Privacy Policy

Effective Date: 25 March 2026

Practitioner: Michaela Tutty (Desire Pathways)

Contact: michaela@desirepathways.co

1. Introduction

Your privacy is fundamental to our work together. I am committed to handling your personal information responsibly and in accordance with the Privacy Act 2020 (New Zealand). This policy explains how I collect, use, store, and protect your information. This applies to all clients, whether located in New Zealand or overseas.

2. Information I Collect

I collect and store the following personal information:

  • Contact Details: Name, email address, and phone number.

  • Session Information: Intake forms, session goals, and somatic reflections you choose to share.

  • Payment Data: Processed securely via Stripe. I do not store your credit card details on my own servers.

  • Website Analytics: Non-identifiable data regarding visitor numbers and demographics to help improve my website.

  • Session Summaries: Internal summaries processed by Heidi AI to ensure accurate record-keeping and professional focus.

3. Purpose of Collection

Your information is collected specifically for:

  • Providing safe, professional, and effective somatic coaching services.

  • Maintaining accurate records of your progress and our session plans.

  • Managing bookings and securing payments via Acuity and Stripe.

  • Complying with legal and professional obligations, including mandatory reporting if there is a clear and imminent risk of serious harm to yourself or others.

4. Storage and Security

  • Digital Records: All client data is stored securely on password-protected platforms utilising two-factor authentication (2FA).

  • AI Record-Keeping: I use Heidi AI for internal session summaries. This allows me to be fully present with you during our time together. These summaries are for my professional use only; you will receive a separate, human-written summary from me.

  • Retention: In line with professional best practices, client records are retained for 7 years before being securely destroyed.

  • Security Disclaimer: While I use encrypted, high-security platforms, no digital transmission is 100% secure. I take all reasonable steps to protect your data from unauthorised access.

5. Disclosure of Information

Your information is strictly confidential. It is only shared:

  • With your explicit consent (e.g., for a referral to a medical or psychological practitioner).

  • When legally required by a court of law or statutory authority.

  • Note: Your information is never sold or disclosed for marketing purposes without your express permission.

6. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access the personal information I hold about you.

  • Request corrections to any inaccurate information.

  • Opt-out: You may opt out of AI-assisted note-taking at any time via your booking form or by notifying me in writing.

To exercise these rights or for any privacy concerns, please contact me at michaela@desirepathways.co.

7. International Clients

If you are accessing services from outside New Zealand, your information is processed via digital platforms (Acuity, Stripe, Heidi AI) that maintain robust international privacy and security standards.