Privacy Notice

1. Who we are

Dr. Marcia Hawk, LLC ("we", "us") operates this coaching booking service ("Tutorio"). We are the data controller for the personal data described in this notice. Contact: consulting@drmarciahawk.com.

2. Data we collect and why

• Account data — name, email address, login credentials. Used to create and secure your account (legal basis: performance of a contract).
• Booking data — session subject, time, duration, price, and session notes. Used to schedule, deliver, and keep records of your sessions (contract).
• Study-plan inputs — the topic, skill level, and learning goal you submit to the AI study-plan feature. Used to generate your plan (contract).
• Support messages — emails you send us. Used to respond and resolve issues (legitimate interests).
• Usage and device data — IP address, device identifiers, and basic telemetry. Used for security, fraud prevention, and product improvement (legitimate interests).

Payment card details are collected and processed directly by Paddle, our Merchant of Record; we never see or store your card number.

3. Who we share data with

• Service providers — hosting, database, email delivery, and analytics providers that process data on our behalf under contract.
• Paddle — our Merchant of Record, for the sale of sessions, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law.

4. Retention

We keep your data only as long as needed for the purposes above and to meet legal, tax, and accounting obligations. When data is no longer needed, it is deleted or anonymised.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. To exercise any right, email consulting@drmarciahawk.com — we respond within one month. If you are in the EEA or UK, you also have the right to complain to your supervisory authority.

6. International transfers

Our service providers may process data outside your country, including in the United States. Where data leaves the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

7. Security

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

8. Cookies

We use essential cookies and local storage to keep you signed in and make the site work. We do not use marketing cookies. You can clear or block cookies in your browser settings; essential features may stop working if you do.

9. Changes

We may update this notice from time to time. The "last updated" date above shows the current version.