Privacy Policy
How F+F Protects Your Privacy
Last updated: September 10, 2026
Fallow + Floret, LLC (“we,” “us,” “our”) respects your privacy. This policy explains what personal information we collect through fallowfloret.com and our booking, membership, and communication tools; how we use it; and the choices you have. It sits alongside our Terms of Service, which covers the scope and rules of working with us, and our Payment Policy, which covers billing, cacellations, and refunds. Together, these three pages describe the whole arrangement — you don’t need to read all of them at once. We provide non-clinical support for people living with chronic illness, often internationally — including clients in the European Union and California. The information our clients share with us is deeply personal, and we treat all of it with care.
Who we are
Our website address is: http://fallowfloret.com. Contact us anytime at info@fallowfloret.com.
Our services and your health information
Fallow + Floret provides non-clinical chronic illness support. We are not medical providers, and our services are not medical care — see our Terms of Service for the full scope of our work. Even though we are not a medical practice, much of what clients share with us concerns their health, diagnoses, symptoms, and daily lives with illness. We recognize how sensitive that is and handle it accordingly.
Information about your health is treated with heightened protection: we limit what we collect to what is needed to support you, we use secure channels for sensitive communications (described under “Confidentiality and data security”), and we do not disclose it except as described in this policy.
Information we collect
Contact inquiries. When you reach out through our contact form or by email, we collect the information you choose to share — typically your name, email address, phone number, location, and details about your condition and support needs. We use this only to respond to you and arrange services.
Booking and client records. If you schedule a session or book services, we collect the information you provide through our scheduling platform (see “Third-party services”), such as your name, contact details, appointment preferences, and any intake information you share with us. This lets us prepare for and provide your support.
Comments. If comments are enabled, we collect the data shown in the comments form, plus your IP address and browser user agent string for spam detection. An anonymized hash of your email address may be shared with the Gravatar service so your profile picture can appear next to your comment. Gravatar’s privacy policy is available at https://automattic.com/privacy/.
Media. If you upload images to the website, avoid including embedded location data (EXIF GPS). Visitors can download and extract location data from images on the site.
Hardship accommodation requests. If you request a hardship accommodation, we collect only what you choose to tell us about your circumstances. We do not require documentation, we use this information solely to assess and provide the accommodation, and we do not retain hardship details after the accommodation is arranged — only the arrangement itself.
Third-party services we use
We rely on trusted third-party providers to run our practice. Each processes your data under its own privacy policy, which we link to on their respective sites — please review them:
Stripe (payment processing). Payments made through our booking platform are processed by Stripe. Stripe receives the information necessary to process your payment — such as your name, email address, and payment details — directly at checkout; we do not receive or store your full card details. Stripe processes payments under its own privacy policy and security standards, and may retain transaction records as required by financial regulations. You can read Stripe’s privacy policy on stripe.com.
Acuity Scheduling (booking, appointment). When you book a session or consultation, your booking details and any forms you complete are processed through Acuity Scheduling (operated by Squarespace). Acuity may send you appointment reminders and confirmation emails directly.
Spam detection. Comments may be checked through an automated spam detection service.
Gravatar. As described above, a hash of your email may be shared with Gravatar when you comment.
We do not sell your personal information.
How we use your information
We use your information to respond to inquiries, schedule and provide services, communicate with clients, administer memberships, maintain site security, and comply with legal obligations. Where you are in the EU, UK, or California, we rely on the following legal bases: performance of a contract (for booked services and memberships), explicit consent (for health-related information you share with us), consent (for optional features like saved comment details), legitimate interests (site security, responding to general inquiries), and legal obligation.
Cookies
If you leave a comment, you may opt in to saving your name, email address, and website in cookies. These last one year for your convenience.
Visiting our login page sets a temporary cookie to check whether your browser accepts cookies; it holds no personal data and is discarded when you close your browser.
Logging in sets cookies saving your login and screen-display preferences. Login cookies last two days (two weeks with “Remember Me”); screen options cookies last one year. Logging out removes login cookies.
If you edit or publish an article, an additional cookie indicating that post ID is saved in your browser and expires after one day.
Acuity pages you interact with (e.g., booking pages or Patreon itself) may also set their own cookies — see their privacy policies for details.
Embedded content from other websites
Articles on this site may include embedded content (videos, images, articles). Embedded content behaves exactly as if you had visited the other website. Those sites may collect data about you, use their own cookies, embed third-party tracking, and monitor your interaction with the content — including if you have an account and are logged in there.
How long we retain your data
Comments and their metadata are retained indefinitely so we can automatically recognize and approve follow-up comments. Inquiry emails and booking records are kept as long as reasonably needed to respond, to provide continuity of support, and for the period required by tax and record-keeping law. Health-related information you share as a client is kept only as long as needed to provide your services and handle follow-up communications, unless retention is legally required. If you register on our site, you can see, edit, or delete your profile information at any time (except usernames, which cannot be changed).
Your rights over your data
Everyone. If you have an account, have left comments, or contacted us, you can request an export of the personal data we hold about you, or ask us to erase it (excluding data we must keep for administrative, legal, or security purposes). Email info@fallowfloret.com and we’ll respond promptly.
EU/UK residents (GDPR). You have the right to access, correct, delete, restrict, or object to processing of your personal data; to withdraw consent where we relied on it; and to lodge a complaint with your local supervisory authority. Health-related data is “special category” data under GDPR, and we collect it only with your explicit consent.
California residents (CCPA/CPRA). You have the right to know what personal information we collect and how it’s used; to request deletion; to correct inaccurate information; and not to be discriminated against for exercising these rights. Chronic illness information is “sensitive personal information” under California law. We do not sell or share your personal information for cross-context behavioral advertising, so no opt-out is needed — but you can opt out of marketing communications at any time by emailing us.
We will not retaliate or discriminate against anyone for exercising their privacy rights.
Confidentiality and data security
Confidentiality is foundational to our work. Clients share deeply personal information with us — about their health, their daily lives, and their futures — and we handle all of it with strict discretion.
To protect the information entrusted to us, we use reasonable technical and organizational safeguards, including:
Encrypted email for sensitive client communications;
Secure, private teleconferencing for virtual meetings rather than unsecured channels;
Strong access controls, including the use of VPNs when handling client data remotely;
Careful handling practices on our devices and accounts, keeping client information out of unsecured tools wherever practical.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security — but we design our practices around minimizing what we collect, limiting who can access it, and protecting it at every step we control.
Please do your part: use strong passwords for any accounts on our platforms, and be mindful when sharing sensitive details over channels we don’t control (for example, text messages and social media DMs are not encrypted).
International data transfers
Because we operate internationally, your information may be transferred to and processed in countries other than your own, including the United States. We work with providers that commit to appropriate protections for such transfers.
Age restriction
Our services are intended solely for adults. We do not work with anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have received information from a person under 18, we will delete it. Our website is not directed to children.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.