What is kept, and why.

Your name and email address, taken by Stripe when you pay and passed back to this site so the booking can be confirmed and the confirmation sent.

The session you booked, its time, and what you paid.

A record of the payment notifications Stripe sends this site, which include the details above.

The few lines Jessie writes up after a session, if you want them. There is a section on those below.

Nothing else is asked for. You get no account and no password, and there is no intake form on this website.

Card numbers. They are entered on Stripe's payment page and never reach this website or its database.

Audio. Nothing in a session is recorded, there is no transcription, and no third party tool listens to any part of it. There is nowhere in this system a recording could be kept, which is deliberate rather than incidental.

If you want them, Jessie writes a few lines by hand after you leave and types them up: what came through, and what the cards were saying if you had a reading. They are her words, written from memory and from her own notepad.

You can say you would rather have no notes at all. There is a button for it at the foot of your own page, the one the link in your confirmation email opens, and you can use it before your first session or years later. You can also just tell Jessie. The session itself is exactly the same one either way, and she will not ask you again.

Choosing that deletes any notes already written for you, rather than hiding them, and turning notes back on afterwards does not bring them back.

A note is a draft until she sends it. While she is still writing, you do not see it and it is not sent anywhere.

Notes are kept for two years after your last session and are then deleted. They are not payment records, so the seven year period further down this page does not hold on to them.

Ask at any time and they are deleted sooner, including ones already sent to you. You do not have to give a reason.

To give you the session you paid for, to let you change or cancel it from the link in your email, to put it in Jessie's calendar so the time is genuinely reserved, to write up and send you the notes if you have asked for them, and to keep the payment records a small business is required to keep.

It is not used for marketing. You will not be added to a mailing list by booking.

Jessie, who gives the sessions and runs the practice.

One other person: the developer who built this website and keeps it running, Danny, who can see customer records, bookings and notes while doing that work. Both of them reach it through their own Google account, and access is removed by taking an address off a list of two.

Stripe, which processes the payment and holds the payment record.

Resend, which delivers the confirmation and reminder emails.

Google, in two ways. Google Calendar holds the booking in Jessie's diary, including your name and email so she knows who is coming. Google also handles the sign-in for those two accounts, which tells Google who is signing in and nothing at all about you.

Neon, which hosts the database, and Vercel, which hosts the website.

Apart from Jessie and Danny, everything on this list is a service provider acting on Jessie's instructions. Your details are not sold, and they are not shared with anyone else.

Some of these providers store data outside New Zealand, including in the United States and Europe. Booking a session means accepting that your details are handled that way.

They are all providers that commit to comparable privacy safeguards, but they are not subject to New Zealand law in the way a local business is.

Payment and booking records are kept for seven years, which is the period required for New Zealand tax records.

If you would rather your details were removed sooner, ask, and anything not legally required to be kept will be deleted.

Under the Privacy Act 2020 you can ask what is held about you and ask for anything wrong to be corrected. Ask, and you will get an answer.

Send it to jessie@angelicreiki.nz.

Visits are counted using Vercel Analytics, which is cookieless and does not identify individual visitors.

The link in your confirmation email carries a signed token so it opens only your own booking. Treat it like a receipt and do not forward it.