Privacy Policy
Finnegan's Apothecary
Last updated: February 9, 2026
1. Overview
Finnegan’s Apothecary (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, how it is stored, and the choices you have when you visit our website, book services, complete intake forms, or join our email list.
2. Information we collect
A. Information you provide
We collect information you choose to share, such as:
-
Contact information (name, email address, phone number if provided)
-
Booking details (service selected, appointment date/time, and information you enter during scheduling)
-
Health history or other health-related information you submit through intake forms (when used)
-
Messages and information you submit through contact forms or emails
B. Information collected automatically (website and security data)
When you use our website, Wix and security tools may automatically collect technical data such as:
-
Device and browser information
-
Log data (pages viewed, date/time of access, referring page)
-
IP address and approximate location (often derived from IP)
-
Information used for fraud prevention, bot detection, and security monitoring
We do not use this technical data to sell your information or to build advertising profiles. We use it only to operate and protect the site.
3. How we use your information
We use your information to:
-
Provide services and support (holistic health coaching, energy healing, and space/home clearings)
-
Schedule, manage, and communicate about appointments
-
Review intake forms ahead of appointments so session time is used effectively
-
Maintain client records needed to provide ongoing support
-
Send emails you opt into (newsletter, shop launch notifications, updates)
-
Protect our website from fraud, spam, and bots, and maintain site security
4. Sensitive information and health-related data
If you choose to share health history or other health-related information, we treat it as confidential and sensitive. We use it only to prepare for and provide the services you request. We do not sell health-related information and we do not share it with advertising platforms.
Finnegan’s Apothecary is not a medical provider and does not provide medical diagnosis, medical treatment, or emergency services. Do not use our forms to submit urgent or emergency concerns. If you have an urgent concern, contact your licensed provider or local emergency services.
5. Where your information is stored and who processes it
Service providers and platform processing
We use Wix to host our website and to provide site features such as forms, scheduling, and site security. When you submit information through the website, Wix processes and stores that information on our behalf. We may also use service providers to send communications (for example, appointment confirmations or emails you opt into). We share only the information that is reasonably necessary to operate the website, deliver requested services, and communicate with you.
6. Cookies and similar technologies
Our site may use cookies and similar technologies that are necessary for the website to function, to protect the site, and to improve performance. Wix and any Wix apps you enable may place cookies or use similar technologies. If you use a cookie banner/consent tool, you can manage preferences there; you can also control cookies through your browser settings.
7. What we do not do
-
We do not sell your personal information.
-
We do not sell or share health-related information with advertising platforms.
-
We do not knowingly collect personal information from children without a parent/guardian.
8. Data retention
We keep personal information only as long as reasonably necessary for the purposes described in this policy (for example, to provide services, maintain records, and meet legal or tax obligations).
Health intake forms
We collect health intake information so we can prepare for your appointment and use session time effectively. We keep completed health history forms only as long as reasonably necessary for coaching/support and our recordkeeping needs, and then delete them from our systems in accordance with our retention practices.
9. Security
We take reasonable steps to protect your information, including limiting access, using strong authentication where available, and maintaining privacy-conscious practices. No method of online transmission or storage is 100% secure, but we aim to use appropriate safeguards for the type of information we handle.
10. Your choices and rights
Email communications
If you opt in to receive emails (for example, a newsletter or shop launch notifications), you can unsubscribe at any time using the link in the email.
Access, correction, and deletion requests
You may contact us to request access to your personal information, to correct it, or to request deletion. We will verify your identity before fulfilling a request. If you request deletion, we will delete your information from our active systems where feasible. We may retain limited records only when required for legitimate business needs (for example, tax, accounting, or dispute resolution). If we retain anything, we will tell you what we kept and why.
11. Data requests (GDPR-style access and deletion)
If you would like a copy of your data or would like your data deleted, email us at finnegansapothecary@gmail.com with the subject line “Data Request.” Please include the name and email address you used on our website so we can verify your identity.
How we fulfill requests using Wix tools
For requests involving data collected through our Wix website, we use Wix’s “Visitor data” / “Data request” tools to:
-
generate a copy of your data and send it to you, or
-
permanently delete your data from Wix systems
Wix indicates that data files and deletion requests are processed within approximately 48 hours, and that site owners are responsible for sending data exports to visitors and notifying them once deletion is complete.
Important note about third-party services
If we use additional services connected to the website (for example, email marketing tools), we are responsible for handling access/deletion requests in those systems as well.
Request timing
We aim to respond to verified requests within a reasonable time and will complete requests without undue delay.
12. Privacy rights for certain regions
A. California (CCPA/CPRA)
If you are a California resident, you may have the right to request information about the categories of personal information we collect and the purposes for which we use it, and you may have rights to access, delete, or correct certain personal information. You may also have the right to opt out of the sale or sharing of personal information. We do not sell personal information.
B. European Economic Area, United Kingdom, Switzerland (GDPR)
If you are located in the EEA/UK/Switzerland, we process personal data under lawful bases such as:
-
performing a contract (to provide requested services)
-
your consent (for marketing emails and any optional information you provide)
-
legitimate interests (site security, fraud prevention, and basic business operations)
You may have rights to access, correct, delete, object, or restrict processing, and to request data portability. You may also withdraw consent at any time for processing based on consent.
13. Massachusetts privacy note
We do not request Social Security numbers, driver’s license/state ID numbers, or payment card numbers through health intake forms. Massachusetts regulations define certain combinations of identifiers as “personal information” and require safeguards if businesses handle them.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.
15. Contact
Finnegan’s Apothecary
Email: finnegansapothecary@gmail.com
Location: Massachusetts, USA
​
