Privacy Policy

Ali Phillips Wellness (“we,” “us,” or “our”) respects your privacy. This Privacy Policy describes what personal information we collect through aliphillipswellness.com and our related booking, newsletter, and client-portal surfaces, how we use it, who we share it with, and the choices you have. By using the site or scheduling with us, you agree to the practices described here.

We collect only what we need to schedule sessions, deliver communications you've asked for, and keep the site running. Depending on how you interact with us, this may include:

• Contact details you provide through the newsletter, contact form, booking flow, or enrollment flow — typically name, email address, and (optionally) phone number.
• Session notes or context you share in a free-form field so we can prepare for our time together (for example, accommodations, focus areas, or questions).
• Account information managed by our authentication provider Clerk when you sign in to the client portal — email address, hashed credentials, and session identifiers. We do not see or store your password.
• Payment information you submit to complete a booking or enrollment. Payments are processed by Stripe; we receive a payment status and a Stripe session identifier, but we do not receive or store your full card number.
• Scheduling metadata used to hold and confirm your session (start/end time, session type, modality, and, for in-person sessions, the venue snapshot).
• Usage and device data collected by our analytics provider (see the Cookie Policy) — such as pages visited, referring URL, general location derived from IP, browser type, and interaction events.
• Marketing attribution data captured client-side into a first-party cookie (“apw_attribution”) that stores the campaign or referrer that first and most recently brought you to the site. This cookie lives for up to 180 days.

We use the information we collect to:

• Schedule, confirm, remind you about, and follow up on sessions, workshops, and programs.
• Process payments and send receipts.
• Respond to messages you send through the contact form or by replying to our emails.
• Send you the newsletter when you have subscribed, and let you unsubscribe at any time.
• Understand how the site is used so we can improve navigation, performance, and content.
• Detect and prevent fraud, abuse, and technical issues.
• Comply with applicable law and enforce our Terms of Service.

We use a small number of cookies and similar technologies to keep you signed in, remember scheduling context, and measure how the site performs. Details — including how to disable analytics cookies — live in our Cookie Policy at /cookie-policy.

We share information with the vendors that help us run the practice. Each provider is contractually restricted to processing your data for the purposes we specify. The providers we currently rely on include:

• Clerk — authentication and account management for the client portal.
• Stripe — payment processing for sessions, workshops, and enrollments.
• Resend — transactional and newsletter email delivery, plus delivery / complaint webhooks.
• Google (Calendar & Meet) — scheduling, calendar invites, and virtual session links.
• Google Analytics 4 — aggregate site usage and campaign attribution.
• Vercel — web hosting, deployment, and image / file storage (Vercel Blob).
• Sanity — editorial content management for the site's pages, offerings, and events.
• Neon — our managed Postgres database provider.

We keep booking, enrollment, and payment records as long as needed to service your account, fulfill legal and tax obligations, and resolve disputes. Contact and newsletter records are kept until you unsubscribe or ask us to delete them. Analytics data is retained according to the settings in Google Analytics 4 (typically 14 months by default).

Depending on where you live, you may have rights to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain uses. To exercise any of these rights, contact us through the contact form at /contact. We will respond within a reasonable timeframe as required by applicable law.

You can unsubscribe from marketing emails at any time using the link in the footer of any newsletter, or by replying to ask us to remove you. Transactional emails (booking confirmations, receipts, reminders) are not marketing and will continue as long as you have an active session with us.

The site and our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use commercially reasonable administrative, technical, and physical safeguards to protect the information we hold, including encryption in transit (HTTPS everywhere), scoped access controls, and vendor selection based on security posture. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

The site is operated from the United States. If you visit from elsewhere, understand that your information may be transferred to, stored, and processed in the U.S. and other jurisdictions where our service providers operate.

We may update this Privacy Policy from time to time. When we do, we'll revise the “Last updated” date at the top of the page. Substantive changes will be flagged more prominently — typically through a notice on the site or a message to newsletter subscribers.

Questions about this Privacy Policy or how we handle your information? Reach out through the contact form at /contact and we'll get back to you.