Privacy

What we collect

When you use the booking or contact form, we collect the details you type: your name, email address, and phone number; the kind of session you're interested in and your preferred day; and, if you choose to fill them in, your child's first name and age and anything you write in the free-text box.

The child's name and age are optional. A first name is enough — please don't include medical records, diagnoses, or detailed health history in a web form. There'll be a private, appropriate place to share all of that once you and Shannon are working together.

Why we collect it

To reply to you, agree a time, and prepare for the session. If the session is paid, the same details are used to raise an invoice and send you a receipt.

We don't sell your information, we don't share it for advertising, and we don't send marketing email.

Who else handles it

Running the site means a small number of specialist companies process data on our behalf. They are contractually limited to providing their service and cannot use your information for their own purposes.

• Supabase — the database and admin sign-in that hold your booking details.
• Stripe — payments. Card details go directly to Stripe on their own secure page; they never touch this website, and we never see or store a card number.
• Resend — sends the emails you receive from us (confirmations, invoices, reminders).
• Vercel — hosts the website.
• Cloudflare Turnstile — the anti-spam check on the forms, so real families get through and bots don't.

Clinical records are kept separately

This website is intentionally not where clinical notes live. It holds enough to arrange and bill a session, and no more. Any notes about your child's care are kept in the practice's separate, access-controlled clinical systems.

How long we keep it

Booking and payment records are kept while you're a client and afterwards for as long as professional and tax obligations require. If you'd like your information removed, ask — we'll delete whatever we're not required to retain, and tell you plainly what we must keep and why.

Children's information

Everything here is provided by a parent or guardian, not by a child. This site isn't directed at children and we don't knowingly collect information directly from them. If you believe a child has sent us information on their own, contact us and we'll remove it.

Cookies

No advertising or analytics trackers are used on this site. The only cookies are the ones that keep the practice's own admin login secure — nothing that follows you around the internet.

Your choices

You can ask what we hold about you, ask us to correct it, or ask us to delete it. You can also ask us to stop contacting you at any time. Email is the fastest way to reach us.

Security, honestly stated

Access to the admin side requires a password plus a second factor, data is encrypted in transit, and payment details never reach our systems. No website can promise perfect security, and we won't pretend otherwise — but we've kept the amount of sensitive information here deliberately small, which is the most effective protection there is.