Privacy Policy

1. Information We Collect

Revival Body Soul is the trading name of Katrina Margaret Bensted, sole trader (ABN 65 006 757 752). In this policy, “we”, “us”, and “our” refer to this entity.

We collect personal information that you voluntarily provide when booking services, subscribing to our newsletter, or contacting us. This may include your name, email address, phone number, and any health-related information you choose to share for the purpose of your treatment.

2. How We Use Your Information

We use your personal information to:

• Process and manage your bookings
• Send booking confirmations, reminders, and updates
• Deliver our monthly lunar newsletter (if subscribed)
• Respond to your enquiries
• Provide safe and informed bodywork and wellness services
• Improve our services and website experience

3. Payment Information

Payment processing is handled securely by Stripe. We do not store your credit card details on our servers. Stripe's privacy policy governs how your payment information is handled.

4. Email Communications

If you subscribe to our newsletter, you will receive monthly lunar-themed updates and wellness content. You can unsubscribe at any time by clicking the unsubscribe link in any email. We use Resend to manage email delivery.

5. Data Storage & Security

Your data is stored securely using Supabase, with encryption at rest and in transit. We take reasonable measures to protect your personal information from unauthorised access, disclosure, or misuse.

6. Data Retention

We keep personal information for as long as we need it to provide our services and meet our legal obligations:

• Booking and payment records — a minimum of five years to meet Australian Taxation Office record-keeping obligations; may be retained longer for tax, accounting, or legitimate business purposes.
• Newsletter subscribers — when you unsubscribe we stop sending you marketing emails. We keep a record of your unsubscribe to prevent accidental re-addition to the list.
• Intake information — retained alongside your booking records. You may request earlier deletion at any time by contacting us.
• Analytics data — retained according to PostHog's standard retention.
• Error monitoring data — retained according to Sentry's standard retention.

7. Analytics

We use PostHog (hosted in the European Union) to understand how visitors move through the site so we can improve the experience. PostHog sets a first-party cookie and a localStorage entry on your device to remember an anonymous visitor ID — no name, email, or other identifying information is stored in it. We do not retain IP addresses, we do not record session replays, and we do not share any analytics data with advertisers. You can opt out by enabling “Do Not Track” in your browser or by clearing site storage for this domain.

8. Error Monitoring (Sentry)

We use Sentry to monitor errors and diagnose technical issues on our website. The information Sentry receives is handled differently depending on where the error occurs:

• Browser errors (issues that happen on your device while you're using the site) are scrubbed of URL query parameters and any sensitive fields (such as tokens, email addresses, passwords, or session identifiers) before being sent. We keep stack traces, page paths, and your browser type so that we can reproduce the issue.
• Server-side errors (issues that happen on our servers while handling your request) may include additional technical context — such as the full request URL, IP address, and request headers — to help us diagnose issues quickly.

9. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing
• Supabase — data storage and authentication
• Resend — email delivery
• PostHog (EU region) — first-party analytics
• Vercel — website hosting
• Sentry — error monitoring (see Error Monitoring section above).

10. Overseas Disclosure

Some of our service providers store or process personal information outside Australia. Personal information may be transferred to:

• Supabase (database and authentication) — India
• Stripe, Resend, Vercel, and Sentry — United States
• PostHog (analytics) — European Union

We choose providers based on their published security and privacy practices.

11. Notifiable Data Breaches

Where required by law, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) of eligible data breaches under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988).

12. Your Rights

Under the Australian Privacy Act 1988, you have the right to access, correct, or request deletion of your personal information. To make a request, please contact us at kat@revivalbodysoul.com.au.

13. Complaints

If you have a complaint about how we have handled your personal information, please contact us at kat@revivalbodysoul.com.au. We will acknowledge your complaint within a reasonable period and aim to resolve it promptly.

If you are not satisfied with our response, you may escalate to the Office of the Australian Information Commissioner:

• Web: oaic.gov.au
• Phone: 1300 363 992

14. Contact

If you have questions about this privacy policy, please contact us at kat@revivalbodysoul.com.au.