw your consent at any time by contacting us (see “Your rights” below), subject to any legal or contractual limits. We will explain any consequences of withdrawing.

We share personal information only with the service providers that help us run the practice, and only for the purposes listed:

• Resend — sends your contact-form enquiry to us by email.
• Cal.com — scheduling and bookings.
• Stripe — payment processing (card details).
• Zoom — delivering online video sessions.
• Vercel — website hosting and security.

We do not sell your personal information, and we do not share it for advertising.

Some of these providers may store or process your personal information outside Canada, including in the United States. Where that happens, your information may be subject to the laws of those countries, including lawful access by their courts and authorities. We choose reputable providers and share only what is needed.

We keep your personal information only as long as we need it for the purpose it was collected — to respond to your enquiry and manage our working relationship — after which we delete or anonymize it. [TODO: confirm data retention period]

We use reasonable technical and organizational measures to protect your personal information. No method of transmission over the internet or of electronic storage is completely secure, so while we work to protect your information we cannot guarantee absolute security.

Under PIPEDA you may ask to access the personal information we hold about you, ask us to correct it, and withdraw your consent. To make a request, contact us at [TODO: confirm privacy contact email]. We will respond within a reasonable time.

Personalised recordings for a child or teen are arranged by a parent or guardian, who provides the details on the young person’s behalf. We do not knowingly collect personal information directly from children. If you believe a child has given us information without a parent or guardian’s involvement, please contact us and we will delete it.

If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the Office of the Privacy Commissioner of Canada.

We may update this policy from time to time. The “last updated” date at the top shows when it last changed; please check back for the current version.

For any privacy question or request, contact us at [TODO: confirm privacy contact email].