Skip to content
Meraki — a soul's journey to wellness

Legal

Privacy policy

Last updated September 2026

This page is written as a starting point in plain language. Please have it reviewed by a qualified adviser before relying on it.

Meraki, A Soul's Journey to Wellness is a small, practitioner-led practice in Thunder Bay. This policy explains what personal information the site collects, why, where it goes, and how to ask about it.

Who is responsible

Shannon Scott, trading as Meraki, A Soul's Journey to Wellness, 283 Bay Street, Thunder Bay, ON P7B 1R7, Canada, is responsible for the personal information this website collects. In Canadian law she is the accountable person; in European and UK law she is the data controller. There is no separate privacy office — she reads and answers every request herself at meraki.asoulsjourney@gmail.com.

What is collected, and when

Booking enquiry — your name, email address, an optional phone number, the session preferences you pick, and whatever you write in your message. If you mention your body or health so the session can be adapted, that is health information and it is treated with extra care.

Gift-card request — your name, email address, the amount you would like, and optionally the recipient's first name and a note.

Mailing list — your email address, plus a record of the exact consent wording you agreed to, the time you agreed, and the page you agreed on.

The Sathu, Manuscripts and coming-soon path pages take no orders. Their join-the-list forms store your email address, the path you asked about, the consent wording and the time you agreed. The Marketplace maker form stores your name, email address, what you make, the consent wording and the time you agreed, so Shannon can consider and reply to your introduction.

Every form has a box you tick to confirm you are happy for the details to be kept. The wording beside that box is saved with your submission, so we can always show what you agreed to and when.

Nothing is collected in the background as you browse. There are no analytics, advertising or tracking scripts on any page, and the site does not record your IP address, device or location in its own records.

Why it is collected, and on what basis

Enquiry details are used to reply to you, arrange a session or gift card, and prepare properly for your visit. In the language of European law, that processing is necessary to take the steps you asked for before a session is booked (GDPR Article 6(1)(b)).

Health details you volunteer are used only to make the session safe and suitable for you, and for nothing else. They are collected only with your explicit consent — the box you tick — because health information is a special category (GDPR Article 9(2)(a)). You may leave it out, or withdraw that consent, at any time.

Mailing-list addresses are used only to send the occasional note you asked for, on the basis of your consent (Article 6(1)(a)). Withdrawing it is as simple as unsubscribing or writing to us.

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), personal information is collected only with your knowledge and consent, used only for the purpose it was given, and kept only as long as that purpose needs.

No decisions about you are made automatically, and there is no profiling.

If you become a client

Once you book a session, Shannon Scott keeps a client card for you in the private studio room on this site. It holds your name and contact details, how you prefer to be reached, your intake answers, her own session notes (pressure, preferences, what helped), the sessions you have booked or attended, and a record of what you have paid — deposits, payments, gift cards used and any refunds.

Health notes — anything about your body, injuries or conditions that helps her work safely — are kept on your card only if you have told her it is all right. She records the date you agreed. You can withdraw that agreement at any time and the health notes are deleted while the rest of the card stays.

To prepare for a session she may write down what you are hoping for and ask a writing tool to draft a short private preparation note for her. The tool is run by an outside language-model service in the United States. It receives your first name, your goals, her session notes and, only if you agreed, your health notes — never your surname, email address or phone number. The draft is a suggestion for her own preparation; it is not medical advice and no decision about you is made from it. Her professional judgement, not the tool, leads the session.

Your card also records whether you are happy to receive appointment reminders and whether you have asked not to be contacted. Both are honoured.

Where it is stored, and who can see it

Form submissions and client cards are held in an encrypted database run by the site's hosting provider on servers in the United States. Because of that, the information may be subject to United States law while it is there. Apart from the preparation note described above, nothing else about you leaves Canada through this site.

Only Shannon Scott can read what you send, through a private, password-protected room on this site. The public pages can only add a submission; they cannot read anything back. Every sign-in to that room is recorded, and each time a copy of someone's records is prepared or erased, that action is logged.

Everything travels over an encrypted connection. Personal information is never sold, rented or traded, and is shared with a third party only where the law requires it.

