Privacy Policy for FindMyOsteo

Last Updated: November 23, 2025

Thank you for visiting FindMyOsteo ("we," "us," or "our"). This Privacy Policy outlines how we collect, use, and protect your personal and non-personal information when you use our website located at https://findmyosteo.com (the "Website") and our osteopath marketplace services.

By accessing or using the Website and our services, you agree to the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use the Website.

1. Company Information

FINDMYOSTEO
30 North Gould Street
Sheridan, Wyoming 82801
United States
Email: support@findmyosteo.com

2. Information We Collect

2.1 Personal Data

We collect the following personal information from you:

Name: We collect your name to personalize your experience, facilitate bookings, and communicate with you effectively.

Email Address: We collect your email address to send you booking confirmations, consultation reminders, updates about your account, and customer support communications.

Payment Information: We collect payment details to process consultation bookings and voucher purchases securely. Payment processing is handled by Stripe, a trusted third-party payment processor. We do not store your full credit card information on our servers. Stripe maintains PCI-DSS compliance for secure payment processing.

Profile Information: If you register as a practitioner, we collect additional information including your professional credentials, business address, specialties, consultation types, availability schedule, and service pricing.

Consultation Details: We collect information about your bookings including consultation date, time, type, location preferences, and any notes or reviews you provide.

Location Data: We collect city and geographic information to help match you with nearby osteopaths and provide relevant search results.

2.2 Non-Personal Data

We use web cookies and similar technologies to collect non-personal information such as your IP address, browser type, device information, browsing patterns, and usage analytics. This information helps us enhance your browsing experience, improve our services, analyze trends, and optimize our platform.

2.3 Authentication Data

We use Supabase for authentication services. When you sign up or log in, Supabase processes your authentication credentials securely. We may also offer Google OAuth login for your convenience.

3. Purpose of Data Collection

We collect and use your personal data for the following purposes:

Booking Processing: To facilitate consultation bookings between patients and osteopaths, process payments, send confirmations, and manage appointments.

Marketplace Operations: To operate our marketplace platform, verify practitioner credentials, manage practitioner profiles, and maintain service quality.

Customer Support: To respond to your inquiries, resolve issues, and provide assistance with bookings or account management.

Communications: To send you booking confirmations, reminders, updates about your consultations, platform announcements, and responses to your reviews.

Payment Processing: To process payments for consultation vouchers and bookings through our payment partner Stripe, including handling platform fees and practitioner payouts.

Service Improvement: To analyze usage patterns, improve our platform features, enhance user experience, and develop new services.

Legal Compliance: To comply with applicable laws, regulations, and legal processes, including verification of practitioner credentials and maintaining transaction records.

4. Data Sharing and Third-Party Services

We share your data only as necessary to provide our services:

Payment Processors: We share payment information with Stripe to process transactions securely. Stripe's privacy policy can be found at https://stripe.com/privacy.

Database Services: We use Supabase (PostgreSQL) to securely store and manage your data with Row Level Security policies to protect your information.

Email Services: We use Resend to send transactional emails such as booking confirmations and consultation reminders.

Practitioners: When you book a consultation, we share your name, contact information, and booking details with the osteopath you've selected to facilitate your appointment.

Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

- Secure data transmission using HTTPS/SSL encryption
- Row Level Security (RLS) policies in our database
- Secure authentication with Supabase Auth
- Regular security audits and updates
- Limited employee access to personal data

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

- Active account data is retained while your account remains active
- Booking and consultation records are retained for 7 years for legal and tax compliance
- Payment transaction records are retained as required by financial regulations
- Deleted account data is anonymized or removed within 30 days, except where retention is legally required

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

Access: Request access to the personal data we hold about you.

Correction: Request correction of inaccurate or incomplete personal data.

Deletion: Request deletion of your personal data, subject to legal retention requirements.

Portability: Request a copy of your data in a structured, machine-readable format.

Objection: Object to the processing of your personal data for certain purposes.

Withdraw Consent: Withdraw consent for data processing where we rely on consent as the legal basis.

To exercise these rights, please contact us at support@findmyosteo.com. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Website. You can control cookie settings through your browser preferences. However, disabling cookies may limit your ability to use certain features of our platform.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your data.

10. Children's Privacy

FindMyOsteo is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@findmyosteo.com, and we will take steps to delete such information.

11. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, the right to delete your data, and the right to opt-out of the sale of your data. We do not sell personal data. To exercise your CCPA rights, contact us at support@findmyosteo.com.

12. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any updates will be posted on this page with an updated "Last Updated" date. For material changes, we will notify you via email or through a prominent notice on our Website. Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at:

Email: support@findmyosteo.com
Business Address: 30 North Gould Street, Sheridan, Wyoming 82801, United States

For general inquiries about our services, you may also contact: nicolas@findmyosteo.com

By using FindMyOsteo, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.