Legal
Privacy Policy
Last updated: 23 August 2026
Your health information is personal, and we treat it that way. This page explains exactly what we collect, why, who can see it, how long we keep it, and what you can ask us to do with it.
1. Who is responsible
Marina Pozzi Wellness LLC, New York, New York, is responsible for the personal information described here. In European terms, we are the data controller.
Contact for any privacy matter: pozzi.marina18@gmail.com.
2. What we collect
Information you give us
- Through the contact form: your name, email address, phone number if you choose to give it, your preferred location, the service you are interested in, and whatever you write in the message field.
- By email or message: anything you send us directly.
- Before and during sessions: health history, symptoms, injuries, surgeries, diagnoses, medication, allergies, pregnancy, assessment findings and notes on your progress.
- For payment: the record that a payment was made and for what. Card details are handled by the payment provider and never stored by us.
Information collected automatically
This is a simple static website. It does not run analytics, advertising pixels or behavioural tracking. However:
- Our hosting provider keeps standard server logs, which can include your IP address, browser type, the pages requested and the time of the request. These are used for security and to keep the site running.
- The site loads fonts from Google Fonts. When a page loads, your browser contacts Google's servers, which means your IP address is visible to Google. We do not control what Google does with that request. If you would rather avoid it, most browsers allow you to block third-party requests.
3. Why we use it
- To answer your enquiry and arrange a consultation or session.
- To assess you safely and plan appropriate care.
- To keep accurate clinical records, as expected of a healthcare practice.
- To take payment and issue receipts.
- To communicate about appointments, changes and follow-up.
- To comply with legal, tax and professional obligations.
- To protect our legal rights if a dispute or claim arises.
We do not sell your information. We do not share it with advertisers. We do not send marketing emails unless you have specifically asked us to.
4. Our legal basis
If you are in the European Economic Area or the United Kingdom, the GDPR applies and our legal bases are:
- Contract: to provide the sessions you have booked.
- Consent: for handling health data and for any optional communication. You may withdraw consent at any time.
- Legal obligation: for record keeping, tax and accounting.
- Legitimate interests: to run the practice securely and defend legal claims, balanced against your rights.
5. Health data
Health information is treated as a special category of data. We collect only what is necessary to work with you safely, we discuss it only with you, and we do not disclose it to anyone else without your explicit written consent, unless the law requires it or there is a serious risk to someone's safety.
Clinical notes are kept confidential and stored securely. You can ask to see them at any time.
6. Who we share it with
We share personal information only with service providers who help us operate, and only to the extent they need it:
- Website hosting and form handling. Messages sent through the contact form are processed by our hosting provider before reaching us by email.
- Email provider. Our correspondence with you is stored in our email account.
- Payment processor. To take and record payment.
- Accountant and, if ever necessary, legal advisers.
We may also disclose information where we are legally required to, for example in response to a valid court order, or where disclosure is necessary to prevent serious harm.
7. International transfers
We are based in the United States and our service providers may store data on servers in the United States. If you are writing to us from the European Economic Area, the United Kingdom or elsewhere, your information will be transferred to and processed in the United States, which may have different data protection standards than your country. By contacting us, you understand this transfer takes place.
8. How long we keep it
- Enquiries that do not become bookings: up to 12 months, then deleted.
- Clinical records: retained for the period required for healthcare records under applicable New York law and professional standards, and no longer than necessary.
- Financial records: as required by tax law, generally seven years.
When information is no longer needed, we delete it or anonymise it.
9. Your rights
Wherever you live, you can ask us to:
- Tell you what personal information we hold about you.
- Give you a copy of it.
- Correct anything that is wrong or incomplete.
- Delete it, where we are not legally required to keep it.
- Restrict or object to how we use it.
- Withdraw consent you previously gave.
Write to pozzi.marina18@gmail.com and we will respond within 30 days. We will never charge you for making a request, and we will never treat you differently because you made one.
If you are in the EEA or UK, you also have the right to data portability and the right to lodge a complaint with your national data protection authority.
If you are a California resident, you have the right to know what personal information is collected and how it is used, the right to request deletion, and the right to non-discrimination for exercising those rights. We do not sell or share personal information as those terms are defined under California law.
10. Security
We use reasonable technical and organisational measures to protect your information, including encrypted connections to this website, access controls on our devices and accounts, and limiting who can see clinical records to Marina herself.
No method of transmission or storage is completely secure. Please do not send sensitive medical details through the contact form; keep it brief and we will take the detail in person or over a secure channel.
11. Children
This website is not directed at children, and we do not knowingly collect information from anyone under 16 through it. Clients under 18 are seen only with the written consent of a parent or legal guardian, who is present for the session. If you believe a child has given us information, contact us and we will delete it.
12. Changes to this policy
If we change how we handle personal information, we will update this page and revise the date at the top. If the change is significant and affects existing clients, we will tell you directly.
13. Contact
Marina Pozzi Wellness LLC
New York, New York, United States
pozzi.marina18@gmail.com