Privacy Policy

Controller: Summer O'Neill Health
Email: summeroneillhealth@gmail.com
Website: summeroneillhealth.com

Summer O'Neill is the trading name of an experienced women's health practitioner. Your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and, where applicable, the UK Data Protection Act and other local privacy laws.

The SOM Assessment™ asks about your symptoms, cycle, sleep, stress, energy and lifestyle. This is health data, which is a special category of personal data under GDPR Article 9. We process this data only on the basis of your explicit, opt-in consent. You give this consent by ticking the checkbox before submitting your email address. Without consent, we do not store your email and no report is sent.

You may withdraw your consent at any time. Unsubscribe here, or email us and we will delete your data.

• On purchase: name, email, payment information (processed by Stripe — we do not store card details)
• On the SOM Assessment: name (optional), email, and your answers to health questions
• On contact form: name, email, message
• On newsletter signup: name, email

• To generate and deliver your personal SOM report and module recommendations
• To send the educational nurture email sequence (only with your consent)
• To fulfil purchases of digital products
• To respond to customer enquiries
• To improve our content and services

• Explicit consent (Art. 9 + Art. 6(1)(a)): for processing health data and sending marketing/nurture emails
• Contract (Art. 6(1)(b)): for delivering purchases
• Legitimate interest (Art. 6(1)(f)): for customer service

• Financial records (invoices): 7 years (legal obligation)
• Assessment answers: maximum 2 years
• Email contacts: maximum 1 year after last interaction, unless you remain an active subscriber
• Contact form messages: maximum 1 year

You have the right to: access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent. To exercise any right, email summeroneillhealth@gmail.com. You may also complain to your local data protection authority.

We never sell your data. We use the following processors:

• Stripe: payment processing (subject to Stripe's own privacy policy)
• Resend: email delivery
• Base44: hosting platform and database

Data processor agreements are in place with all processors.

We use only functional cookies necessary for the website to operate. We do not place tracking or advertising cookies without your explicit consent. Analytics, where used, is anonymised.

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. All connections are encrypted with SSL/TLS. Access to personal data in our database is restricted to authorised administrators only.

As we serve women in the US, UK, Australia, Canada and the EU, your data may be processed by our processors outside the EU/EEA. We rely on standard contractual clauses (or an equivalent safeguard) for such transfers, as required by GDPR Chapter V.

For any question about this policy or your personal data, contact:
summeroneillhealth@gmail.com