Privacy Policy

Your privacy matters. This policy explains how Kathryn Norris, operating as Ceres Movement ("I," "me," "my," or "Ceres Movement") collects, uses, and protects your information when you visit our website, subscribe to emails, book sessions, or otherwise interact with us online or in person.

By using our site or services, you agree to this Privacy Policy.

1. Information we collect

We collect information in three ways:

a) Information you provide directly

• Contact details (name, email, phone).
• Booking details, preferences, and intake notes you choose to share (e.g., interests, goals, relevant health context).
• Messages you send to us (forms, email, direct messages).

b) Payment and scheduling information

• Payment details are processed by third-party providers (e.g., Stripe, PayPal). We do not store full card numbers on our systems.
• Scheduling details you submit via your client portal or scheduling tools (e.g., name, email, time zone, availability).

c) Technical information

• Basic analytics and cookie data from your device and browser (pages viewed, referring site, approximate location, and similar usage information). This helps us improve site performance and content.

You choose what to share. Please avoid submitting highly sensitive medical information through general web forms or email.

2. How we use your information

We use your information to register you for classes, workshops, or 1:1 sessions; communicate about scheduling, updates, and resources; send newsletters and announcements only if you opt in (via Substack); host live and online sessions and share recordings or resources; maintain business records for legal, tax, and administrative purposes; and improve our website, offerings, and communications.

We do not sell or rent your personal information.

3. Data sharing and third-party services

We share limited information with trusted service providers who help us operate our business. These providers use your data only to perform services on our behalf and are bound by their own privacy policies. Categories include:

• Payment processors: e.g., Stripe, PayPal
• Scheduling and client management: e.g., Practice Better
• Newsletter and communications: e.g., Substack
• Live sessions and video hosting: e.g., Zoom (live), Vimeo (hosting)
• File storage and collaboration: e.g., Dropbox, Google Workspace
• Social media and analytics: e.g., Instagram/Meta

We may also disclose information if required by law, to protect our rights and safety, or in connection with a business reorganization.

4. Cookies and analytics

We may use cookies or similar technologies to operate our site, remember preferences, and understand how visitors use our pages. You can control cookies through your browser settings. Disabling cookies may affect some site features. Platforms like Instagram/Meta may use their own cookies or pixels under their own privacy policies.

5. Data security

We take reasonable administrative, technical, and organizational measures to protect your information. No online system is 100% secure; please share information thoughtfully and contact us if you have concerns.

6. Data retention

We keep personal information only as long as needed for the purposes described in this policy — providing services, maintaining records, complying with legal obligations. When no longer needed, we securely delete or anonymize it.

7. Your choices and rights

• Email preferences: Unsubscribe anytime via the Substack link or by contacting us.
• Access, correction, or deletion: Email us to request access to, correction of, or deletion of your personal information (subject to applicable law and legitimate business needs).
• Cookies: Manage cookie settings in your browser.
• Third-party preferences: Manage privacy settings directly with tools you use (e.g., Practice Better, Substack, Zoom, Instagram/Meta).

8. Children's privacy

Our website and services are intended for adults 18 and older. We do not knowingly collect information from children under 18 without parental consent. If you believe a child has provided personal information, contact us to remove it.

9. International visitors

Our services are operated in the United States. If you access the site from outside the U.S., you understand your information may be transferred to and processed in the U.S. where data laws may differ from those in your region.

10. Changes to this policy

We may update this policy from time to time. Changes will be posted here with a new "Last updated" date. Material changes will be highlighted where appropriate.

11. Contact

Kathryn Norris, Sole Proprietor
operating as Ceres Movement
kathryn@ceresmovement.com