Privacy Policy

Who we are

Ocean Wolf Wellness provides online Emotional Freedom Techniques (EFT), also known as Tapping, and intuitive coaching. Sessions are delivered by video through Zoom to clients aged 19 and over, and clients are served internationally.

“Emily Allison” is the professional name used for this work, and Emily Allison is the Privacy Officer and designated responsible person for Ocean Wolf Wellness. For privacy questions, requests, or concerns, contact the Privacy Officer at oceanwolfwellness@gmail.com.

Information we collect

Depending on how you interact with the site and with me, we may collect:

• Booking details you enter when you schedule through Calendly — typically your name, email address, and any notes you add to the booking.
• Intake and consent responses you complete in the Jotform Client Intake & Informed Consent Form.
• Payment information handled during checkout. Payment is processed by Stripe through the booking process. I do not receive or store your full card number.
• Correspondence you send me by email or other direct messages.
• Session information — what you choose to share during a session, and the brief notes described below.
• Website analytics — only if you accept optional analytics, as described further down.

Why we collect it and how it is used

• To schedule, prepare for, and provide your sessions.
• To process payment for sessions and packages.
• To keep appropriate professional notes that support continuity between sessions.
• To answer your questions and communicate with you about your sessions.
• To understand, in aggregate, how the website is used — only if you accept optional analytics.

Session notes and confidentiality

During sessions, I may write brief handwritten notes to support our work together. These notes are kept in a locked filing cabinet while they are needed. For a single session, I destroy the notes after the session. For a package of sessions, I retain the notes only while the package is ongoing so I can refer to them between sessions. I destroy the notes when the package is complete.

I do not record client sessions.

What you share in a session is treated as confidential. Like any professional service, there are limited situations where confidentiality may not apply — for example where there is a risk of serious harm, or where disclosure is required by law. I will not promise absolute confidentiality, and no online service can promise absolute security.

Who we share information with

I do not sell your personal information. I use a small number of trusted service providers that process information on my behalf so the practice can run:

• Calendly — online scheduling and booking.
• Stripe — payment processing, connected through the booking process.
• Jotform — the Client Intake & Informed Consent Form.
• Zoom — the video platform used for sessions.
• Google — Gmail for email correspondence, Google Calendar for scheduling and checking for calendar conflicts, and Google Analytics for optional website analytics.
• Hetzner Online GmbH — the hosting provider for this website.
• Clawgical — the platform through which the website server is administered.

These providers have their own privacy and security practices, and I encourage you to review them.

Where information is processed

Some of the providers listed above are based outside Canada, and information may be stored or processed in the United States, the European Union, or other jurisdictions. This means your information may be handled under the laws of those places, and may be accessible to authorities there under applicable legal processes. The providers involved operate globally and may process information in more than one country.

Website hosting and administration

This website is hosted on a virtual private server provided by Hetzner Online GmbH. The server is administered through the Clawgical platform. Because Clawgical provides administrative management of the server, it has the technical ability to access data stored on it, including website files and server logs. Authorized administrators, including Clawgical administrators, may access that data for operational and security purposes.

Server logs

Like most websites, this site’s server automatically records limited technical information when a page or file is requested. This happens as part of normal website operation and security, and it occurs regardless of whether you accept optional analytics. The information recorded may include your IP address, the date and time of the request, the resource requested, the response status, the referring page (where provided), and the user agent (the browser or software making the request).

This information is used only to operate and secure the website — for example keeping the site available, diagnosing faults, and detecting or investigating misuse. Authorized server administrators, including administrators of the Clawgical platform through which the server is administered, may have technical access to these logs for those purposes. Server logs are separate from optional Google Analytics and are not used for analytics or marketing.

Log retention differs by log type. The web server’s access logs are rotated and kept for approximately 14 days. Application container logs are rotated by size, so older entries may be discarded as new ones are written.

Cookies, browser storage, and analytics

Necessary website functions keep the site working. Optional analytics is handled by Google Analytics 4, which helps me understand which pages are useful and how people find the site. Analytics uses measurement ID G-LLS5TKLSFL and records page views and clicks on the “Start Here” booking button. It does not identify completed bookings or actual revenue.

Analytics is off until you accept it. Google Analytics does not load, and no analytics cookies are set, until you choose to accept optional analytics. If you reject analytics, the analytics script is not loaded and no analytics events are sent. You can change or withdraw your choice at any time using the “Privacy preferences” link in the footer of every page.

Your choice is stored in your browser’s local storage (a browser storage area, not a cookie) so the site can remember your decision between visits. It is remembered for approximately 183 days, after which you may be asked again.

Google Analytics cookies (such as _ga and _ga_<container-id>) may be set only after you accept analytics. The lifetime of those cookies depends on Google’s settings and on your browser, so no specific cookie lifetime is stated here. Server logs, described above, are recorded independently of your analytics choice.

Retention

Information is kept only as long as it is needed for the purposes described in this policy, or as required by law. Session notes are handled as described above. Payment records are held by Stripe according to its own practices and applicable financial rules. Retention periods for other categories depend on the purpose of the information and on legal requirements, so this policy does not state a single period for all information.

Your rights and privacy requests

Depending on where you live, you may have the right to ask for access to the personal information I hold about you, to request that it be corrected, to withdraw consent, or to raise questions or concerns about how it is handled.

General privacy questions or complaints are welcome by email at oceanwolfwellness@gmail.com, and I will respond as soon as reasonably practicable.

Formal written requests to access your personal information, or to correct it, should be sent to the same address with enough detail to identify you and the information concerned. Under British Columbia’s Personal Information Protection Act, a formal written request for access to, or correction of, personal information is subject to the 30-day response period in section 29 of that Act.

That period may be extended in the circumstances set out in section 31 — by up to a further 30 days, or longer with the Commissioner’s permission — for example where the requester has not given enough detail to identify the information, where a large amount of information must be searched, or where another organization must be consulted. Those extension provisions are expressed to apply to access requests made under section 23, and do not automatically apply to correction requests. If the response period for a request is extended, I will tell you and explain why.

If you remain concerned after raising a matter with me, you may contact the relevant privacy regulator — in Canada, the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia. Rights available to individuals outside Canada depend on the laws that apply where they live.

Legal context

Ocean Wolf Wellness operates from British Columbia, Canada. Personal information is handled in line with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA). Where visitors or clients are located in other jurisdictions, including the EU or UK, additional rules may apply, depending on the circumstances and on the laws of those places.

Changes to this policy

This policy may be updated as the practice or its tools change. The date at the top shows when it was last revised.

Contact

Privacy questions or requests: Emily Allison, Privacy Officer, Ocean Wolf Wellness — oceanwolfwellness@gmail.com.