How your information is handled.

Introduction.

This Privacy Policy explains how Release & Restore Holistic Wellness (“the Practice,” “we,” or “I”) collects, uses, stores, and protects your personal information when you use our website, book a session, fill out an intake form, or interact with us in any way. By using this website or any service offered, you agree to the terms of this Privacy Policy.

If anything here is unclear, please contact us before submitting any personal information.

What we collect.

We collect only what we need to provide our services. This includes:

• Contact information: name, email address, phone number.
• Booking information: the session type and time you select.
• Payment information: processed directly by Stripe. We do not see, store, or have access to your full card number, CVC, or expiration date.
• Intake form responses: the issues you describe, severity ratings, and any context you choose to share. This may include sensitive information about your physical, emotional, or mental experiences.
• Session notes: brief practitioner notes I keep for continuity of care.
• Communications: emails, text messages, or other messages exchanged between us.

How we use it.

Your information is used only for the following purposes:

• To schedule, confirm, and conduct your sessions
• To process payment and issue receipts or refunds
• To send you booking confirmations, reminders, and aftercare guidance
• To respond to questions you send us
• To maintain notes that support continuity of care across sessions
• To comply with legal obligations (tax records, mandated reporting where applicable)

We do not sell your personal information. We do not use your information for advertising or marketing to third parties.

Where it’s stored.

Your information is stored using reputable, encrypted-at-rest services. Booking and intake form data is stored in a secure database. Payment data is held only by Stripe (our payment processor) under their PCI-DSS compliance. Communications by email are stored with our email provider. Practitioner notes are stored separately under access controls.

We use industry-standard practices to protect your data, including encryption in transit (HTTPS) and at rest. No system is 100% secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information.

Service providers.

To run this practice, we work with a limited number of service providers. Each one has access only to the information they need, and each has its own privacy policy and security commitments:

• Stripe, processes all payments. Stripe holds your card data, not us.
• Email service provider, sends transactional emails such as booking confirmations and aftercare notes.
• Hosting provider, hosts this website and our database.
• Video conferencing service, used for virtual sessions.

We do not share your personal information with any other third parties for marketing, advertising, or sale.

How long we keep it.

We retain personal information for as long as you remain an active client and for a reasonable period afterward to support continuity if you return, comply with legal/tax obligations, and resolve any disputes. Specifically:

• Active client records: retained while the client relationship is active.
• Inactive client records: retained up to 3 years after the last session, then deleted or anonymized.
• Financial records: retained for 7 years to comply with tax obligations.
• Email communications: retained for up to 2 years.

You may request earlier deletion at any time by contacting us. Some information must be retained to comply with legal obligations even after a deletion request.

Your rights.

You have the right to:

• Access the personal information we hold about you.
• Correct any information that is inaccurate or incomplete.
• Delete your information (subject to legal retention requirements).
• Restrict or object to certain processing of your information.
• Receive a copy of your information in a portable format.
• Withdraw consent at any time for any optional processing.

To exercise any of these rights, contact us at the email below. We will respond within 30 days. These rights are also recognized under the California Consumer Privacy Act (CCPA / CPRA), the Texas Data Privacy and Security Act (TDPSA), and the EU General Data Protection Regulation (GDPR) where applicable.

Children’s privacy.

This website is not directed at children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If a parent or guardian is booking a session for a minor, we will work with the parent or guardian directly and obtain their explicit written consent.

If you believe we have collected information from a child without proper consent, please contact us immediately so we can delete it.

Cookies and analytics.

We use minimal technical cookies to support core website functions (such as remembering your language preference). We do not currently use third-party analytics or advertising trackers. If we add analytics in the future, we will update this policy and provide a clear opt-out.

Stripe’s payment forms may use their own cookies for fraud detection. See Stripe’s privacy policy for details.

Data breach notification.

In the unlikely event of a data breach affecting your personal information, we will notify you without unreasonable delay, and within the timeframes required by applicable law (including Texas Business and Commerce Code § 521.053). The notification will include what information was affected, what steps we are taking, and what you can do to protect yourself.

Changes to this policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The “Last updated” date at the top of this page indicates when the most recent revision was made. For significant changes, we will provide notice through the website or by email.

Contact us.

For any privacy-related questions, requests, or concerns, please contact:

Bryan Guardiola
Release & Restore Holistic Wellness
bryan@releaseandrestorewellness.com