Privacy Policy
Last updated: June 2026
Listening to You, operated by Pookie Cherix in [HOME STATE/COUNTRY] ("we," "us"), explains here how we handle your personal information. You can reach us any time at hello@listening-to-you.com.
Not HIPAA-covered. Listening to You is a non-clinical service and is not a HIPAA-covered entity. The information you share is not protected health information under HIPAA, and HIPAA protections do not apply. Please do not share clinical or highly sensitive health details — and use the optional free-text field sparingly (see Section 1).
What we collect
- Name (required, built into booking).
- Email (required, built into booking).
- Phone number (required).
- Optional free-text: "What would you like to talk about?" — provided only if you choose. You are warned at the form not to include sensitive details you don't want stored. If you do include sensitive personal information here, we process it only with your explicit consent (see Section 3).
- Booking, payment, and scheduling metadata — session times, subscription status, and transaction confirmations. We do not store your full card number; that is handled by Stripe.
- Basic technical data from our website and booking provider, used to make the booking work.
We do not record sessions unless we tell you and obtain your consent first.
A note on the free-text field — please keep it light. A sentence or two is plenty. Please don't include sensitive details (health, identity, beliefs, and so on) that you wouldn't want stored. You can keep it high-level; we'll talk about the rest live. The cleanest way to protect your privacy is simply not to write sensitive information into the form.
Why we use it (purposes)
- To schedule, confirm, deliver, and follow up on your sessions.
- To process payments and manage your subscription.
- To communicate with you (confirmations, reminders, support).
- To keep brief, factual safety records where appropriate.
- To comply with law and to establish or defend legal claims.
Legal bases (GDPR / UK GDPR)
- Performance of a contract — to book, deliver, and bill your sessions (name, email, phone, booking and payment data).
- Explicit consent (Article 9) — for any special-category (sensitive) personal data you choose to include in the optional free-text field (for example, information revealing health, mental health, sexuality, or religion). We rely on your separate, explicit, affirmative consent, requested only when you have actually written something in that field. You can withdraw this consent at any time by emailing hello@listening-to-you.com; withdrawal doesn't affect processing already done.
- Legitimate interests — for limited operational and security purposes and to defend legal claims, balanced against your rights.
- Legal obligation — where law requires us to retain or disclose information.
When the optional free-text field is used, you are asked to give a separate, explicit opt-in consent:
"I explicitly consent to Listening to You collecting and processing the information I voluntarily wrote in the 'What would you like to talk about?' field, including any sensitive details it may contain (such as information about my health, mental health, beliefs, or personal life), for the sole purpose of preparing for and delivering my session. I understand this is my choice, that I did not have to write anything, that Listening to You is not a healthcare provider and this is not protected by HIPAA, and that I can withdraw this consent at any time by emailing hello@listening-to-you.com."
Retention and deletion
We keep personal data only as long as needed for the purposes above:
- Booking and contact data: kept while you are an active client or subscriber and for a limited period afterward, then deleted or anonymized.
- Optional free-text content: kept for the minimum time needed and deleted shortly after your session, unless you ask us to delete it sooner.
- Payment and tax records: retained as long as required by law and tax rules.
- Safety records: kept briefly and factually where appropriate, then deleted.
You can request deletion at any time (see Section 7).
Sub-processors and how your data is shared
We use trusted third-party providers to run the service. These providers process your data on our behalf, under Data Processing Agreements, and we share only what's needed. We do not sell your personal information. We may disclose information if required by law or to protect safety. Our current sub-processors are:
| Sub-processor | Purpose | Notes |
|---|---|---|
| Cal.com | Scheduling and intake form | Stores booking and intake data, including any free-text you provide. |
| Stripe | Payment processing and subscriptions | Handles card data directly; we don't store full card numbers. |
| Calendar and video for some sessions | Google Calendar and Google Meet, used to schedule and host calls. | |
| Video provider | Video for calls | Used to host some video sessions (for example, Zoom). |
International data transfers
We operate from [HOME STATE/COUNTRY], and our providers may process data in the United States and other countries. Where we transfer personal data out of the EU/UK, we rely on appropriate safeguards (for example, Standard Contractual Clauses or the UK International Data Transfer Agreement) and on our providers' transfer mechanisms.
Your rights
Depending on where you live, you may have rights to access, correct (rectify), delete, restrict, or object to processing of your personal data; to data portability; and to withdraw consent (including Article 9 consent) at any time. To exercise any right, email hello@listening-to-you.com. You also have the right to complain to your local data protection authority (EU/UK) or relevant regulator.
California (CCPA/CPRA) notice
If you are a California resident, you have rights to know, access, delete, and correct your personal information, to opt out of "sale" or "sharing" (we do not sell or share your personal information as those terms are defined), and to non-discrimination for exercising your rights. The categories of information we collect are described in Section 1. To exercise your rights, email hello@listening-to-you.com.
Children
Listening to You is for adults and is not intended for anyone under the age of majority where we operate. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, please contact us so we can delete it.
How to exercise your rights / contact us
To exercise any of the rights described above, to withdraw consent, or to ask a question about your privacy, email hello@listening-to-you.com. We will respond within the time required by applicable law.
Changes to this Policy
We may update this Policy from time to time. The "Last updated" date will reflect changes, and material changes will be communicated where reasonable.