If we ever learn of a breach that creates a real risk of significant harm to you, we will tell you and report it to the Office of the Privacy Commissioner of Canada, as PIPEDA requires. For anyone covered by European or UK law, the relevant supervisory authority is told within 72 hours where that law requires it.

How long it is kept

Booking enquiries, gift-card requests and Marketplace maker introductions are deleted automatically twelve months after they are sent.

A client card is kept while you are a client and for as long as good professional record-keeping requires afterwards, and no longer. Payment records are kept for the six years Canadian tax law requires. If you ask for your card to be erased, it is — along with your appointments and notes — unless a legal duty means part of it must be kept, in which case you will be told which part and why.

Mailing-list addresses are kept until you unsubscribe. The record of your consent — the wording, the date and the page — is kept for three years after that, which is the period Canada's Anti-Spam Legislation (CASL) expects.

When you ask for a copy of your information or ask for it to be erased, a short note that the request was handled — the date, the type of request, and a one-way fingerprint of your email address rather than the address itself — is kept for two years, so we can show the request was honoured. It cannot be turned back into your address.

Email and CASL

You are only added to the mailing list if you tick the box yourself; it is never pre-ticked. Every note we send names the sender and the business, gives a postal address, and includes a working unsubscribe link.

Replies to your own enquiry are not marketing email; they are the answer you asked for.

Other services this site talks to

Online booking and payment for sessions happen on Vagaro, a separate company with its own privacy policy. Nothing you enter on Vagaro passes through this website.

The map on the Visit page is provided by Google and loads only when you press "Show the map". Until then, nothing is requested from Google. Once it loads, Google may record your visit under its own policy.

Links to Facebook and Instagram take you to those companies' own sites, where their practices apply, not this policy.

The typefaces on this site are served from this site itself, not from a third party.

Cookies and browser storage

This site sets no advertising, analytics or tracking cookies, so no cookie banner is shown. The two strictly necessary entries it does use are listed, one by one, in the cookie policy.

Children

The studio is for adults, and this website is not aimed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us details, write to us and they will be deleted.

Your rights

You can ask what personal information is held about you and receive a copy of it, ask for it to be corrected, ask for it to be deleted, or withdraw your consent at any time. You can also ask for a copy of the consent record kept for your mailing-list sign-up.

Requests are answered within thirty days. If you are not satisfied with the response, you may contact the Office of the Privacy Commissioner of Canada.

To make a request, email meraki.asoulsjourney@gmail.com from the address you used on the site, or write to the address below. We may ask a simple question to be sure the request comes from you before releasing anything.

If you are in the European Union, EEA or United Kingdom

The practice is in Canada and serves people in Thunder Bay, Ontario. The European Commission and the United Kingdom both recognise Canadian federal privacy law as offering adequate protection. If you write to us from the EU, EEA or UK, the General Data Protection Regulation (GDPR) or UK GDPR gives you the following rights on top of the ones above: access to your data and a copy of it in a common, machine-readable format; correction; erasure; restriction of processing; objection; portability; and the right to withdraw consent at any time without affecting what was done before you withdrew it.

Requests under those laws are answered within one month. You also have the right to lodge a complaint with the data-protection authority in the country where you live or work — in the UK, the Information Commissioner's Office — and doing so costs nothing.

Your information is transferred from Canada to the United States for storage, as described above. That transfer takes place under the hosting provider's data-processing terms, which incorporate the European Commission's Standard Contractual Clauses; a copy of the relevant safeguards can be requested from us.

Because the practice is a sole practitioner whose processing of visitors' data is occasional and small in scale, no representative in the EU or UK has been appointed (GDPR Article 27(2)) and no data-protection officer is required. Write to the address below instead, and you will be answered personally.

Who is accountable

Shannon Scott is the privacy contact for this practice and handles every access, correction, deletion or complaint request personally.

Email meraki.asoulsjourney@gmail.com, or write to Shannon Scott, Meraki, A Soul's Journey to Wellness, 283 Bay Street, Thunder Bay, ON P7B 1R7, Canada.

Changes to this policy

If what the site collects ever changes, this page changes with it and the date at the top is updated. Anything already collected stays governed by the version you agreed to.