Privacy Policy

We collect information in the following categories:

Information you provide directly: When practitioners submit a listing, we collect personal name, professional name, email address, website URL, profile photograph, service descriptions, and any other information included in the submission form. When users contact us, we collect name, email, and message content.

Information collected automatically: When you visit our website, we automatically collect certain technical information including your IP address, browser type, referring pages, pages viewed, and the date and time of your visit. This information is collected via server logs and analytics tools.

Cookies and similar technologies: We use cookies and similar tracking technologies to maintain session state, remember preferences, and analyse website traffic. See Section 4 for more detail.

We use the information we collect to:

• Operate and maintain the directory, including displaying practitioner listings and reviews
• Process practitioner listing submissions and contact inquiries
• Communicate with practitioners and users regarding their enquiries
• Detect and prevent fraud, abuse, and misuse of the platform
• Analyse and improve the performance and usability of our website
• Comply with legal obligations

We do not sell your personal information to third parties for marketing purposes.

Practitioner listing information (professional name, description, specialties, contact details) is displayed publicly on the directory as part of the service. Practitioners consent to this public display when submitting a listing.

We do not share personal information with third parties except in the following circumstances:

• Service providers: We use third-party services (including Supabase for database hosting) that process data on our behalf under data processing agreements
• Legal requirements: We may disclose information if required by law, court order, or government authority
• Safety: We may share information where necessary to protect the safety of users or the public
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction

We use the following types of cookies:

• Essential cookies: Required for the basic operation of the website (session management, security)
• Analytics cookies: Help us understand how visitors interact with our website (pages visited, time on site). We use anonymised aggregate data only
• Preference cookies: Remember your settings and preferences across visits

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the website.

We retain practitioner listing data for as long as the listing is active on the directory. Removed listings are retained in anonymised form for fraud prevention purposes for up to 3 years.

Contact form submissions and enquiry correspondence are retained for 2 years.

Analytics data is retained in aggregate form indefinitely and in raw form for up to 26 months.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, please contact us. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data storage, access controls, and secure transmission protocols.

No method of data transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Our website uses the following third-party services that may collect or process data:

• Supabase — Database and backend infrastructure (supabase.com)
• Google Fonts — Typography delivery (fonts.google.com)

Each of these services has their own privacy policy governing their use of data. We are not responsible for the privacy practices of third-party services.

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on the website. The "Last updated" date at the top of this policy reflects the date of the most recent revision.

Your continued use of the website after any changes constitutes your acceptance of the updated policy.

For questions about this Privacy Policy or to exercise your data rights, please contact us at hello@thestarcatalog.com or through our contact form.