This Privacy Policy describes how Freedom From Patterns (operated by Norbert Seres, hereinafter "we," "us," or "Facilitator") collects, uses, stores, and protects personal information in connection with this website (freedomfrompatterns.com) and all associated private wellness facilitation services. We take your privacy seriously. Please read this document carefully before booking any session or submitting any personal information through this site.

Section 1

Data We Collect & Why We Collect It

We collect only the personal information that is strictly necessary to fulfill the specific purpose for which it is provided. We do not engage in speculative data collection, behavioral profiling, or data aggregation for commercial advertising purposes. The categories of personal data we may collect, and the specific purpose for which each is collected, are set out in the table below.

Data Category Specific Data Points Purpose
Identity First name, last name To identify and address the client; required for Acuity Scheduling appointment records
Contact Email address, phone number To send booking confirmations, appointment reminders, and session-related communications via Acuity; to coordinate remote video call logistics
Location Street address, city, ZIP code Strictly required to facilitate in-home mobile session travel and confirm that the address falls within the 10-mile service radius of Downtown Pensacola, Florida
Access & Entry Gate codes, building entry codes, parking instructions Collected optionally via the Acuity booking notes field solely to enable the Facilitator to arrive punctually for in-home sessions. This information is never shared with third parties and is deleted after session completion.
Payment Payment transaction reference, last four digits of card (where retained by Stripe) To process session payments. Full card numbers, CVV codes, and banking credentials are processed exclusively by Stripe, Inc. and are never stored, viewed, or retained by the Facilitator or on this website.
Technical IP address, browser type, general geographic region, pages visited, session duration Collected automatically by Cloudflare's infrastructure and privacy-respecting analytics solely for site performance monitoring and basic traffic analysis. See Section 6 for full details.

We do not collect: Social Security Numbers, government-issued identification numbers, medical records, health insurance information, biometric data, or any sensitive personal data beyond what is described in this table.

Section 2

How Your Data Is Used

Personal data collected through this site and associated booking systems is used exclusively for the following purposes:

  • Scheduling, confirming, and managing private wellness facilitation appointments
  • Communicating with clients regarding their bookings, including reminders and logistical coordination
  • Processing secure payments for sessions and packages through Stripe
  • Facilitating travel to in-home session locations within the Pensacola service area
  • Coordinating secure video call connections for remote sessions
  • Complying with applicable legal obligations

We do not sell, rent, lease, trade, or otherwise transfer your personal information to any third party for marketing, advertising, research, or any other commercial purpose. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Section 3

Third-Party Sub-Processors

In order to operate this website and provide session services, we engage the following trusted third-party sub-processors. Each is engaged solely to fulfill the specific function described, and each is required to handle your data in accordance with applicable privacy law. We do not authorize any sub-processor to use your personal data for their own independent purposes beyond what is necessary for the service they provide to us.

Acuity Scheduling (Squarespace, Inc.)
Appointment Booking & Calendar Management

Acuity Scheduling is used to manage all session bookings, calendar availability, appointment confirmations, and automated reminder communications. When you complete a booking, your name, email address, phone number, address (for in-home sessions), and any notes you provide (such as entry codes) are transmitted to and stored within Acuity's secure platform. Acuity is operated by Squarespace, Inc. and is compliant with applicable US privacy regulations. Your data within Acuity is used exclusively for the purpose of scheduling and managing your appointments with the Facilitator.

Acuity Privacy Policy →
Stripe, Inc.
Encrypted Payment Processing

Stripe is used exclusively to process all session and package payments through its encrypted payment infrastructure. When you complete a payment, your card details are transmitted directly to Stripe via secure TLS-encrypted connection. At no point does the Facilitator, this website, or any server operated by Freedom From Patterns receive, view, store, or have access to your full credit card number, card verification code (CVV/CVC), or banking credentials. Stripe is PCI DSS Level 1 certified — the highest level of payment security certification available. Stripe may retain transaction records and payment references in accordance with their own privacy policy and applicable financial regulations.

Stripe Privacy Policy →
Cloudflare, Inc.
Website Hosting, Delivery & Basic Traffic Analytics

This website is hosted and delivered via Cloudflare Pages, Cloudflare's static site hosting infrastructure. Cloudflare operates a globally distributed network that serves website files quickly to visitors regardless of their geographic location. As part of its standard operation, Cloudflare processes visitor IP addresses and basic request metadata at the network level to provide DDoS protection, optimize delivery speed, and maintain service reliability. We also use Cloudflare's privacy-respecting analytics product, which provides aggregated, non-identifiable traffic data (such as page view counts and general geographic regions) without the use of persistent tracking cookies or cross-site fingerprinting. No individual visitor profiles are created or retained through this analytics configuration.

Cloudflare Privacy Policy →

No other third-party service providers receive your personal data in connection with this website or its services. We do not use Google Analytics, Facebook Pixel, or any other advertising-network tracking technology on this site.

Section 4

Session Confidentiality & Its Exceptions

Our commitment. Everything you share within a private one-on-one session — every personal breakthrough, story, disclosure, emotional experience, or insight — remains entirely and permanently confidential. This is a foundational and non-negotiable commitment of this practice.

The Facilitator does not discuss, reference, publish, share, or disclose the content of any client session to any person, organization, or entity for any purpose — including but not limited to research, education, marketing, or social proof — without your explicit prior written consent.

Testimonials and experiential accounts that appear on this website have been provided voluntarily by clients who chose to share their experiences and have given explicit consent for their statements to be used in this context.

