Privacy Policy

Who we are

This Privacy Policy explains how the Sandra Madi practice (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit sandramadi.com or get in touch with us. Sandra Madi is a Rapid Transformational Therapy (RTT) and hypnotherapy practice based in Québec, Canada, serving clients online.

We are committed to handling your personal information responsibly and in line with Québec’s Law 25, Canada’s PIPEDA, and — for visitors in the European Union — the GDPR.

Information we collect

Contact form: when you write to us, we collect your name, email address, the subject and message you provide, and the fact that you consented to being contacted. We ask you not to include sensitive health information in the form.

Newsletter: if you choose to subscribe, we collect your email address and a record of your consent (date and language).

Booking: appointments are handled by our scheduling provider (Cal.com), and any payment is processed by Stripe through Cal.com. We never see or store your full payment-card details.

Analytics: with your consent, we use analytics to understand how the site is used. These analytics do not load until you accept them via the cookie banner. See our Cookie Policy for details.

We do not collect special-category or health data through this website, and we do not track you across other sites.

How we use your information

We use your information to reply to your enquiries, to arrange and deliver sessions you request, to send the newsletter you asked for, and to operate, secure, and improve the website.

Our legal basis is your consent (which you can withdraw at any time) and, where applicable, our legitimate interest in responding to you and running the practice. We do not sell your personal information.

Cookies and analytics

We use a small number of essential cookies needed for the site to work (for example, to remember your language choice and your cookie preferences). Non-essential analytics cookies are used only after you consent.

You can review and change your choices at any time. Full details are in our Cookie Policy.

Service providers

We rely on trusted providers to operate the website and the practice, and we share only the information they need to perform their service: Supabase (secure storage of contact-form and newsletter records), Resend (sending transactional and newsletter emails), Cal.com and Stripe (scheduling and payment), Vercel (website hosting), and Google Analytics (consent-based usage analytics).

Some of these providers may process or store data outside Québec or Canada, including in the United States and the European Union. Where information is transferred internationally, we take reasonable steps to ensure it receives an adequate level of protection.

How long we keep your information

We keep personal information only for as long as necessary for the purpose it was collected, or as required by law. Contact-form messages and newsletter records are retained while they remain relevant to our correspondence or your subscription, and are deleted on request.

Your rights

Subject to applicable law, you have the right to access the personal information we hold about you, to ask us to correct it, to request its deletion, and to withdraw your consent at any time. EU visitors may also have rights to restrict or object to certain processing and to data portability.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law.

Person responsible for personal information

In accordance with Québec’s Law 25, the person responsible for the protection of personal information for this practice is Sandra Madi. You can reach this person at info@sandramadi.com for any privacy question or to exercise your rights.

How we protect your information

We use appropriate technical and organisational measures to protect your information, including access controls on our stored records and encrypted connections. No method of transmission or storage is completely secure, but we work to safeguard your information and to limit what we collect to what we genuinely need.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes will be made clear on this page.

Contact us

If you have any questions about this policy or about how we handle your personal information, please write to us at info@sandramadi.com or through our contact page.