Privacy Policy
Last updated: 6 September 2026
A note to the site owner: this document was drafted as a solid starting point for a solo wellness practice, not as legal advice, and it has not been reviewed by an attorney. Have a lawyer licensed in your state read it before you rely on it, and delete this paragraph once you do.
This policy explains what this website and this practice collect, why, who else sees it, and what you can ask for. It is written to be read, not to be survived.
What is collected
When you book a session
Your name, email address, timezone, the session you chose, and whatever you write in the short goal or notes field. If a phone number is requested for a session, that too.
Please do not put medical details, diagnoses, medications, or symptoms in the booking form. The booking form is not the place for them, and the reason is mechanical rather than squeamish: text typed there is copied into the booking provider's records, into the calendar event, and into the confirmation emails both of you receive. Health topics belong in the session itself, or on a separate intake form sent to you afterwards.
When you pay
Payment is handled entirely by a third-party payment processor on its own systems. This website never receives or stores your card number, CVC, or bank details. What comes back is a confirmation that payment succeeded, plus the amount and date, which are kept for tax and accounting purposes.
When you use the chat widget
The message you type, and the recent turns of that conversation, are sent to the service that generates the reply so that it can answer. Chat messages are not used to build a profile of you and are not tied to your booking record. Please keep health information out of the chat; the widget is designed to refuse those questions rather than answer them.
When you simply visit
The hosting provider processes standard server request data, including your IP address, for security and abuse prevention. This site sets no advertising cookies and runs no cross-site tracking.
Why it is collected
- To schedule, run, and follow up on the sessions you book.
- To take payment, issue receipts, and meet tax and accounting obligations.
- To answer questions you send.
- To keep the website secure and available.
Your information is never sold, rented, or traded. It is not used for advertising.
Who else processes it
A small practice runs on other people's software. These are the services involved, each acting on instructions and each with its own privacy policy:
- The booking provider (Cal.com or Google Calendar, depending on how booking is configured): holds your booking record and syncs it to the coach's calendar.
- The payment processor: handles the transaction and holds the payment record.
- Email: delivers confirmations, reminders, and replies.
- Cloudflare: serves this website and filters abusive traffic.
- An AI provider: generates chat replies from the message you send.
How long it is kept
- Booking and session records: while you are an active client, and for up to three years afterwards.
- Payment and invoice records: seven years, as tax rules generally require.
- Email correspondence: up to three years.
- Chat messages: not retained as a client record by this practice; the AI provider's own retention applies to what it receives.
- Server logs: short-term, as set by the hosting provider.
Your choices
You can ask, at any time, to see what is held about you, to have something corrected, to have your records deleted (except where tax law requires them to be kept), or to receive a copy. You can unsubscribe from any non-essential email; confirmations and reminders for sessions you have booked are not marketing and will continue while a booking is live.
To make any of these requests, email hello@example.com. Expect a reply within 30 days.
Two things worth saying plainly
This practice is not a HIPAA covered entity. Nutrition coaching and balance instruction paid for directly, with nothing billed to insurance, fall outside HIPAA. Information you share is treated as confidential as a matter of professional practice, but it does not carry HIPAA protection, and no claim to the contrary is made anywhere on this site.
Health information gets its own notice. Because some states regulate consumer health data separately, there is a dedicated Consumer Health Data Notice covering what counts as health data here, how consent works, and how to have it deleted.
Children
Services are for adults. Personal information is not knowingly collected from anyone under 18. If a minor's information has been submitted, email the address above and it will be deleted.
Changes
If this policy changes materially, the date at the top changes and active clients are notified by email.