Legal
Privacy Policy
Draft for review. This policy is written to be accurate to how the site works today. It is not legal advice and is pending review by an Alberta lawyer. Items in [brackets] are still being confirmed.
Our commitment
Casey MacDonald (“Casey,” “I,” or “we”) respects the sensitivity of what people share when they reach out about healing work. This policy explains what personal information this website collects, why, how it is protected, and the choices you have. We aim to follow Alberta’s Personal Information Protection Act (PIPA) and, where it applies to information that crosses provincial or national borders, the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
Who we are
Casey MacDonald is a solo Medical Intuitive and Energy Medicine practitioner based near Spruce Grove, Alberta. For privacy questions or requests, the person accountable is [privacy officer / contact name to confirm], who can be reached at [privacy contact email to confirm] or through the enquiry form on this site.
What we collect
When you send an enquiry through the booking form, we collect:
- Your name and email (required), so Casey can reply to you personally.
- Your phone number (optional), if you prefer to be reached that way.
- Your preferred format (in person, online, or either) and any preferred times you share, to help arrange a session.
- A short message in answer to “What brings you here?” This is free text, and you may choose to include details about your health, wellbeing, or personal situation. Please see “Sensitive information” below.
- Any notes Casey adds to your record after you connect, so she can support you well.
We do not collect payment information on this website. There are no public accounts or logins. We use a hidden anti-spam field that real visitors never see or fill; it is never stored.
Sensitive information
Because of the nature of this work, the “What brings you here?” message may include health-related or otherwise sensitive details. We treat anything you share with care and in confidence. In a first enquiry, please share only what you are comfortable putting in writing, and save detailed health information for a private session. Casey is a wellness practitioner, not a regulated health-information custodian, and this website is not a medical record.
How we use your information
- To reply to your enquiry and arrange a session that works for you.
- To keep a simple record of our conversation so Casey can follow up and support you.
- To send something you have specifically asked for (for example, a free guided visualisation, if that is offered).
We do not send newsletters or marketing emails. If we ever offer a mailing list, it would be separate and only with your clear opt-in.
Consent
By sending an enquiry, you consent to us using your information for the purposes above. You can withdraw your consent or ask us to stop contacting you at any time by replying to any message or contacting us at the address above, subject to any legal or record-keeping obligations.
Cookies and tracking
The public booking form does not set any cookies and does not track you. We do not use advertising or behavioural-tracking cookies. The only cookies on this site are tied to Casey’s own private admin sign-in. Some shared resources, such as web fonts, may be loaded from third-party providers whose servers can see your network request. [If website analytics are added later, this section and a cookie notice will be updated.]
How your information is stored and who can see it
Your enquiry is stored in Casey’s own private database, hosted on Cloudflare. Access is limited to Casey and the people helping operate the site. We use the following service providers (processors):
- Cloudflare hosts the website and database and processes web traffic on Casey’s behalf.
- Google is used for Casey’s own private admin sign-in, and to serve the site’s web fonts (Google Fonts): when a page loads, your browser requests those fonts from Google, so Google’s servers receive your network address. Google is not used to track you or to profile visitors.
We also keep a dated copy of each enquiry as a submission record, so we can follow up with you and look into problems such as a form or delivery error. Submissions caught by the anti-spam field are dropped and not stored.
We never sell or rent your information. We share it only with the providers above as needed to run the site, or where required by law. Some future tools (such as Zoom or Google Calendar for scheduling) are not yet connected; if they are added, this policy will be updated first.
Where your information is processed
Our providers operate global networks, so your information may be stored or processed outside Alberta or Canada, including in the United States, where it may be subject to the laws of those places. We choose reputable providers and rely on their security and data commitments.
How we protect your information
Information is encrypted in transit. Site secrets are kept out of the code as protected settings. When the site limits repeated form submissions, your network address is converted into an irreversible code (a hash) before it is stored, so the address itself is not kept. We use plain, honest language here on purpose: your enquiry message is currently stored as ordinary text in the database, without extra field-level encryption. [Operator to confirm whether field-level encryption for the message text will be added.]
How long we keep it
We keep your information only as long as needed for our relationship and reasonable follow-up, or as the law requires, and then delete or anonymise it. [A specific retention period is being set by the operator.] You can ask us to delete your information sooner, as described below.
Your privacy rights
Under Alberta PIPA, you may:
- Ask what personal information we hold about you, and get a copy.
- Ask us to correct information that is wrong.
- Withdraw your consent or ask us to delete your information.
To make a request, contact us at the address above. If you are not satisfied with how we handle it, you may contact the Office of the Information and Privacy Commissioner of Alberta, and, where PIPEDA applies, the Office of the Privacy Commissioner of Canada.
If something goes wrong
If a privacy breach ever creates a real risk of significant harm, we will act to contain it and will notify the affected people and the Alberta Commissioner as required by law.
Children and minors
This site is intended for adults aged 18 and over. We do not knowingly collect information from children without a parent or guardian’s consent. A guardian can contact us to have a child’s information removed.
Links to other sites
This policy covers caseymacdonald.ca only. Links to other sites, such as the page for the book Casey co-authored, are run by others under their own privacy practices.
Changes to this policy
We may update this policy. The “last updated” date above shows the current version, and we will note any significant changes in a reasonable way.
Contact us
For any privacy question or request, contact [privacy contact email to confirm] or use the enquiry form on this site, and we will respond personally.