Privacy Policy

What We Collect

When you book a service through Vitely Wellness, we collect:

• Booking info: Your name, email address, and phone number (optional)
• Appointment details: Service booked, date, time, and any notes you add
• Usage data: IP address and browser type, used for rate limiting and security
• Cookies: A session cookie to keep you signed in (staff only)

How We Use It

• To confirm and manage your bookings
• To send you booking confirmations and reminders by email
• To let you view or cancel your appointments
• To prevent abuse and spam

We do not sell your data or use it for advertising.

Third Parties

Your data is shared only with services that make the platform work:

• Resend: Sends booking confirmation and reminder emails on our behalf
• Supabase: Hosts the database where your booking information is stored

Each service has its own privacy policy. We don't control what they do with infrastructure-level data.

Your Rights

You can:

• Cancel any upcoming booking via the link in your confirmation email
• View all your bookings using the magic link sent to your email
• Request deletion of your personal data by contacting the business directly

Security

All connections use HTTPS. Passwords are hashed and never stored in plain text. Login attempts are rate-limited. Booking links use unguessable UUID tokens.

Data Retention

Booking records are kept for business and accounting purposes. If you'd like your personal information removed, contact Vitely Wellness directly.

Contact

Questions about your data? Contact Vitely Wellness directly. This platform is powered by Vitely.