Privacy Policy

Martina O'Dowd, trading as Reflexology By Martina, is the data controller for this website and our booking platform.

We only collect what we genuinely need to provide your appointment.

• Booking details: your name, email address, phone number, the treatment you book, the date and time, and any notes you choose to share.
• Payment metadata: we never see or store your card details. Stripe handles payment securely; we only receive a transaction reference and the amount.
• Email engagement: our email provider (Resend) tells us if a confirmation email was delivered, bounced, or marked as spam, so we don't keep emailing addresses that fail.
• Technical data: server access logs (IP address, browser, page visited) kept for security and debugging.
• Error reports: when something breaks we receive an anonymised error trace via Sentry; personal data is masked.

• To fulfil your booking — confirm it, send reminders, contact you if there's a change.
• To process your payment via Stripe (legal basis: contract performance).
• To keep records required by Irish tax and accounting law (legal basis: legal obligation).
• To improve and secure the website (legal basis: legitimate interest).

We don't sell or rent your data. We only share what's needed with the providers that run the service:

• Stripe — processes your card payment.
• Resend — delivers confirmation and reminder emails.
• Sentry — captures anonymised error reports for debugging.
• Google Calendar (optional) — syncs your appointment to our practitioner's calendar.
• DigitalOcean — hosts the application servers (in the EU).
• Irish authorities (Revenue, courts) only if required by law.

All processors are bound by data-processing agreements. Stripe and Resend are based in the US under the EU–US Data Privacy Framework.

• Booking records — kept for 7 years after the appointment date to meet Irish tax and accounting requirements.
• Email logs — kept for 90 days then automatically deleted.
• Server access logs — kept for 30 days.
• Error reports — kept by Sentry for 90 days.

If you ask for your data to be erased, we anonymise the booking record (your name, email, phone, and notes are removed) but the appointment itself is retained for the legally required period.

Under GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Correct data that is wrong or out of date.
• Erase your data ("right to be forgotten") — subject to the retention requirements above.
• Restrict or object to processing.
• Withdraw consent for marketing emails at any time (use the unsubscribe link in any reminder email).
• Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

To exercise any of these rights, email Martinaodowd@hotmail.comor use the "Manage Booking" link in your confirmation email — you'll find a "Download My Data" and a "Delete My Data" option there.

This site uses a small number of strictly necessary cookies and third-party scripts. See our Cookie Notice for details.

If we change this policy we'll update the date at the top. Substantive changes will be highlighted on the booking page.