Who is responsible
The controller of your personal data is the operator named in our legal notice.
What we collect
- Your account
- Your name, email address and, if you give it, your phone number. Your password, stored only in a scrambled (hashed) form that we cannot read. Your time zone, and the dates on which you accepted the booking terms and gave consent.
- Your bookings
- The times you request, whether they are confirmed, declined or cancelled, the number of voice messages, the fees that applied, and any message you add or we send you.
- Information about your health
- Booking a session shows that you are pregnant and want help with fear of childbirth. This is health data, a special category of data under Article 9 of the GDPR. We only use it with your explicit consent, which we ask for before your first request.
- Messages to us
- Your name, email address and message when you use the contact form.
- Technical data
- Our servers process your IP address and browser details to show you the website and keep it secure. To protect sign-in and forms against misuse, we store a scrambled code made from your IP address for at most one day.
The session planner on the home page works only in your browser. Your due date is not sent to us.
Why we use it, and the legal basis
- To run your account and your bookings, including the emails about them. Legal basis: the contract with you (Article 6(1)(b) GDPR).
- To use information about your health to arrange and provide the sessions. Legal basis: your explicit consent (Article 9(2)(a) GDPR). You can withdraw it at any time on the Profile and privacy page. After that we cannot arrange new sessions for you.
- To keep the service secure and prevent misuse. Legal basis: our legitimate interest in a safe service (Article 6(1)(f) GDPR).
- To keep records the law requires. Legal basis: legal obligation (Article 6(1)(c) GDPR).
We do not send marketing emails, we do not build profiles of you, and we make no automated decisions about you.
Who receives your data
- Our hosting provider, which runs the website and database for us under a data processing agreement.
- Our email provider, which delivers the emails about your bookings.
- The video service for the sessions, when you join a session with the link we send you.
We do not sell your data and we do not share it for advertising.
How long we keep it
- Account details: until you delete your account.
- Bookings: as part of our records. If you delete your account, we remove your name, contact details and messages from them.
- Contact messages: deleted automatically after 12 months.
- Password reset links: valid for 60 minutes, deleted after 7 days.
- Security codes made from IP addresses: deleted after one day.
Your rights
Under the GDPR you have the right to see your data, correct it, have it deleted, limit how we use it, receive it in a portable format, object to its use, and withdraw your consent at any time.
You can download your data and delete your account yourself on the Profile and privacy page.
You can also complain to a data protection authority, for example the one in the country where you live.
Security
The website uses an encrypted connection (HTTPS). Passwords are stored only as hashes. Only the clinic team can see bookings, and we collect only what we need to arrange your sessions.