Privacy Policy

The data controller responsible for your personal information is Dr. Marwa Shouman. If you have any questions or concerns about this policy or your data, please contact us at marwamindful@gmail.com.

We collect the following categories of personal information: • Account data: your first name, last name, and email address when you register. • Authentication data: when you sign in with Google, we receive your name, email address, and profile picture from Google. • Payment data: billing information processed securely by Stripe. We do not store card numbers on our servers. • Booking data: the date, time, and service you select when scheduling a consultation. • Course data: enrollment records and progress for courses you purchase. • Communication data: messages you send us via the contact form. • Newsletter data: your email address if you subscribe to our newsletter.

We use your personal information to: • Create and manage your account. • Process bookings and payments for consultations. • Deliver online courses you have purchased. • Send service-related emails such as booking confirmations. • Send newsletters (only if you have subscribed — you may unsubscribe at any time). • Improve and secure our website and services. • Comply with legal obligations.

When you choose to sign in with Google, Google shares your name, email address, and profile picture with us. We use this information solely to create or link your account. We do not receive your Google password. You may revoke our access at any time through your Google Account settings at myaccount.google.com.

We use a secure, HTTP-only session cookie (auth_token) to keep you signed in. This cookie does not track you across other websites and is removed when you sign out or after 7 days. We do not use advertising or analytics cookies.

We share your data with trusted third parties only as necessary to deliver our services: • Stripe — payment processing. View their privacy policy at stripe.com/privacy. • Google — OAuth sign-in and calendar scheduling. View Google's privacy policy at policies.google.com/privacy. • MongoDB Atlas — secure cloud database hosting for your account and booking data. • Cloudinary — secure video hosting for course content. We do not sell your personal data to any third party.

We retain your personal information for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by emailing marwamindful@gmail.com. Payment records may be retained for up to 7 years to comply with financial regulations.

Depending on your location, you may have the right to: • Access the personal information we hold about you. • Correct inaccurate or incomplete data. • Request deletion of your data. • Object to or restrict how we process your data. • Receive a portable copy of your data. To exercise any of these rights, please contact us at marwamindful@gmail.com.

We implement industry-standard security measures, including HTTPS encryption, HTTP-only cookies, and hashed passwords. Payment transactions are processed over encrypted connections via Stripe. No method of transmission over the internet is 100% secure; however, we take all reasonable steps to protect your data.

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.