Legal
Privacy Policy
1. Who We Are
The Lighthouse Project ("we", "us", "our") is a private coaching practice founded by Andrea Merlino, providing scheduled life coaching and relationship coaching sessions. We are committed to protecting the privacy of every client who uses our website or client portal.
For privacy enquiries, contact us at: privacy@thelighthouseproject.com
2. What Data We Collect
When you register for or use our client portal, we collect:
- Full name and date of birth
- Phone number and email address
- Appointment history and scheduling information
- Messages sent through the portal
We do not collect clinical diagnoses, medical details, or therapy notes through this portal. The Lighthouse Project provides coaching services only — not therapy or medical treatment.
3. Why We Collect It
- Session delivery — to schedule and manage your coaching appointments
- Communication — to send session confirmations and respond to your messages
- Legal compliance — to meet our recordkeeping obligations
4. How It Is Stored
Your data is stored in a Supabase (PostgreSQL) database. All data is encrypted at rest and in transit using industry-standard TLS encryption. Access to the database is restricted by Row-Level Security policies so that only you and Andrea Merlino can view your records.
5. Who Can Access Your Data
Only two parties can access your personal information:
- You — via the client portal using your credentials
- Andrea Merlino — via the secure admin panel
We do not sell, share, or disclose your data to third parties, advertisers, or analytics providers.
6. Data Retention
We retain your records for a minimum of 7 years from your last session, in line with standard recordkeeping requirements. After this period, records are securely deleted unless a longer retention period is required by law.
7. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — request that we delete your data, subject to legal retention requirements
To exercise any of these rights, contact us at privacy@thelighthouseproject.com. We will respond within 30 days.
8. Cookies
This website uses only strictly necessary session cookies provided by Supabase Auth to keep you logged in to the client portal. We do not use any third-party tracking, advertising, or analytics cookies. See our Cookie Policy for full details.
9. Changes to This Policy
If we make material changes to this Privacy Policy, we will update the effective date above and notify active portal users by email at least 14 days before the changes take effect.