Privacy

What we collect

When you use the booking or contact form, we collect the details you type: your name, email address, and phone number; the kind of session you're interested in and your preferred day; and, if you choose to fill them in, your child's first name and age and anything you write in the free-text box.

The child's name and age are optional. A first name is enough — please don't include medical records, diagnoses, or detailed health history in a web form. There'll be a private, appropriate place to share all of that once you and Shannon are working together.

Why we collect it

To reply to you, agree a time, and prepare for the session. If the session is paid, the same details are used to raise an invoice and send you a receipt.

We don't sell your information, we don't share it for advertising, and we don't send marketing email.

Who else handles it

Running the site means a small number of specialist companies process data on our behalf. They are contractually limited to providing their service and cannot use your information for their own purposes.

• Supabase — the database and admin sign-in that hold your booking details.
• Stripe — payments. Card details go directly to Stripe on their own secure page; they never touch this website, and we never see or store a card number. Stripe emails you directly too: the invoice payment link when we ask it to, and — from Stripe's own settings rather than ours — a receipt when a payment succeeds and a notice when a refund is issued.
• Resend — sends the emails you receive from us (confirmations, invoices, reminders).
• Vercel — hosts the website.
• Cloudflare Turnstile — the anti-spam check on the forms, so real families get through and bots don't.
• Google Analytics — counts visits to the public pages so we can see whether families are finding this website and which pages help them. It never runs on the admin side, it never receives anything you type, and Google's advertising features are switched off in our configuration.
• Microsoft Clarity — shows us anonymised playback and heat maps of the public pages, so we can find the places where something is confusing or hard to tap. Form fields and the screens that repeat your answers back to you are hidden from it. We run it in its no-cookie mode: it sets no cookies of any kind here, and in particular none of the Microsoft advertising identifiers it would otherwise place. The trade is that it cannot recognise you between pages or between visits, which is the point.

Clinical records are kept separately

This website is intentionally not where clinical notes live. It holds enough to arrange and bill a session, and no more. Any notes about your child's care are kept in the practice's separate, access-controlled clinical systems.

How long we keep it

Booking and payment records are kept while you're a client and afterwards for as long as professional and tax obligations require.

If you'd like your information removed, ask. We erase your name, email, phone, your child's name and age, anything you wrote to us, and the practice's own working notes about your sessions. We also clear your details out of our stored copies of the emails we sent you, out of our internal change history, and out of your customer record at Stripe, our payment processor — including any duplicate copies of that record our systems find there. This applies whether or not you ever became a client — a contact-form message or a booking request you never went ahead with can be removed the same way, by the email address you wrote from.

What stays is the financial record — the dates, amounts and account-credit balance — because we're required to keep it and because it's how we'd settle anything still owed to you. It's no longer attached to your name. Invoices and receipts that were already issued are financial documents: they keep the name and email they were issued with, at Stripe and in our books, because we're required to keep them as issued. We'll tell you exactly how many such documents remain when we confirm your removal.

One thing we do keep after a removal: a protected one-way code derived from your email address, whose only job is to stop us from ever emailing that address again. It isn't your address and can't be turned back into it without a secret key that never leaves our database. That code governs the emails we send. Stripe's own payment receipts and refund notices are sent by Stripe and aren't covered by it — so if you are ever billed again, for instance after coming back to the practice, Stripe may email you about that payment before we have switched our own emails back on. If you come back to the practice later and we take you on again, we switch email back on for you deliberately — it's a recorded decision we make with you, not something that happens by accident.

That removal can't be undone, so we'll confirm with you before doing it.

Children's information

Everything here is provided by a parent or guardian, not by a child. This site isn't directed at children and we don't knowingly collect information directly from them. If you believe a child has sent us information on their own, contact us and we'll remove it.

Measuring how this website is used

To know whether families are finding this website — and where it confuses them — we use a small number of measurement services on the PUBLIC pages. They count visits, show which pages people read and how they arrived, and (with Clarity) replay how a page was scrolled and tapped so we can see what is hard to use.

Three places are deliberately left out. None of this runs on the practice's own admin pages. None of it runs on the private link we email you for managing your appointment — that web address is effectively a key to your booking, so we keep it out of other companies' systems entirely. And none of it runs while the site is being built or previewed, so our own work never counts as a visit.

What you type is kept out of it. The boxes you fill in are hidden from the recordings, and the review and confirmation screens that repeat your answers back to you are marked so that the text is replaced before it ever leaves your browser. Your name, email address, phone number, your child's details and anything you wrote are never sent to either service.

There is no cookie banner on this site, and that is a consequence of the choices above rather than a corner cut. The only cookies any of this sets are Google Analytics' two, on this website's own address, for counting visits. Nothing here places an advertising cookie, and nothing follows you to other websites. If you would rather not be included at all, your browser's privacy settings or its tracking-protection features will block both services, and the site will work exactly as before.

Anti-abuse records and technical logs

To keep the forms usable by real families and not by bots, we briefly keep counters of how often an internet address or email address has submitted them. These are housekeeping numbers, not profiles, and they're deleted automatically within about a day. If you ask us to erase your information, any counters keyed on your email address are removed with the rest of it; counters keyed on internet addresses aren't connected to you in our records — we couldn't look yours up if we tried — and simply expire on their own.

Like almost every website, the companies that run our infrastructure (listed above) keep short-lived technical logs — the kind that record that a request happened and for which web address — for their own security and reliability. We build the site so those addresses don't contain your details: names, email addresses and search text are never placed in a web address. We don't use these logs to identify you and we don't extend how long they're kept.

Cookies

On the practice's own admin side: the cookies that keep the admin login secure, plus a few short-lived ones that remember what a signed-in practice member last searched for in their own records — those exist so that search text never appears in web addresses (where infrastructure logs could record it), they never leave the admin area, and they end with the session.

On the public pages: Google Analytics sets two cookies on this website's own address, which let it tell a returning visit from a new one. They are analytics cookies — not advertising ones — and Google's advertising features are switched off in our configuration, so nothing here follows you to other websites or builds a profile of you.

Microsoft Clarity sets no cookies at all here. Installed the ordinary way it would place several, including identifiers Microsoft uses for advertising across its own sites; we deliberately run it in the mode where it places none, and it is our own code that tells it so on every page rather than a setting we could forget. It still shows us which parts of a page people struggle with; it simply cannot recognise anyone from one page to the next.

Your choices

You can ask what we hold about you, ask us to correct it, or ask us to delete it. You can also ask us to stop contacting you at any time. Email is the fastest way to reach us.

Security, honestly stated

Access to the admin side requires a password plus a second factor, data is encrypted in transit, and payment details never reach our systems. No website can promise perfect security, and we won't pretend otherwise — but we've kept the amount of sensitive information here deliberately small, which is the most effective protection there is.