Exceptions to Confidentiality. The confidentiality described above is subject only to the following narrow, legally defined exceptions. The Facilitator is committed to applying these exceptions only to the minimum extent necessary and only where the circumstances clearly require it:

  • Imminent Risk of Harm. Where the Facilitator reasonably and in good faith believes that you or another clearly identified person faces a clear, serious, and imminent risk of physical harm — including self-harm or harm to others — the Facilitator may disclose information to appropriate emergency services, law enforcement, or protective authorities to the minimum extent necessary to prevent that harm. The Facilitator will make every reasonable effort to discuss this concern with you directly before taking such action, where doing so would not increase the risk of harm.
  • Valid Legal Compulsion. Where disclosure is required by a valid court order, judicial subpoena, or other binding legal mandate issued by a court or governmental authority of competent jurisdiction. In such a case, the Facilitator will make reasonable efforts to notify you in advance of compliance, to the extent permitted by the terms of the mandate and applicable law, so that you may have the opportunity to seek legal protection if you choose to do so.

Important legal note regarding privilege. The Facilitator is a private wellness facilitator and is not a licensed psychologist, therapist, counselor, or other healthcare professional operating under Florida's statutory confidentiality or privilege protections (e.g., Florida Statute §90.503, Psychotherapist-Patient Privilege). Communications in sessions do not carry the same legally protected privilege as communications with a licensed therapist or attorney. Clients who require legally privileged confidentiality should seek services from appropriately licensed professionals.

Section 5

Data Retention

We retain personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

  • Booking and contact data (held within Acuity Scheduling): Retained for the duration of the client relationship and for a period of up to three (3) years thereafter, to accommodate any future session inquiries, scheduling requests, or legitimate legal claims.
  • Payment transaction records (held by Stripe): Retained by Stripe in accordance with their data retention policies and applicable financial regulations, which typically require retention for up to seven (7) years.
  • Entry codes and access instructions: Deleted promptly following completion of the relevant in-home session. These are not retained in any long-term record.
  • Analytics data (aggregated, non-identifiable): Aggregated traffic data retained for up to twelve (12) months for site performance review purposes.

Upon expiry of the applicable retention period, personal data is deleted or anonymized in accordance with reasonable data management practices. You may also request earlier deletion of your data as described in Section 8 below.

Section 6

Cookies & Site Analytics

This website does not use first-party tracking cookies or advertising cookies of any kind. We do not deploy Google Analytics, Google Tag Manager, Facebook Pixel, or any other third-party behavioral advertising or cross-site tracking technology.

We use Cloudflare's privacy-respecting web analytics, which collects aggregated, non-personal traffic data (including approximate page views, general regional traffic distribution, and basic browser/device category data) without creating individual visitor profiles, without persistent browser cookies, and without cross-site tracking. This analytics data is used solely to understand overall website performance and cannot be used to identify individual visitors.

Cloudflare's infrastructure may set strictly necessary technical cookies required for network-level functions such as security, DDoS protection, and connection routing. These cookies are not used for tracking or advertising and cannot be disabled without affecting core site functionality.

Additionally, this website uses a session recording script (self-hosted analytics) with a sampling rate of 15% and moderate masking enabled. This tool is configured to capture anonymized interaction patterns (such as click and scroll behavior) to help improve site usability. It is explicitly configured not to capture or record any form field inputs, payment information, or personally identifiable information.

Section 7

Children's Privacy

This website and all associated services are intended exclusively for adult women aged 18 years and older. We do not knowingly collect personal information from any person under the age of 18. If you believe that a person under 18 has submitted personal information to us, please contact us immediately at the address provided in Section 10 and we will take prompt steps to delete that information.

Section 8

Your Rights

Depending on your location and applicable law, you may have some or all of the following rights with respect to your personal data. We are committed to honoring these rights in good faith regardless of whether they are strictly required by the laws of your specific jurisdiction:

  • Right to Access: You may request a copy of the personal information we hold about you.
  • Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.
  • Right to Deletion: You may request that we delete your personal information, subject to any legal retention obligations that require us to retain certain records.
  • Right to Object: You may object to the processing of your personal data in certain circumstances.
  • Right to Data Portability: Where applicable, you may request that we provide your personal data in a portable, machine-readable format.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of these rights, please contact us using the information provided in Section 10. We will respond to all legitimate requests within thirty (30) days. There is no charge for exercising these rights, unless requests are manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline the request, with explanation.

Section 9

Data Security

We implement reasonable and appropriate technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • All data transmitted between your browser and this website is encrypted via TLS (Transport Layer Security)
  • Payment data is processed exclusively through Stripe's PCI DSS Level 1 certified infrastructure and is never transmitted to or stored on our servers
  • Booking data is stored within Acuity Scheduling's secure, access-controlled platform
  • Entry codes and access details are stored only within the Acuity booking record and are deleted following session completion
  • Access to booking and client records is restricted solely to the Facilitator

While we employ these safeguards, no method of electronic transmission or data storage is 100% secure. We cannot guarantee the absolute security of information transmitted over the internet. In the event of a data security incident that affects your personal information, we will notify you as required by applicable law.

Section 10

Changes to This Policy & Contact

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we provide. The effective date at the top of this document will be updated to reflect the date of the most recent revision. We encourage you to review this page periodically. Continued use of this website or booking of sessions following any update constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

Norbert Seres
Private Wellness Facilitator
Freedom From Patterns
Pensacola, Florida, USA
Phone: (850) 733-8872
Email: